CtrlStack, Inc. (dba QueryPal)

Privacy Policy

CtrlStack, Inc. (dba QueryPal), a Delaware corporation (“we”, “us”, and “our”) provides this Privacy Policy (this “Policy”) to inform you about our collection, use, disclosure, and storage of information about you that we collect via CtrlStack website and related services and offerings (collectively, the “Site”). Please review this Policy carefully. By registering an account for the Site, or otherwise using the Site, you agree to the terms and conditions of this Policy. We may update this Policy from time to time at our discretion, for example, to keep up with changing laws regarding data processing. We will always keep the current version of this Policy posted on our website. By using the Site after a new version of this Policy has been posted, you agree to the terms and conditions of such version of this Policy.

Sharing Settings

Notwithstanding anything to the contrary in this Policy, please keep in mind that certain information submitted via the Site (for example your profile, goals, achievements, and tasks/lists) may be publicly visible to other users. You may choose whether certain items are shared publicly, shared with your friends, or kept private by adjusting your sharing settings on the Site.

Information we collect

“Personal Information” means information that can be used to identify you, such as your name and email address. We collect Personal Information that you voluntarily provide us, for example when you register a user account, sign up for mailing lists or newsletters, or otherwise reach out to us. Your submission of Personal Information is voluntary, but we may be unable to provide you requested information or services if you choose not to provide the necessary Personal Information.

The Site may give you the option to link your accounts on third-party platforms and services (collectively, “Third Party Providers”) so that we can import relevant logs and information for purposes of the services we provide you. This linking is optional but may enable a richer and more effective Site experience. If you do link such accounts, you acknowledge that the Site will request relevant information from such Third Party Providers, which may include Personal Information.

“Other Information” means information that does not identify you personally, and may include technical details regarding the device you use to access the Site, IP address, operating system, browser, referral URLs, page views, location data (if location services are enabled), clicks, etc. Our systems automatically collect this kind of Other Information when you interact with the Site. Other Information also includes information that may originally have been Personal Information but has been aggregated or anonymized such that it cannot be used to identify any individual.

Cookies; Similar Technology; Analytics

We use “cookies” to obtain certain types of data when your web browser accesses our website. Cookies are alphanumeric identifiers that we transfer to your computer’s hard drive through your web browser to enable our system to recognize you and your personalized settings, to better understand how you interact with the Site, to monitor aggregate usage, and to optimize web traffic routing on our website. Most browsers have settings to disable or limit cookies, but please note that certain areas or features of the Site may not be available or fully functional if you choose to disable cookies for our websites. We may also use pixel tags, web beacons, or similar technologies to understand how our users interact with our sites and emails. Our website does not respond to “do not track” signals. We may use similar technologies for purposes of retargeting ads (showing relevant ads on third-party platforms to users who have interacted with the Site).

We may also use third-party analytics services such as Google Analytics, which help us understand how users are finding and using the Site. Google Analytics collects information such as how often users visit the Site, what pages they visit when they do so, and what other sites they used prior to coming to the Site. We use the information we get from Google Analytics to improve the Site and our offerings and to provide more relevant advertising. To learn more about Google Analytics privacy practices, you can visit https://support.google.com/analytics/answer/6004245?hl=en. To opt out of Google Analytics metrics, you can follow the instructions at https://tools.google.com/dlpage/gaoptout.

We do not control third parties' collection or use of your information to serve interest-based advertising. You may be able to opt out of receiving personalized advertisements from companies that are members of the Network Advertising Initiative or who subscribe to the Digital Advertising Alliance’s Self-Regulatory Principles for Online Behavioral Advertising. For more information about this practice and to understand your options, please visit https://www.aboutads.info and https://www.networkadvertising.org/choices/. You may also use TRUSTe’s Preference Manager at https://preferences-mgr.truste.com.

Use of your information

We use your Personal Information:for the purposes for which you provided it to us (e.g., to create or update your user account, register you for newsletters, provide the service you requested, or process a transaction);to respond to your inquiries and communications to us; to personalize, improve, maintain, and operate the Site; to inform you about other opportunities, events, or services in which you may be interested, including those offered by our affiliates; to exercise or defend our rights and comply with statutory and regulatory requirements, including responding to lawful requests for information by governmental authorities; and for other reasons with your prior consent.

You can opt out of receiving newsletters and other promotional or marketing emails from us at any time by clicking the unsubscribe, opt-out, or similar link at the bottom of any such emails. Please note we may still contact you in connection with your account or for other administrative, non-marketing purposes.
We may use Other Information (which does not identify you personally) for any manner we deem appropriate, including without limitation to improve, maintain, and operate the Site.

Disclosure of your information

We will not sell your Personal Information to third parties. We may share your Personal Information with our affiliates and as needed to fulfill the purposes described in the “USE OF YOUR INFORMATION” section above, including:with our service providers, such as analytics, communications, and customer/technical support providers, who are only permitted to use the information on our behalf; as necessary to exercise or defend our rights or comply with applicable law or orders from law enforcement and other governmental authorities; and to other third parties with your prior consent.

Additionally, in the event of a merger, consolidation, sale, or transfer of all or substantially all of our assets or business, one of the assets that would generally be transferred is the information we have collected, which would be transferred subject to the applicable version of this Policy.

We may disclose Other Information (which does not identify you personally) to any parties and for any purposes we deem appropriate.

Location; Data retention; Security

We are based in the United States and by using the Site, you consent to your Personal Information being transferred to and stored in our data centers located in the United States. We may retain your information so long as we can reasonably foresee the information may be required in connection with our business relationship with you. In some cases, we will retain the information for a longer period as necessary to comply with our legal obligations, follow records retention policies, resolve disputes, and enforce our agreements. You may access and update your Personal Information by visiting your account profile. We have implemented reasonable physical, organizational, and technical procedures to secure the Personal Information we have in our possession. Unfortunately, no measures can be guaranteed to provide 100% security when dealing with internet connections, so please do not transmit any sensitive Personal Information to us.

Your California Privacy Rights

California law entitles California residents to certain additional protections regarding Personal Information. For purposes of this section alone, “Personal Information” means any information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular California resident or household.

We collect the following categories of Personal Information: identifiers, Internet or other electronic network activity information, log data, and geolocation data. We collect, use, and disclose Personal Information in the ways described above in our Privacy Policy. We do not sell Personal Information to third parties. California residents have the following rights to the extent granted by applicable law: information regarding your Personal Information we have collected in the past 12 months (including the categories of Personal Information we have collected, the categories of sources of such information, and the purposes for which we have collected such information); notice of whether we have disclosed your Personal Information to third parties in the past 12 months (and if so, what categories of information we have disclosed, and what categories of third parties we have disclosed it to); a copy of your Personal Information collected by us in the past 12 months; and that your Personal Information be deleted.

We will not discriminate against you if you choose to exercise any of these rights. To make any of the above requests, please contact us as set forth at the end of this Policy. We may require verification of your identity before further processing your request. In certain instances, we may be permitted by law to decline some or all of such requests. Please note that if you make unfounded, repetitive, or excessive requests (as determined in our reasonable discretion) to access your Personal Information, you may be charged a fee to the extent permitted by law.

User Rights and Data Management

1. User Rights: You have the right to access, rectify, erase, and restrict the processing of your personal data. Under GDPR, you also have the right to data portability and to object to processing. California residents, as per the CCPA, have the right to know about personal data collected, processed, and shared, and the right to request deletion of their personal data.

2. Identity Verification: To protect your data, we require identity verification through email confirmation. This ensures secure handling of your data requests.

3. Response Timeframe: We aim to respond within one month, extendable by two further months for complex requests. For California residents, we will respond within 45 days, extendable once by an additional 45 days when reasonably necessary.

4. Data Deletion Exceptions: We will honor deletion requests except where data retention is necessary for legal obligations, public interest, legal claims, or other exceptions outlined in the GDPR and CCPA.

5. Additional Rights for EU and California Residents: EU residents have rights under the GDPR, including lodging complaints with data protection authorities and not being subject to automated decision-making. California residents have the right to non-discrimination for the exercise of their CCPA rights.

6. Contact and Complaints: Exercise your rights or file a complaint via our Data Protection Officer at DPO@QueryPal.com. California residents can also contact DPO@QueryPal.com.

7. Policy Updates: This policy will be reviewed and updated regularly to stay compliant with evolving data protection laws, including GDPR and CCPA.


The Site is not directed toward children under 13. If a parent or guardian becomes aware that his or her child has provided us with personal information, the parent or guardian should contact us as set forth at the end of this Policy, and we will take reasonable steps to promptly remove such information from our systems (subject to any applicable, legally required or permitted, retention standards).

Third Party Sites

The Site may include links to third-party apps, websites, and services. If you visit or use such third-party websites and services, please be mindful that the relevant third party controls the cookies and other technologies it uses on its websites and how it collects, uses, and shares your Personal Information. This Policy only governs our own privacy practices; please review the applicable third-party privacy policy when visiting or using any third-party sites or services.


For more information or for help in answering any questions, please contact us at Legal@QueryPal.com.