CTRL REALITY
Book a call
Home How it works Plans Book a demo
Legal

Privacy Policy

Effective date: October 1, 2026

This Privacy Policy explains how CTRL Reality, Inc. ("CTRL Reality", "we", "us", or "our") collects, uses, shares, and protects information when you visit our website, create an account, or use our AI visibility measurement services (the "Services"). CTRL Reality, Inc. is a Delaware corporation. By using the Services, you agree to the practices described here.

Who we are

CTRL Reality, Inc. provides software that measures how businesses appear in answers produced by AI assistants and search tools. Our platform reports measurement indices, including the AI Visibility Index (AIVI) shown alongside the AI Reliability Score (AIRS), that estimate how often and how accurately a business is surfaced. AIRS is reported as "null" when there are not enough observations to compute it reliably; it is never reported as zero in that case. This policy covers the data we handle to deliver those measurements.

Information we collect

We collect the following categories of information:

  • Account information. When you register, we collect your email address and any name or sign-in credentials you provide.
  • Audit and measurement inputs. To run an audit, we collect the business name, business category, and city you ask us to measure, along with related details you submit such as website address, service areas, and competitors.
  • Usage and analytics data. We collect information about how you interact with the Services, such as pages viewed, features used, audit history, device and browser type, approximate location derived from your IP address, and timestamps.
  • Communications. If you contact us, we keep the messages you send and our replies.
  • Billing information. If you subscribe to a paid plan, our payment processor collects your payment details. We do not store full card numbers on our own systems.

How we use information

We use the information we collect to:

  • Create and manage your account and authenticate your access.
  • Run audits and generate AIVI and AIRS measurements and reports for the businesses you specify.
  • Operate, maintain, troubleshoot, and improve the Services.
  • Communicate with you about your account, audits, service updates, and support requests.
  • Process payments and manage subscriptions.
  • Detect, prevent, and respond to fraud, abuse, security incidents, and violations of our terms.
  • Comply with legal obligations and enforce our agreements.

How we use AI processing

To measure AI visibility, we send queries about the businesses you ask us to audit to third party AI and search providers, and we record and analyze the answers those systems return. This processing is the core function of the Services. The queries we send are built from the business details you provide, not from your private account data. We use the returned answers to compute measurement indices and to produce the reports you see. We do not use your account credentials or billing details to train any model.

How we share information

We do not sell your personal information. We share information only in these situations:

  • Service providers and subprocessors. We share information with vendors who help us run the Services, including cloud hosting, database and storage providers, the AI and search providers we query to produce measurements, analytics providers, email delivery providers, and payment processors. These providers may process information only on our instructions and under contract.
  • Legal and safety. We may disclose information when required by law, subpoena, or legal process, or to protect the rights, property, and safety of CTRL Reality, our users, or the public.
  • Business transfers. If we are involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction, subject to this policy.
  • With your direction. We share information when you ask us to, such as when you export or send a report.

Cookies and tracking

We use cookies and similar technologies to keep you signed in, remember your preferences, secure the Services, and measure usage. Some cookies are strictly necessary for the Services to function. Others support analytics. You can control cookies through your browser settings, and where required we honor recognized opt out signals. Disabling some cookies may limit features.

Data retention

We keep account information for as long as your account is active and for a reasonable period afterward to meet legal, accounting, and operational needs. We keep audit inputs and the measurement results we generate so that you can view history and so we can maintain the longitudinal measurement record that the Services depend on. When information is no longer needed, we delete or de-identify it.

Export and deletion

You can export your audit reports and account data through the Services or by contacting us. You may ask us to delete your account and the personal information associated with it. We will honor deletion requests except where we are required or permitted by law to retain certain records, such as billing history.

Your privacy rights

Depending on where you live, you may have rights over your personal information, including the right to:

  • Access the personal information we hold about you.
  • Correct inaccurate information.
  • Delete your personal information.
  • Receive a portable copy of your information.
  • Object to or restrict certain processing.
  • Opt out of the sale or sharing of personal information. We do not sell personal information.
  • Be free from discrimination for exercising your rights.

Residents of the European Economic Area and the United Kingdom have rights under the GDPR, and California residents have rights under the CCPA and CPRA. To exercise any right, contact us at the address below. We will verify your request and respond within the time required by law. You may also have the right to lodge a complaint with your local data protection authority.

Security

We use technical and organizational safeguards designed to protect information, including encryption in transit, access controls, and limited internal access on a need to know basis. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If we learn of a breach that affects your information, we will notify you as required by law.

Children

The Services are intended for businesses and are not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

International users

We operate in the United States, and the information we collect is processed in the United States and in other countries where our service providers operate. By using the Services, you understand that your information may be transferred to and processed in countries with different data protection laws than your own.

Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date above and, where appropriate, notify you through the Services or by email. Your continued use of the Services after an update means you accept the revised policy.

Contact us

If you have questions about this Privacy Policy or want to exercise your privacy rights, contact CTRL Reality, Inc. at contact@ctrlreality.ai.