Privacy Statement

CTU Inc. · Effective October 15, 2026

CTU Inc. ("CTU", "we", "us") provides managed IT support to businesses. This statement explains what information we collect when we support our customers and their staff, how we use it, who we share it with, and the choices you have. It covers our help desk, our support software and the services described below (together, "our services").

1. Information we collect

We collect information to provide and secure the IT services our customers ask us to deliver. Most of it is about the computers and networks we look after; some of it is about the people who use them.

Help desk and support requests

• Your name, business email address, phone number and company, and the details of your request, including any messages, screenshots or files you send us.
• Notes our technicians add while working on your request.

Our support software on your computer (IT Help)

When your organization has our support software installed, it reports to us about the computer it runs on:

• The computer's name, model, operating system, storage, memory, network details and installed programs, printers and updates.
• Its health and security status: disk health, errors, antivirus status and detections, and blocked threats.
• The user names of people who sign in to the computer and when they last did, so we know who to help.
• The chat, screenshots and messages you choose to send through it.

It does not read your documents or emails, and it does not collect your browsing history; the only websites it reports are ones the computer's security software blocks as dangerous.

Remote support

Our technicians may connect remotely to computers we manage, to provide support or maintenance at your organization's request. A session lets the technician see and use the screen. We keep a record of who connected, to which computer and when.

Help chat

If you use our online help chat, we collect what you type, the name and contact details you give, and the support ticket it creates. Answers in the chat may be prepared with the help of an AI assistant (see How we share it).

Sign-in codes (Ouro Login)

Where your organization uses our two-step sign-in for Windows, we collect your Windows user name, the mobile number your organization provides for sending you a code (or a code set up in an authenticator app), and a record of each sign-in attempt and its result.

Network and security monitoring

To protect our customers' networks, we review summaries of network traffic from the network equipment we manage, such as which devices connected to which internet addresses and how much data was sent, and we compare internet addresses against public lists of known-malicious sites. We also log the internet addresses that connect to our own support systems so we can block attacks.

Information from your organization

Your employer may give us your name, business contact details, mobile number and role so we can support you, for example from its company directory.

2. How we use it

• To provide, troubleshoot and maintain the IT services our customers request, and to answer and track support requests.
• To keep computers and networks secure: detecting and responding to threats, applying updates, and blocking malicious internet addresses.
• To verify identity when you sign in or reset a password.
• To send service messages: ticket updates, sign-in codes, alerts and reports.
• To improve our services and to meet legal, security and record-keeping obligations.

We do not sell personal information, and we do not use it for advertising.

3. Text messages (SMS)

4. How we share it

We share information only as needed to run our services:

• Your organization. Our customers (your employer) can see the support requests, devices and security information that relate to their organization.
• Service providers that work on our behalf under confidentiality obligations: for example, providers of email, text-message delivery, cloud hosting, network equipment management, security services and AI assistance (used to help draft support notes, summaries and chat answers). They may use the information only to provide their service to us.
• Legal and safety reasons. When required by law, to respond to valid legal process, or to protect the rights, property or safety of our customers, their staff, us or others.
• Business changes. If CTU Inc. is involved in a merger, acquisition or sale of assets, information may be transferred as part of that transaction, subject to this statement.

5. How we protect it

We use administrative, technical and physical safeguards appropriate to the information, including encrypted connections, encrypted storage of passwords and keys, two-step sign-in for our staff, access limited to the technicians who need it, signed and approved scripts for changes to computers, and audit records of sensitive actions. No system is completely secure, but we work to protect your information and respond promptly to any incident.

6. How long we keep it

We keep information only as long as we need it to provide our services and meet our obligations. For example:

• Support tickets and their history are kept for the length of our relationship with your organization and as needed for business records.
• Device and status information is replaced as it is updated; security and audit records are generally kept for up to 90 days.
• Records of internet addresses connecting to our systems are kept for about 48 hours; network traffic summaries for a limited period needed to spot unusual activity.
• One-time codes expire within minutes and are not kept.

When your organization stops using our services, we delete or return its information as agreed with it, unless we must keep it longer by law.

7. Your choices and rights

• Access, correction and deletion. You can ask to see, correct or delete personal information we hold about you. Because we usually act for your employer, we may refer your request to them or act on their instructions.
• Text messages. Reply STOP at any time (see Text messages).
• Questions or concerns. Contact us using the details below.

We will not discriminate against you for exercising your privacy rights.

8. California residents

If you are a California resident, the California Consumer Privacy Act (as amended) gives you the right to know what personal information we collect, use and disclose; to request access to, correction of and deletion of it; and to opt out of its sale or sharing. CTU Inc. does not sell personal information or share it for cross-context behavioral advertising. To make a request, email helpdesk@ctu-pc.com or write to us at the address below; we will verify your request and respond within the time the law allows. You may use an authorized agent to make a request on your behalf.

9. Children

Our services are for businesses and are not directed to children under 16. We do not knowingly collect personal information from children.

10. Changes to this statement

We may update this statement from time to time. The effective date at the top shows when it last changed; significant changes will be communicated to our customers.

11. Contact us