Privacy Policy

Iron Cedar Technology LLC
Effective: 27 August 2026 · Last reviewed: 27 August 2026
Contact: contact@ironcedartechnology.com

1. The short version

• The marketing website sets no cookies and runs no analytics or advertising trackers. It does load fonts from Google. Our host may keep ordinary security and access logs.
• The free audit collects the contact and business details you submit, combines them with public website, Google listing, performance, and local-search information, and stores the audit so we can provide your report and follow up manually.
• Text-message consent is optional and starts unchecked. Customer care and marketing texts each have their own checkbox. Checking a box records consent; it does not by itself send a message.
• We do not sell personal information, and we do not share it for cross-context behavioural advertising.
• For our clients: your customers' data belongs to you. We process it on your instructions.

2. Who this covers

This policy applies to ironcedartechnology.com, audit.ironcedartechnology.com, and to the managed website and response services Iron Cedar Technology LLC provides. It covers four different groups of people, and the answers differ:

• Website visitors — people reading this site.
• Audit users and prospects — people who request an audit, email, call, or book a consultation.
• Internal users — authorized Iron Cedar personnel who use the private audit dashboard.
• Clients, and their customers — businesses who buy a plan, and the members of the public who contact those businesses.

3. Website visitors

The marketing site is built as static files without behavioural tracking. Specifically:

• No cookies are set by the marketing pages.
• No analytics — no Google Analytics, no pixels, no session recording, no heatmaps.
• Google Fonts — the pages request font stylesheets and font files from Google. Your browser therefore sends Google information ordinarily included in a web request, such as your IP address, browser information, and the requested resource.
• No advertising trackers, and no data shared with any ad platform.

Our hosting provider keeps standard server logs, which typically include IP address, request time, page requested, and browser user-agent. Those are kept by the host for its own security and operational purposes. We do not use them to build profiles.

4. Audit users and prospects

If you request an audit, email us, or book a consultation, we collect what you choose to provide. This may include your name, business name, email address, phone number, trade, website, city, state, postal code, service area, and anything you tell us about your situation.

For a free audit, we combine those details with information that is already public, such as your website content and technical signals, Google business-listing information, website performance measurements, and local search or competitor observations. We store the request, report, evidence, and processing status so we can provide the report, maintain an internal full-audit view, troubleshoot the result, and follow up about the requested audit.

The prospect-facing report is a limited view reached through a long, unguessable link. Anyone who has that link may be able to view the report, so do not forward it unless you intend to share it. The private Iron Cedar dashboard requires an authenticated session cookie.

Initial follow-up is manual. We do not sell or rent prospect information or share it for cross-context behavioural advertising.

Consultations are booked through Google Workspace. Google processes that booking data as our service provider under its own terms.

5. Text message (SMS) terms and conditions

Our website forms offer two separate optional checkboxes for text messages from Iron Cedar Technology LLC, and you can tick either, both, or neither:

• Customer care — replies to an inquiry you sent, your requested audit, scheduling, and support.
• Marketing — occasional offers and promotions. This consent is collected on its own and is never bundled with the customer care consent.

Both start unchecked, and every form submits without either one. If you opt in to either:

• message frequency varies, and message and data rates may apply;
• you can cancel at any time by texting STOP to the number that messaged you. We will send one text confirming you are unsubscribed, and then no further texts. To join again, sign up the same way you did the first time;
• you can reply HELP for help, or get help by calling (703) 782-4377 or emailing contact@ironcedartechnology.com;
• carriers are not liable for delayed or undelivered messages;
• consent is not a condition of purchase; and
• we record the date, source, and disclosure version as evidence of your choice.

For questions about SMS messages, contact us at contact@ironcedartechnology.com or +1-703-782-4377.

Customer data is not shared with third parties for promotional or marketing purposes. Mobile opt-in and consent are never shared with anyone for any purpose. Any information sharing mentioned elsewhere in this policy excludes mobile opt-in data.

SMS/mobile opt-in and consent data will not be shared with third parties. We protect it the same way as the rest of your information: access controls on our accounts, credentials kept out of public code and reports, and service providers used only to deliver our service and only for that purpose (see sections 11 and 14).

Checking a box does not itself send a text. Iron Cedar is beginning with manual follow-up and will not activate an automated SMS workflow until the sending account, carrier registration, consent design, and opt-out handling are ready.

No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. Information sharing to subcontractors in support services, such as customer service is permitted. All other use case categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

Replying STOP ends all texts from us to that number. Declining or stopping texts has no effect on anything else you buy from us.

6. Cold outreach

We do contact contractors we have not met before, by telephone. When we do:

• We state a real first and last name and the company name at the start of the call.
• We call only between 8am and 9pm in your local time.
• We dial by hand. We do not use autodialers, prerecorded messages, or synthetic voice for outbound prospecting.
• We screen against do-not-call requirements and keep our own permanent do-not-call list.
• If you ask not to be contacted again, we record it immediately and stop. You can also email contact@ironcedartechnology.com with "do not contact" and we will add you.
• We do not send unsolicited marketing text messages.

7. Clients — and your customers' data

When you buy a plan, people contact you through the system we built. Their names, phone numbers, messages, and inquiry details are your data.

In the language of privacy law, you are the controller of that data and Iron Cedar is a processor acting on your instructions. We use it only to run the service you bought. We do not use your customers' information for our own marketing and we do not sell it.

You are responsible for having a lawful basis to collect it, for giving your customers the notices they are owed, and for your own privacy policy.

8. Client text messaging

Automated messaging is registered to your business — your legal name, your tax identification, your opt-in wording — because you are the sender of record, not us.

• Every message identifies your business.
• Every campaign supports STOP and other reasonable opt-out wording, plus HELP.
• Anyone who opts out is suppressed immediately, not within a grace period.
• Message and data rates may apply for the recipient.
• Messaging is not switched on until consent design, opt-out handling and carrier registration are complete and approved.

9. Call recording

We record some calls, and we always ask first. Sales, onboarding and support calls may be recorded and transcribed so we have accurate notes of what was agreed.

How we ask depends on the kind of call.

• A meeting you booked with us. The booking page tells you the call may be recorded and transcribed, and you agree to it when you book. The calendar invitation repeats it, and we confirm out loud at the start. If anyone else joins the call, we ask them too — agreeing when you booked covers you, not them.
• A call we make to you that you did not book. We ask at the start, before anything else, and we wait for you to say yes.

If you say no, we do not record. We take written notes instead, and nothing about the service, the price, or how we treat you changes. You can change your mind partway through and we will stop, and you can ask us to delete what was already captured.

Some states require every person on a call to agree before it can be recorded, and we apply that as the rule everywhere. We do not rely on you having heard a notice and carried on talking.

What we do with a recording

• Notes and accuracy — what you asked for, what we agreed, and what we promised.
• Transcription and summaries, which may use an automated or artificial-intelligence service. That provider processes the audio for us and is listed in the sharing table below.
• Improving how we explain things and training, if we ever have staff.
• Resolving a dispute about what was said.

What we do not do with a recording: we do not sell it, we do not publish it, we do not use it in advertising or on this website, and we do not use it to build a profile of you for targeting. We do not use recordings to train anyone else's artificial-intelligence models, and we require our transcription provider to process the audio only for us.

How long we keep it. Recordings and transcripts are kept while the conversation is commercially relevant and for as long as any dispute or legal obligation requires, then deleted. You may ask us to delete a recording of your own call at any time, and we will unless we need it for a live dispute or the law requires us to keep it. Exact periods are part of the pending attorney review.

Client calls are different. Iron Cedar does not currently offer artificial-intelligence call answering, and we do not record calls between our clients and their own customers.

10. Payments

Payments are handled by Stripe. Iron Cedar does not receive or store full card numbers. Stripe processes payment data under its own privacy terms.

11. Who we share information with

We share personal information only with service providers who need it to deliver the service, and only for that purpose. Some are used only when that part of the service is switched on.

Provider	What for
Google Workspace	Email, calendar and booking
Stripe	Payments
Hosting and database providers	Running the websites, the audit app and our records
Google Fonts	Typefaces on this website
Google Places and PageSpeed Insights	Reading a public listing and measuring a public website
DataForSEO	Local-search and competitor observations
OpenAI	Turning audit findings into plain-language explanations. Contact details from forms are never sent
Our transcription provider, when a call is recorded	Call audio and the transcript made from it, to produce notes and summaries for us
Our client platform provider	Contact records, audit summaries, consent evidence, and client messaging and review workflows
Our Google Business Profile service provider	Business information, images and authorised profile access, for clients on that service

The last two are described by role rather than by name because which vendor performs that work is a delivery choice we can change without changing your service. If you want their current names, ask us and we will tell you.

We remain responsible for what any provider or subcontractor does with information we give them, and we require each to use it only to perform the work and not for their own purposes.

We also disclose information where we are legally required to. We do not sell personal information and we do not share it for cross-context behavioural advertising.

If the business changes hands. If Iron Cedar is sold, merges, or transfers its business or assets, client and prospect records may transfer with it. We will tell clients before that happens. Whoever takes over is bound by this policy until they give you notice of a different one. If Iron Cedar instead shuts down, records are deleted or destroyed except what we must keep to honour an opt-out or meet a legal obligation.

Where your information is processed. Iron Cedar operates in the United States and our providers process information in the United States. We do not direct our services to people outside the United States.

12. How long we keep it

Prospect inquiries and audit records are retained unless you make a verified deletion request or Iron Cedar determines they are no longer needed. Client records are kept for the life of the agreement and afterwards for as long as tax, accounting and legal obligations require. Do-not-contact and opt-out suppression records are kept permanently in minimal form so an old opt-out is not accidentally reversed.

Call recordings and their transcripts are kept while the conversation is commercially relevant and for as long as a dispute or legal obligation requires. You may ask us to delete a recording of your own call at any time.

A verified deletion request covers the Iron Cedar audit database and connected CRM records where applicable. It also removes the public audit report, except for minimal records we must keep to honor an opt-out or meet a legal obligation.

13. Your choices and rights

Depending on where you live and whether a privacy law applies to your request, you may have the right to access, correct, delete, or obtain a portable copy of your personal information, to opt out of targeted advertising or sale, and to appeal a refusal.

To exercise any of them, email contact@ironcedartechnology.com. Tell us what you want done, and give us the email address or phone number you used with us so we can find your records. If you are asking on someone else's behalf, say so.

We will acknowledge within 10 days and respond within 45 days. If a request is complex and we need longer, we will tell you why before that runs out. We will not treat you differently for asking, and there is no charge.

We have to check it is really you first. We will ask you to confirm the request from the email address or phone number we already hold for you, or to tell us something only you would know. If we cannot reasonably confirm who you are, we will say so rather than act on it. This protects you — without it, anyone could delete your records or ask us for a copy of them.

If we say no, you can appeal. Reply within 30 days and ask us to look again. Someone will review it fresh and you will get a written answer within 60 days explaining the decision. If you are still not satisfied, you can complain to your state Attorney General, and we will tell you how when we give you our answer.

If you are a customer of one of our clients and want your data removed, contact that business directly — it is their data, and we act on their instructions.

14. Security

We use reasonable access controls and protect credentials from public code and reports. The private audit dashboard requires authentication, and public report links use long random tokens. No system is perfectly secure, and we do not claim otherwise.

If something does go wrong. If we find a security incident that has exposed personal information, we will investigate it, stop it, and tell the people affected and any regulator the law requires, without unreasonable delay. We will say what happened, what was involved, and what we are doing about it. Clients are told even where the law would not require it, because you would need to decide what to tell your own customers.

15. Children

This service is sold to businesses and is not directed at children. We do not knowingly collect personal information from anyone under 16.

16. Changes

If this policy changes materially we will update the date at the top and, for clients, tell you directly.

17. Contact

Iron Cedar Technology LLC — Virginia
contact@ironcedartechnology.com