Privacy Policy — Cruse Control LLC

Last updated: 11 August 2026

This policy explains what personal information Cruse Control LLC ("Cruse Control", "we", "us") collects, how we use it, and the choices you have. It covers our website at crusecontrol.ai and the training and support services we sell through it (together, the "Services"). Our Services are intended for customers in the United States.

The short version: we collect only what we need to sign you in, take your payment, and deliver what you bought. We run no analytics, no advertising trackers, and no third-party embeds. We do not sell your personal information and we do not share it for advertising.

What we collect

• Account information. You sign in with Google. We receive your name, email address and profile picture from Google, and we store your account, your purchases and your entitlements in our own database. We never see or store a password — sign-in runs through Supabase, our authentication provider, and Google.
• Billing information. Payments are processed by Stripe. Stripe collects your payment card details and billing address; we never see or store your full card number. We keep the records Stripe gives us about your purchases and subscription status.
• Checkout consent records. When you buy a subscription, we keep a record proving what you agreed to: the renewal terms that were shown to you, a SHA-256 fingerprint of that exact text, the time of your consent, and the IP address and browser user-agent the consent came from. We keep this because automatic-renewal laws require us to be able to show what you were told and that you agreed.
• Discord information. If you connect Discord to your account so we can grant you access to our support server, we store your Discord username and user ID and the link between them and your account. Anything you post in a Discord server is also collected and retained by Discord under Discord's own privacy policy, independently of us.
• Onboarding details you give us. After a purchase we may ask a short intake question (for example, about your current tools). What you write is forwarded to a private channel our team reads so we can prepare your engagement.
• Emails and support messages. We keep the emails you exchange with us and the transactional emails we send you (receipts, welcome and scheduling messages), which are delivered through Brevo, our email provider.
• Technical basics. Like nearly every website, our servers see the IP address of incoming requests and use it for security and rate limiting.

How we use it

• To deliver the Services — creating your account, granting what you bought, scheduling your sessions, and answering your questions.
• To bill you — processing payments, managing your subscription, and handling cancellations and refunds.
• To meet legal obligations — keeping the consent, billing and tax records the law requires us to keep.
• To keep the Services secure — preventing abuse, rate limiting, and investigating problems.

That is the whole list. We do not use your information for advertising, we do not build profiles, and we do not make automated decisions about you that have legal or similarly significant effects.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

Who we share it with

We share personal information only with the service providers that run the Services for us, and only so they can do that:

• Stripe — payment processing and subscription billing.
• Supabase — authentication and our database.
• Google — sign-in (Google OAuth).
• Brevo — transactional email delivery.
• Discord — the platform our support community runs on.
• Render — hosting for our website and application.

We may also disclose information if the law requires it — in response to a valid legal demand — or to protect the Services, our customers, or the public from serious harm. There is no one else: no advertising partners, no data brokers.

Cookies

We use only strictly necessary cookies: the authentication cookies (set by Supabase on our domain) that keep you signed in. They exist so the site knows it is you; the Services cannot work without them.

That is all. No analytics cookies, no advertising or tracking cookies, no third-party embeds that set cookies, and nothing stored in your browser's local storage. Because these cookies are strictly necessary, no consent banner is required — this notice is the disclosure.

How long we keep it

• Account information — kept while your account is open. Email us to close your account and delete it.
• Billing, tax and consent records — kept as long as tax, accounting and consumer-protection law requires, even after your account closes.
• Onboarding and support messages — kept while we work with you and for a reasonable period afterwards so we have context if you come back.
• Discord's copies — whatever you posted on Discord is retained by Discord under its own policy; we cannot delete it for you.

Your rights and choices

Whatever state you live in, you can email us to:

• access a copy of the personal information we hold about you;
• correct it if it is wrong;
• delete your account and associated personal information, subject to the records we are legally required to keep (above);
• not be discriminated against for exercising any of these rights.

We answer verified requests within 45 days. Because we do not sell or share personal information for advertising, there is nothing for an opt-out or "Do Not Sell or Share" request to switch off — but you are welcome to make one, and we will confirm that.

Security

Data is encrypted in transit. Payment details are held by Stripe, not by us. Access to customer data is limited to the people who need it to serve you. No system is perfectly secure, and we do not promise ours is; if we learn of a breach affecting your personal information, we will notify you as the law requires.

Children

The Services are for adults. They are not directed at children, and we do not knowingly collect personal information from anyone under 18. If we learn we have, we delete it.

Changes to this policy

If we change this policy materially, we will give you notice — by email or on the website — before the change takes effect. The date at the top always reflects the current version.

Contact

Privacy questions and requests: contact@crusecontrol.ai.