Legal

Privacy Policy

Last updated: April 2026

Placeholder. This page will host the production Privacy Policy reviewed by counsel ahead of public launch. The summary below describes our intent and current practices.

What we collect

Account information you provide (name, email, organization), authentication tokens, and usage telemetry (which insights you read, which reports you download). We do not sell or share this data with third parties for marketing.

The travel data behind CTI

CTI's published insights are derived from de-identified, aggregated corporate travel transactions. We do not publish individual traveler names, record locators, or PII. Tier-based and market-level analysis only.

Cookies & analytics

We use first-party cookies for authentication and session management. Third-party analytics (Google Analytics, Microsoft Clarity) are used to understand how the site is used and improve content. You can opt out via your browser settings.

Compliance

CTI's underlying platform is SOC2 and FISMA compliant. Data handling, access controls, and audit logging follow those standards.

Contact

Questions about how we handle data? Email privacy@cornerstoneindex.com.