Privacy Policy

Last updated: September 9, 2026 | Version 1.1

1. Introduction

IRONBOUNDS ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our IRONBOUNDS Asset Control platform.

2. Information We Collect

Yes — we collect user data. To provide the Service, we collect the categories of information described below. We only collect what we need to run fleet inspections, keep records, and support your account. We are transparent about every category we collect and how it is used.

2.1 Information You Provide

  • Account Information: Name, email address, phone number, company name
  • Vehicle Data: VINs, unit numbers, license plates, make/model, mileage
  • Inspection Records: DVIR reports, photos, notes, defect reports
  • Driver Information: Names, contact details, assigned vehicles
  • Document Uploads: Licenses, registrations, insurance documents

2.2 Automatically Collected Information

  • Device Information: Browser type, operating system, device identifiers
  • Usage Data: Pages visited, features used, timestamps
  • Location Data: GPS coordinates during inspections (with permission)
  • Log Data: IP addresses, access times, error logs

3. How We Use Your Information

We use collected information to:

  • Provide and maintain the Service
  • Process and store inspection records
  • Generate compliance reports
  • Send service notifications and alerts
  • Improve our products and services
  • Provide customer support
  • Detect and prevent fraud or security issues
  • Comply with legal obligations

4. AI and Automated Processing

IRONBOUNDS uses artificial intelligence (AI) and automated processing to help you work faster. This includes features such as an in-app AI assistant, automated analysis of inspection data, and automated review of uploaded photos and documents to flag possible defects or missing information.

  • What the AI processes: inspection records, unit and vehicle details, notes, and uploaded photos or documents that you or your drivers submit.
  • What we do not do: we do not sell your data, we do not use your data to build advertising profiles, and we do not use your private fleet data to train public AI models for other companies.
  • Human oversight: AI suggestions are there to assist you. They are not a substitute for your own judgment, and a person in your organization stays responsible for final inspection and compliance decisions.
  • AI processing providers: some AI features are powered by trusted third-party AI processing providers who act on our behalf and are contractually bound to protect your data and use it only to deliver the feature.

You can avoid using AI features by simply not using them; core inspection and record-keeping do not require AI.

5. Data Sharing and Disclosure

We may share your information with:

  • Service Providers: Third parties who assist in operating our Service (hosting, analytics, support)
  • Business Transfers: In connection with a merger, acquisition, or sale of assets
  • Legal Requirements: When required by law, subpoena, or legal process
  • With Your Consent: When you direct us to share information with third parties

We do not sell your personal information to third parties.

6. Data Security

We implement appropriate security measures including:

  • Encryption of data in transit (TLS/SSL) and at rest
  • Access controls and authentication requirements
  • Regular security assessments and monitoring
  • Secure cloud infrastructure with industry certifications
  • Employee training on data protection

7. Breach Notification

In the unlikely event of a data breach that affects your personal information, we will:

  • Notify affected customers within 72 hours of confirming the breach
  • Provide details on what data was affected and what steps we are taking
  • Offer guidance on any actions you should take to protect your accounts
  • Report the breach to relevant authorities as required by law

Notifications will be sent via email to your organization's primary contact and, where possible, through in-app alerts.

8. Data Retention

We retain your data for as long as your account is active or as needed to provide services. Inspection records may be retained for the minimum period required by DOT/FMCSA regulations (typically 3-6 months). Upon account deletion request, we will delete or anonymize your data within 30 days, except where retention is required by law.

9. Photos, Documents & File Storage

Inspection photos, uploaded documents (licenses, registrations, insurance certificates), and other files are stored on encrypted cloud storage (Amazon Web Services S3) in the United States. These files are:

  • Encrypted at rest using AES-256 encryption
  • Accessible only to your organization — no other carrier or outside party can view them
  • Retained for as long as your account is active or as required by DOT/FMCSA regulations
  • Permanently deleted within 30 days of account cancellation

10. Subprocessors

We use the following third-party services to operate the platform. These services process your data only as needed to provide IRONBOUNDS to you:

  • Amazon Web Services (AWS) — Cloud hosting, database, and file storage (United States)
  • Resend — Transactional email delivery (inspection reports, account notifications)
  • Telegram Bot API — Optional real-time inspection report delivery (only if enabled by your organization)

We do not share your data with any services beyond those listed above. If we add a new subprocessor, we will update this list and notify active customers.

11. Your Rights and Choices

You have the right to:

  • Access: Request a copy of your personal data
  • Correction: Request correction of inaccurate data
  • Deletion: Request deletion of your account and data
  • Export: Receive your data in a portable format
  • Opt-out: Unsubscribe from marketing communications
  • Restrict Processing: Limit how we use your data

To exercise these rights, visit Settings → Account → Data & Privacy or contact us at [email protected].

12. Delete Your Account

You can delete your account and personal data at any time. You do not need a special reason and we will not make it difficult.

  • In the app: go to Settings → Account → Data & Privacy and choose Delete My Account.
  • By email: if you prefer, email [email protected] from your account address and we will process the deletion for you.

Once you confirm deletion, we permanently delete or anonymize your personal data and uploaded files (including inspection photos and documents) within 30 days, except for the limited records we are legally required to keep (for example, certain inspection records under DOT/FMCSA rules). We will tell you if any such legal retention applies.

13. Subscriptions, Billing, and Cancellation

Paid IRONBOUNDS plans are billed on a recurring (auto-renewing) basis until you cancel.

  • Auto-renewal: your subscription renews automatically at the end of each billing period (monthly or annually) at the then-current price, unless you cancel before the renewal date.
  • Renewal reminders: for annual plans, we send a reminder by email before your plan renews so a renewal never comes as a surprise.
  • Canceling is easy: canceling is at least as simple as signing up. You can cancel at any time from within the app (Settings → Billing), and no phone call or email is required. If you subscribed through the Apple App Store or Google Play, you manage and cancel that subscription in your App Store or Google Play account settings.
  • After you cancel: you keep access until the end of the period you already paid for, and you will not be charged again.

14. Cookies and Tracking

We use cookies and similar technologies to:

  • Maintain your session and preferences
  • Understand how you use our Service
  • Improve performance and user experience

You can control cookies through your browser settings. Disabling cookies may affect Service functionality.

15. Third-Party Services

Our Service may integrate with third-party services (e.g., Samsara, Fullbay). These integrations are optional and governed by those services' privacy policies. We only access data you explicitly authorize.

16. Children's Privacy

The Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children.

17. International Data Transfers

Your data may be processed in the United States or other countries where our servers are located. We ensure appropriate safeguards are in place for international transfers.

18. California Privacy Rights (CCPA)

California residents have additional rights under the CCPA, including:

  • Right to know what personal information is collected
  • Right to delete personal information
  • Right to opt-out of sale of personal information
  • Right to non-discrimination for exercising rights

19. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes via email or through the Service. Your continued use after changes constitutes acceptance.

20. Contact Us

For privacy-related questions or to exercise your rights:

Your privacy is important to us. We are committed to being transparent about our data practices and giving you control over your personal information.