Privacy Policy

This Privacy Policy explains how Direct Control Lab collects, uses, shares, stores, and protects information when you use our websites, desktop host apps, mobile controller apps, browser controller, remote-session infrastructure, support surfaces, billing flows, and related services.

The product is designed around a local-first remote control model. Direct peer-to-peer routes are preferred when available. Relay, signaling, billing, support, diagnostics, and account services may still process information needed to deliver the service, secure accounts, prevent abuse, and support customers.

This policy is intended to be consistent with platform privacy review expectations, including accurate public privacy disclosures. Any marketplace privacy label must match the final app, SDKs, analytics, payment processors, support tooling, and production infrastructure actually used at launch.

The categories below describe the information we may collect directly, automatically, or through service providers. Not every category applies to every user or platform. Some information is collected only if you create an account, start a session, contact support, buy a subscription, enable diagnostics, or grant an operating-system permission.

Remote control products can expose sensitive on-screen information. You should only start a session on devices you own or are authorized to control, and you should close sensitive windows before sharing or controlling a host device.

When a session is active, screen media and control events may travel directly between the host and controller through encrypted WebRTC channels. If a direct route is not possible, traffic may pass through a relay so the session can work on restrictive networks. Relay routing does not change our default position that we do not intentionally store session recordings.

If optional features such as clipboard sync, file transfer, microphone audio, system audio, diagnostics export, or support-assisted troubleshooting are added or enabled, those features may process additional data. The app should present clear controls before those features are used.

We use information to operate the service, make sessions work across networks, secure accounts and devices, process payments, provide support, comply with law, and improve reliability. We do not use personal information for unrelated advertising profiles.

Where privacy laws require a legal basis, we rely on one or more of the following bases depending on the context.

We share information only as needed to provide, secure, bill, support, and improve the service. We require service providers to process information for our instructed purposes and to apply appropriate privacy and security safeguards.

Payment processing depends on where the purchase occurs. Web subscriptions may be processed by Stripe. Apple subscriptions and in-app purchases are processed through Apple and managed through the user's Apple account.

We receive limited billing information needed to provide access, confirm entitlement, prevent fraud, handle support, and comply with tax and accounting requirements. We do not receive or store full credit card numbers from Apple or Stripe.

We keep information only for as long as reasonably needed for the purposes described in this policy, unless a longer period is required or permitted by law. Retention periods vary by data type, account status, security need, and legal requirement.

Depending on your location, you may have rights to access, correct, delete, restrict, object to, or export personal information. You may also have the right to withdraw consent, opt out of certain sharing, or appeal a privacy decision.

To make a request, use the privacy choices page or contact support@compcontroll.org. We may need to verify your identity before fulfilling certain requests. We will respond within the time required by applicable law.

Residents of California and other states with comprehensive privacy laws may have additional rights depending on the law that applies to the business, the user, and the data. This section is intended to provide a practical notice for U.S. privacy requests even where a specific law may not yet apply to us by threshold.

We do not sell personal information. We do not share personal information for cross-context behavioral advertising unless a separate disclosure and required opt-out or consent path is provided. We do not knowingly sell or share personal information of children.

We use administrative, technical, and organizational safeguards designed to protect information against unauthorized access, loss, misuse, and disclosure. No internet service can guarantee absolute security, and remote control software depends on safe user behavior, secure devices, and protected credentials.

The service is not directed to children under 13, and it is not intended for child-directed marketplace categories. If a higher age threshold applies in your country or region, you must meet that threshold or use the service only with appropriate parent or guardian involvement.

We do not knowingly collect personal information from children in a way that requires verifiable parental consent. If you believe a child provided personal information, contact us so we can review and delete it where required.

We may process information in the United States and other countries where we or our service providers operate. Those countries may have privacy laws that differ from the laws where you live.

Where required, we use appropriate safeguards for international transfers, such as contractual protections, provider due diligence, and transfer mechanisms recognized by applicable law.

We may update this policy as the product, legal requirements, marketplace disclosures, infrastructure, or data practices change. The date at the top of the policy shows when it was last updated.

Questions, privacy requests, security reports, and complaints can be sent to support@compcontroll.org. You may also use the support page at https://compcontroll.org/support.