Legal

Privacy Policy

Last updated: June 17, 2026 · Effective: June 17, 2026

This Privacy Policy explains how The Iron Architect LLC ("IronArchitects," "we," "us," or "our") collects, uses, discloses, and protects personal information in connection with the IronArchitects platform, websites, and related services (the "Services"). By using the Services you agree to the practices described here.

This Services agreement distinguishes two roles. For information you submit through your account, your architecture designs, documents, and the personal data they may contain ("Customer Content"), we act as a data processor on behalf of your organization (the "Customer"), which is the controller. For account, billing, and website data we act as a controller. Where we process Customer Content, our handling is governed by the agreement between us and the Customer (including any Data Processing Addendum).

Contents

  1. Information we collect
  2. How we use information
  3. Legal bases
  4. How we share information
  5. Subprocessors
  6. Data retention
  7. Security
  8. International transfers
  9. Your rights
  10. Cookies
  11. Children
  12. Changes
  13. Contact us

1.Information we collect

Information you provide

  • Account information: name, work email, organization, role, and credentials when you register or are provisioned by your organization.
  • Customer Content: requirements, technology catalogs, policies, documents, and generated designs you create or upload, which may contain personal or sensitive data your organization chooses to include.
  • Communications: messages you send to sales, support, or security, and survey or feedback responses.
  • Billing information: billing contact and plan details. Card payments are processed by our payment processor; we do not store full card numbers.

Information collected automatically

  • Usage and device data: log data, IP address, browser/device type, pages viewed, and feature interactions.
  • Cookies and similar technologies: see Cookies.

2.How we use information

  • Provide, operate, secure, and improve the Services.
  • Authenticate users, enforce tenant isolation, and maintain audit and security records.
  • Process transactions, manage subscriptions and trials, and send service communications.
  • Respond to inquiries and provide support.
  • Monitor performance, detect abuse, and ensure reliability.
  • Comply with legal obligations and enforce our agreements.

We do not sell personal information, and we do not use Customer Content to train AI models. AI generation features are operated under provider terms that prohibit training on your data; enterprise plans are backed by a provider agreement to that effect.

3.Legal bases (EEA/UK)

Where the GDPR or UK GDPR applies, we process personal data under one or more of the following bases: performance of a contract; our legitimate interests in operating and securing the Services; your consent (where required); and compliance with legal obligations.

4.How we share information

  • Service providers / subprocessors who process data on our behalf under contract (see below).
  • Within your organization: Customer Content is accessible to authorized users of your organization's tenant per its access controls.
  • Legal and safety: when required by law or to protect rights, safety, and the integrity of the Services.
  • Business transfers: in connection with a merger, acquisition, or sale of assets, subject to this Policy.

5.Subprocessors

We use a limited set of third-party subprocessors (for example, cloud hosting, identity, and payment processing) to deliver the Services. A current list of subprocessors is available on request and, for Customers, through our [Trust Center / subprocessor registry, link]. We require subprocessors to provide protections consistent with this Policy.

6.Data retention

We retain personal information for as long as needed to provide the Services and for legitimate business or legal purposes. Customer Content is retained per your organization's configuration and agreement, including any legal-hold or retention settings, and is deleted or returned following termination as described in that agreement. [Confirm default retention periods]

7.Security

We apply technical and organizational measures designed to protect personal information, including database-enforced tenant isolation, encryption of secrets at rest and data in transit, role-based access control, and a tamper-evident audit trail. No method of transmission or storage is completely secure. Learn more on our Security & Trust page.

8.International transfers

We may process and store information in countries other than your own. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) for cross-border transfers. [Confirm hosting regions & transfer mechanism]

9.Your rights

Depending on your location, you may have rights to access, correct, delete, port, or restrict processing of your personal information, and to object or withdraw consent. To exercise these rights, contact us at [email protected]. If your data is held within an organization's tenant as Customer Content, we will refer your request to that organization (the controller). We will not discriminate against you for exercising your rights.

10.Cookies

We use strictly necessary cookies to operate the Services (for example, authentication and session management) and may use limited analytics to understand usage. You can control cookies through your browser settings; disabling some cookies may affect functionality. [Add cookie/consent details if analytics are enabled]

11.Children

The Services are intended for business use and are not directed to children under 16. We do not knowingly collect personal information from children.

12.Changes to this Policy

We may update this Policy from time to time. We will post the updated version with a new "Last updated" date and, where appropriate, provide additional notice.

13.Contact us

Questions about this Policy or our data practices? Contact:

The Iron Architect LLC
7661 McLaughlin Rd, #156
Falcon, CO 80831
Privacy: [email protected]