Your Data, Handled with Care.

At Iron Software, privacy isn’t an afterthought, it’s a core part of how we build software and support enterprise teams. Our approach to privacy and data protection is designed to give you full transparency and peace of mind.

We also encourage you to visit: Trust Center

Committed to Global Standards

Iron Software is fully GDPR-compliant and adheres to leading privacy regulations, including the California Consumer Privacy Act (CCPA) and other applicable data protection laws worldwide.

We act as the Data Controller for any personal data we process and ensure our service providers operate as Data Processors under our direction.

What We Collect and Why

We collect only the data necessary to:

  • Provide and improve our Services.
  • Support licensing validation and usage diagnostics.
  • Respond to customer inquiries and ensure compliance with legal obligations.

This includes:

  • Limited machine-level diagnostics (for license validation).
  • Contact details submitted via forms or trial sign-ups.
  • Non-personal analytics data (e.g. website usage trends).

We do not sell your personal data. Ever.

Where and How Data Is Stored

All personal data is securely stored on servers located in the United States, subject to U.S. law. We use encryption and industry best practices to protect your data, both in transit and at rest.

For enterprise customers, no documents, PDFs, or other proprietary project data processed via our tools is sent to Iron Software. Everything runs locally unless explicitly shared for support purposes.

Your Rights

Under GDPR and other global laws, you may have the right to:

  • Access, correct, or delete your personal data.
  • Object to processing or request data portability.
  • Restrict how your information is used.

You can read the full list of rights and how to exercise them in our Privacy Statement.

For Procurement Teams

We provide clear documentation to support your internal compliance needs, including: