Privacy notice

Updated 14 September 2026. This notice covers the CTRL+SPC marketing website, workflow downloads, agentic coding tips, and product waitlist. It does not describe the separate signed-in product.

Who is responsible

FPTHQ LLC operates this website and is responsible for how the personal information described here is used. Contact: privacy@ctrl-spc.com. Postal address: 10002 N 7th Street Unit 2103 Phoenix, AZ 85020.

Information we use and why

When you request a workflow, we use your email address to deliver it. You may provide a name to personalise the message. Our basis is our legitimate interest in fulfilling your requested download with limited contact information and optional personalisation.

If you choose agentic coding tips, we record your email, optional name, source workflow, consent wording and version, and request and signup times. We send tips, including relevant CTRL+SPC examples and offers, when you choose to subscribe. You can turn off the tips option before submitting the form, or unsubscribe from any tips email.

The separate waitlist form asks for your email and optional name so we can send the confirmation and launch notification you request. Our basis is your consent to those communications. Joining the waitlist does not subscribe you to agentic coding tips.

Our hosting and email providers process technical information such as IP addresses, request times, and delivery, bounce, and complaint status to operate and protect the service. We use proportionate security information for our legitimate interests in preventing abuse and keeping the service reliable. We do not use this information for automated decisions with legal or similarly significant effects.

Who processes information

Netlify hosts the website and handles requests. Resend delivers emails and manages subscribers and unsubscribe preferences. Supabase stores private workflow files and tips consent records. Access is limited to the people and providers needed to operate the service. We do not sell your contact information.

These providers may process information in the United States and other countries where they or their subprocessors operate. Resend stores customer data in the US; selecting an EU sending region does not change that. Where required, international transfers use applicable contractual or other recognised safeguards. Contact us for information about the arrangements relevant to your data.

How long information is kept

Download requests without a tips opt-in are not added to our newsletter contact list. Resend retains email content and delivery logs for 30 days on our current plan. Unfinished signup requests are removed after seven days.

We review tips subscriptions after twelve months and end the topic subscription during our scheduled checks unless you have submitted a new signup request. You can unsubscribe sooner at any time. We retain consent evidence while the subscription is active and for three years after withdrawal or replacement by a newer signup to document permission and handle disputes.

We keep limited unsubscribe, bounce, and complaint suppression information as needed to honour your choice and prevent unwanted email. Waitlist information is kept until the requested launch communications are complete or you ask to be removed, subject to necessary suppression records. Provider security logs and backups follow the providers’ applicable retention arrangements. Contact us for details or to request deletion; some records may need to be retained for legal obligations or claims.

Your choices and rights

You can unsubscribe from tips through any tips email without creating an account. Declining or withdrawing marketing consent does not prevent you from requesting a workflow. Withdrawal does not affect processing that was lawful before it.

Depending on applicable law, you can request access, correction, deletion, restriction, or a portable copy of your information, and object to processing based on legitimate interests. Contact privacy@ctrl-spc.com. We may make proportionate checks to protect your information before responding. You can also complain to the data protection authority where you live or work or where you believe an infringement occurred.

Cookies and email tracking

The marketing pages do not use advertising cookies or analytics tracking. Fonts are served from this website. Email open and click tracking are disabled for the CTRL+SPC sending domain. Essential provider security processing and email delivery status still apply.

Changes

We will update this notice if our practices change. A broader marketing purpose will require its own appropriate notice and permission; it will not be inferred from a workflow download.