Privacy Policy

1. Information We Collect

Account Information

When you create an account, we collect:

• Name and email address
• Company/dealership name and phone number
• Password (stored as a cryptographic hash - we cannot recover it)

Usage Data

When you use the Service, we collect:

• Valuation requests: equipment make, model, year, hours, condition, attachments entered
• Valuation results generated and viewed
• Feature usage patterns (which pages visited, how often)
• IP address, browser type, and device information for security purposes

Payment Information

Payment processing is handled by Stripe, Inc. IronValue does not store credit card numbers. We store only a Stripe customer ID and subscription status. Stripe's privacy policy governs the handling of your payment data.

Cookies

We use essential cookies to maintain your login session. We do not use third-party tracking cookies or advertising cookies. A session cookie is set when you log in and expires when you log out or after 7 days of inactivity.

2. How We Use Your Information

We use collected information to:

• Provide and improve the IronValue Service
• Process subscription payments and manage your account
• Send transactional emails (account confirmation, password reset, billing receipts)
• Send product updates and feature announcements (you may opt out at any time)
• Detect and prevent fraud or abuse
• Comply with legal obligations

We do not sell your personal information to third parties. We do not use your equipment valuation data for advertising targeting.

3. Aggregated Data

We may use aggregated, de-identified data (e.g., "the most commonly valued equipment category this month was excavators") for product improvement and marketing purposes. This data cannot be used to identify individual users or their specific valuations.

4. Data Sharing

We share data with the following third parties under appropriate data processing agreements:

• Stripe, Inc. - Payment processing
• Cloudflare, Inc. - Infrastructure, CDN, and DDoS protection
• Resend / Email provider - Transactional email delivery

We may disclose data if required by law, court order, or governmental authority, or to protect the rights, property, or safety of IronValue, our users, or the public.

5. Data Retention

• Account data: Retained while your account is active and for 90 days after deletion
• Valuation history: Retained for the duration of your subscription plus 90 days
• Payment records: Retained for 7 years per financial record-keeping requirements
• Server logs: Retained for 30 days

6. Data Security

We implement industry-standard security measures including:

• HTTPS/TLS encryption for all data in transit
• Encryption at rest for database contents
• Password hashing using PBKDF2 with per-user salts
• JWT-based authentication with short-lived access tokens
• Rate limiting and intrusion detection

7. Your Rights

You have the right to:

• Access: Request a copy of the data we hold about you
• Correction: Update inaccurate personal information via your account settings
• Deletion: Request deletion of your account and associated data
• Portability: Request a machine-readable export of your valuation history
• Opt-out: Unsubscribe from marketing emails at any time using the link in any email

To exercise these rights, contact us at privacy@ironvalue.com.

8. Children's Privacy

IronValue is a business-to-business service for commercial equipment dealers. We do not knowingly collect personal information from anyone under 18. If you believe we have inadvertently collected such information, contact us immediately.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or a prominent notice on the Service at least 30 days before the change takes effect.

10. Contact Us

Questions or concerns about this Privacy Policy? Contact our privacy team at privacy@ironvalue.com.

IronValue, Inc. | Kansas City, MO