Privacy Policy

1. Who we are

Close Controller is a recurring accounting workflow platform operated by Eventus Advisory Group. We help accounting teams manage month-end close, audit support, and tax workflows. This policy explains how we collect, use, and protect your information.

2. Information we collect

We collect information you provide directly to us:

• Account information: Name, work email address, and password when you create an account.
• Workspace data: Clients, task lists, periods, templates, notes, and files you create or import while using the service.
• Billing information: Billing email address. Payment card details are processed directly by Stripe and never stored on our servers.
• Usage information: Actions taken in the application, which we use to improve the product and diagnose errors.
• Waitlist information: Email address if you join our waitlist prior to account creation.

3. How we use your information

We use your information to:

• Provide, operate, and maintain the Close Controller service
• Power AI-assisted features such as task suggestions and the AI assistant when you choose to use them
• Send transactional emails such as email verification and password reset links
• Respond to support requests
• Detect and prevent fraud, abuse, and security incidents
• Comply with legal obligations

We do not sell your personal information to third parties. We do not use your workspace data for advertising.

4. Data storage and security

Your data is stored in a PostgreSQL database hosted on Neon and served via Vercel infrastructure, both of which operate in the United States. We use encrypted connections (TLS) for all data in transit. Passwords are stored as salted cryptographic hashes and are never readable by us.

While we implement industry-standard security measures, no system is completely secure. We encourage you to use a strong, unique password for your account.

5. Third-party services

We use the following third-party services to operate the platform:

• Vercel — hosting and infrastructure
• Neon — database hosting
• Resend — transactional email delivery
• Stripe — payment processing (when billing is active)
• Sentry — error monitoring
• Anthropic — AI processing for task suggestions and the AI assistant. When you invoke an AI feature, content you paste into it (such as meeting notes) and the relevant workspace context needed to fulfill the request (client names, period names, and team member names) are sent to Anthropic's API. Anthropic does not use API inputs to train its models. Anthropic may retain API inputs and outputs in accordance with the Anthropic API terms (typically up to 30 days for trust and safety review). We never send data from one workspace to fulfill an AI request initiated in another.

Each of these providers has their own privacy policy governing their use of your data.

6. Data retention

We retain your account and workspace data for as long as your account is active. If you close your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or compliance reasons.

7. Your rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Export your workspace data

To exercise any of these rights, contact us at the address below.

8. Cookies

We use a single session cookie to keep you signed in. This cookie is httpOnly, secure, and expires after 30 days of inactivity. We do not use tracking cookies or third-party advertising cookies.

9. Changes to this policy

We may update this policy from time to time. We will notify active users of material changes by email. Continued use of the service after changes take effect constitutes acceptance of the updated policy.

10. Contact

For privacy-related questions or requests, contact us at privacy@closecontroller.com.