Iron Front Digital LLC ("Iron Front," "we," "us") respects your privacy. This policy explains what we collect, why we collect it, and what rights you have over your information. If anything here is unclear, email privacy@ironfrontdigital.com and we'll walk you through it.
What we collect
We collect three kinds of information:
- Account information — your name, email, password (hashed), company name, and the billing details Stripe needs to process your subscription. We never store your full credit card number — Stripe handles that.
- Service data — the content you upload to use our platform: contacts you import, websites you ask us to analyze, messages you send through our chat or email tools, and the data we generate on your behalf.
- Usage data — basic web analytics (pages visited, features used, device type, IP address, referrer). We use this to make the product better, not to profile you across the internet.
How we use it
- To deliver the services you signed up for
- To bill you through Stripe
- To send transactional email (receipts, alerts, account notices)
- To send marketing email — only if you've opted in, and every marketing email has a one-click unsubscribe
- To improve our AI systems — we do not sell your data and we do not use your content to train third-party models
- To comply with legal obligations when we're required to
Who we share it with
We share data with a small, audited set of service providers we need to run the platform:
- Stripe — payment processing
- Anthropic — our AI provider. Messages sent to our AI tools are processed by Anthropic under their commercial terms, which prohibit training on customer data.
- AWS — hosting, database, and email delivery infrastructure
We do not sell your personal information to anyone, ever. We do not share it with advertisers for retargeting outside our own site.
Your rights
You can:
- Access your data — one-click export from your Settings page
- Correct your account information at any time
- Delete your account — email support@ironfrontdigital.com and we'll delete everything within 30 days
- Unsubscribe from marketing email using the link in any marketing message
If you're in California, the EU, or the UK, you have additional rights under CCPA, GDPR, or UK GDPR. To exercise those rights, email privacy@ironfrontdigital.com.
How we protect your data
All data is encrypted in transit (HTTPS/TLS) and at rest. Passwords are hashed with bcrypt at 12 rounds. We follow the principle of least privilege internally — only the systems that need to see your data can see it. If we ever had a breach that affected you, we'd tell you within 72 hours of confirming it.
Cookies
We use a small number of cookies: a session cookie to keep you logged in, and a localStorage ID so our chat widget remembers your conversation across pages. We don't use third-party tracking cookies.
Children
Iron Front Digital is for businesses. Our services are not directed at anyone under 16 and we don't knowingly collect information from children. If you believe a child has given us data, email us and we'll delete it.
Changes to this policy
If we make material changes we'll email active customers at least 30 days before the change takes effect. Minor clarifications get posted here with an updated date.
Contact us
Iron Front Digital LLC
privacy@ironfrontdigital.com