Privacy Policy for ControlBright

Last updated: July 22, 2026

This Privacy Policy explains how ControlBright collects, uses, shares, and protects your information when you use our website, platform, and hardware (together, the “Service”), and describes the rights you have over your information.

By using the Service, you agree to the collection and use of information as described in this policy.

Interpretation and Definitions

Company (“we,” “us,” or “our”) refers to ControlBright, Inc, located at 5019 Airport Road Hermnatown, MN  55811.

Service refers to the ControlBright website at https://controlbright.com/, the cloud portal, connectivity hardware, and any related products and services we provide.

Website refers to ControlBright, accessible from https://controlbright.com/.

Personal Data means any information that relates to an identified or identifiable person.

Customer Data means the data, configurations, and system information that flows through the Service when you connect and support field devices, including data from the building systems, control systems, and equipment you access.

Device means any hardware used to access the Service, such as a computer, phone, tablet, or ControlBright connectivity hardware.

You means the individual using the Service, or the company or other entity on whose behalf that individual is using the Service.

Collecting and Using Your Personal Data

Types of Data We Collect

Information you provide directly. When you register, contact us, or use the Service, we may collect:

  • Personal names
  • Email addresses
  • Phone numbers
  • Company or organization name and job role
  • Billing and shipping addresses
  • Payment information (processed by our payment provider; see “Sharing Your Information” below)
  • Account credentials and support communications

Information collected automatically. When you use the Service, we may collect:

  • Cookies and usage data
  • Analytics data, for example through Google Analytics
  • Log data such as IP address, browser type, pages visited, and timestamps
  • Device identifiers and connection information

Customer Data processed through the platform. Because ControlBright provides remote access to field systems, the Service transmits and may temporarily store data from the devices and control systems you connect to it. This can include system status, diagnostic information, configuration data, and any information passing through the remote connection. We handle Customer Data on your behalf and only to provide the Service. We do not use it for our own purposes.

How We Use Your Personal Data

We use the information we collect to:

  • Provide, operate, and maintain the Service, including monitoring usage and system performance
  • Set up and manage your account and registration
  • Process transactions and send related information such as invoices and receipts
  • Contact you by email, phone, SMS, or other electronic means about your account, the Service, and support requests
  • Respond to your inquiries and provide customer support
  • Improve, troubleshoot, and secure the Service
  • Detect, prevent, and address technical issues, fraud, and security threats
  • Comply with legal obligations and enforce our terms

Legal Bases for Processing

Where the GDPR or similar laws apply, we process Personal Data on one or more of these bases: to perform our contract with you, to comply with a legal obligation, for our legitimate business interests (such as securing and improving the Service), and with your consent where required, for example for certain cookies and marketing.

Sharing Your Information

We do not sell your Personal Data. We share information only in these situations:

  • Service providers and subprocessors. We use third parties to run the Service, such as Intuit, Amazon Web Services, Namecheap Hosting, analytics providers such as Google Analytics, BICS Communications, and Google Workspace. They may access data only to perform work on our behalf and are bound to protect it.
  • Business transfers. If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.
  • Legal requirements. We may disclose information if required by law or in response to valid requests by public authorities, or to protect our rights, safety, and property or those of others.
  • With your direction. We share information as needed to carry out the connections and support actions you request through the Service.

International Data Transfers

Your information may be processed in countries other than the one you live in, including United States. Where we transfer Personal Data across borders, we use appropriate safeguards such as Standard Contractual Clauses to protect it in line with this policy.

Data Retention

We keep Personal Data only as long as needed for the purposes described in this policy, to comply with our legal obligations, resolve disputes, and enforce our agreements. Account information is retained for the life of your account and for 12 months afterward. Customer Data is retained per your service configuration and deleted or returned on request when your account closes. Analytics and log data are retained for 12 months. When data is no longer needed, we delete or anonymize it.

Data Security

We use administrative, technical, and physical safeguards to protect your information, including encryption in transit, access controls, and secure single-user VPN access to remote systems. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your information and review our practices regularly.

Your Privacy Rights

Depending on where you live, you may have the right to:

  • Access the Personal Data we hold about you
  • Correct inaccurate or incomplete data
  • Delete your Personal Data
  • Restrict or object to certain processing
  • Receive your data in a portable format
  • Withdraw consent at any time, where processing is based on consent

For California residents (CCPA/CPRA): you have the right to know what Personal Data we collect, to request deletion, to correct it, and to opt out of the sale or sharing of Personal Data. We do not sell Personal Data. We will not discriminate against you for exercising these rights.

For EU/UK residents (GDPR): you have the rights listed above and the right to lodge a complaint with your local data protection authority.

To exercise any of these rights, contact us at privacy@controlbright.com. We will respond within the time required by applicable law. We may need to verify your identity before acting on a request.

Cookies and Tracking

We use cookies and similar technologies to operate the Website, remember your preferences, and understand how the Service is used. We use both session cookies, which expire when you close your browser, and persistent cookies. Analytics cookies, such as those from Google Analytics, help us measure and improve performance.

You can set your browser to refuse cookies or alert you when they are sent, though some parts of the Service may not function properly without them. Where required by law, we ask for your consent before setting non-essential cookies.

Children’s Privacy

The Service is a business tool intended for use by companies and their staff. It is not directed to children under 16, and we do not knowingly collect Personal Data from children. If you believe a child has provided us with Personal Data, contact us and we will delete it.

Third-Party Links

The Service may link to sites we do not operate. We are not responsible for the privacy practices of those sites and encourage you to read their policies.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post the new version on this page and update the “Last updated” date. For material changes, we will provide notice by email or through the Service before the change takes effect. Your continued use of the Service after an update means you accept the revised policy.

Contact Us

If you have questions about this Privacy Policy or your information, contact us:

  • By email: privacy@controlbright.com
  • By mail: 5019 Airport Road Hermantown MN  55811