Privacy policy

Effective July 31, 2026

What this covers

This policy covers irongrove.com and the services Irongrove, LLC provides: custom software, small-business websites, and Javelina, our DNS and traffic-control platform. It explains what we collect, why, and who else touches it. Where a client contract sets a stricter standard, the contract wins.

What we collect

From this website: what you type into the contact form, which is your name, work email, phone number, subject, and message. We also record the IP address the submission came from and the time it arrived, which is how we stop spam and abuse. Nothing else on this site collects data about you. From clients: the account and project information we need to build and operate what you hired us to build.

Cookies and tracking

This site sets no cookies. There is no advertising network, no third-party analytics, no session recording, and no cross-site tracking pixel on any page. You are not being followed here.

What we do with it

We use what you send us to answer you and to do the work. We do not sell personal data, we do not hand it to data brokers, and we do not add you to a marketing list because you filled out a form. If you asked a question, you get a reply, not a drip campaign.

Who else touches it

We use a short list of service providers, each for one job: Vercel (application hosting), Supabase (the database that stores contact form submissions), Resend (delivering the notification email), Freshdesk (the support inbox that receives it), Microsoft 365 (our business email), and Stripe (payments). Each of them processes data only to provide that service to us.

Payments

Payments are processed by Stripe, Inc., which is PCI compliant. Card details go to Stripe, not to us. Irongrove never sees, stores, or transmits card or bank numbers.

How long we keep it

Contact form submissions stay in our system while the conversation is open and for as long as we need them for our records, and we delete them on request. Client data is retained for the life of the engagement and any period the contract requires, then removed.

Security

Data moves over TLS and lives on managed platforms, with access limited to the Irongrove engineers who need it. We hold client systems to the same standard we hold our own. No system is perfect: if a breach ever affects your data, we will tell you, and we will tell you what we know rather than what sounds best.

Children

Our services are sold to businesses. We do not knowingly collect personal information from anyone under 13. If you believe a child sent us something, write to us and we will delete it.

Where this applies

Irongrove is based in Houston, Texas and serves clients across the United States. Data is processed in the United States. We comply with applicable federal and state privacy law, including the Texas Data Privacy and Security Act. This page is updated as we expand into other regions.

Changes to this policy

We update this page when what we do changes, and the effective date moves with it. Material changes go to the clients they affect, rather than landing as a silent edit. This version is effective July 31, 2026.

Your rights

You can ask what we hold about you, correct it, or have it deleted. Write to contact@irongrove.com and say what you want done. We answer these ourselves, and we answer them promptly. There is no form and no fee.

Questions about this policy

Ask us directly at contact@irongrove.com, or write to Irongrove LLC, 4901 Yale St, Houston, TX 77018. A person reads it.