Privacy Policy

IronKite is used by trades businesses to run their operations. Different types of data carry different responsibilities:

• Account & usage data we collect to operate the Service — here, we act as the controller of that information.
• Customer Data that a subscribing business puts into the Service (its own customers, jobs, invoices, photos, notes, etc.) — the business controls that data, and we process it on the business’s behalf to provide the Service. If you are an end-customer of a business that uses IronKite, please direct privacy requests to that business.

• Account information. Name, email address, phone number, company/organization name, role, and password credentials (authentication is handled by our identity provider).
• Business & operational data. The information you enter to run your business — customers, jobs, schedules, invoices, payments, time entries, job photos, and notes.
• Payment information. Subscription billing and in-app payments are handled by third-party payment processors. We receive limited transaction details (such as status and the last digits/brand of a card) but do not store full card numbers.
• Location data. If you enable it, the mobile app may use device location for features like GPS-verified clock in/out and navigation.
• Device & usage data. Log data, device and browser type, IP address, app interactions, and diagnostic information collected automatically to operate and improve the Service.
• Communications. Messages you send through the Service (such as SMS or email notifications) and your support requests.

• provide, operate, maintain, and secure the Service;
• create and manage accounts, organizations, and team membership;
• process subscriptions and payments and send related notices;
• send service-related communications, including the SMS and email notifications you enable;
• provide AI-assisted features (for example, cleaning up job notes or drafting estimates) when you choose to use them;
• provide customer support and respond to your requests;
• monitor, troubleshoot, analyze, and improve the Service; and
• comply with legal obligations and enforce our Terms.

We do not sell your personal information. We share information with:

• Service providers who help us run the Service — such as cloud hosting and databases, authentication, payment processing, accounting sync (QuickBooks), messaging/SMS and email delivery, AI processing, and analytics — under agreements that limit their use of the information to providing services to us.
• Within your organization. Data you enter is visible to other authorized members of your organization according to their roles.
• Legal and safety. When required by law, legal process, or to protect the rights, property, or safety of IronKite, our users, or others.
• Business transfers. In connection with a merger, acquisition, financing, or sale of assets, subject to this Policy.

The Service integrates with third parties (for example, payment processors, QuickBooks, mapping, and messaging providers). When you use those integrations, the third party may receive and process information under its own privacy policy. We are not responsible for the privacy practices of third-party services.

We retain personal and business data for as long as your account is active and as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. Backups are retained for a limited window and are used for disaster recovery (see the data backups and recovery section of our Terms of Service). After account termination, we may make data available for export for a limited period and then delete or de-identify it in the ordinary course, except where retention is required by law.

We use reasonable administrative, technical, and organizational measures designed to protect information, including encryption in transit, access controls, and routine backups. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security. You are responsible for keeping your login credentials confidential.

• Access & correction. You can review and update much of your account and business data directly in the Service.
• Privacy requests. Depending on where you live, you may have rights to access, correct, delete, or port your personal information, or to object to or restrict certain processing. To make a request, contact us using the details below. If your data was provided by a business that uses IronKite, we will direct your request to that business.
• Communications. You can opt out of non-essential messages; service and transactional messages may still be sent. Message and data rates may apply to SMS.
• Location. You can control location permissions through your device settings.

The Service is intended for businesses and is not directed to children under 18. We do not knowingly collect personal information from children.

IronKite is operated from the United States, and information may be processed and stored in the United States or other countries where we or our service providers operate. By using the Service, you understand that your information may be transferred to and processed in countries with different data-protection laws than your own.

We may update this Privacy Policy from time to time. If we make material changes, we will take reasonable steps to notify you, such as posting the updated Policy with a new “Last updated” date or notifying you in the Service. Your continued use of the Service after changes take effect constitutes acceptance of the updated Policy.

Questions or privacy requests? Contact us at admin@courantai.com.