Privacy policy
Version: 1.0 · Effective: on publication · Status: draft for attorney review alongside the Subscription Agreement.
This policy explains what information IronBridge Systems (a trade name of Sidewalk Holdings LLC, “IronBridge”, “we”) collects and how we use it, for three groups of people: customers (the dealerships that subscribe to SteelSync), the users those customers give access to, and visitors to this website.
1. Customer data in SteelSync
Everything a customer’s users enter into or load onto their SteelSync environment (work orders, parts requests, timecards, expense receipts, documents, equipment and telematics data, and so on) is the customer’s property, and we process it only on the customer’s behalf and instructions, as the Subscription Agreement or Pilot Terms set out. The customer decides what goes in, who may see it and when it is deleted. If you are an employee of a customer and have a question about your own information in SteelSync, contact your employer first; we assist them.
2. Information we collect ourselves
- User accounts. Name, work email address, role and permissions, and the store or department assigned to the account. Where the customer uses Microsoft 365 sign-in, these come from the customer’s own Microsoft directory and we store no password.
- Activity and audit records. Sign-ins, the pages and actions taken, the time, and the network (IP) address, kept so administrators can see who did what, for security, and for support.
- Billing contacts. The name, email address and title of the people a customer names for billing and agreements, and the record of who accepted an agreement, when, from which network address, and the exact text they accepted.
- Payment details. Payments are processed by Stripe. We receive the payment status, the last digits and type of a payment method, and the payer’s name and email. We never see or store full card or bank account numbers.
- Email. When the platform sends email (notifications, reports, invoices), we keep a delivery log of the recipients, subject and delivery result.
- Support. The content of emails you send us.
3. How we use it
To provide, secure, support and improve the platform; to send the notifications and reports a customer’s configuration asks for; to invoice and collect payment; to meet legal obligations; and to communicate with customers about their account. We do not sell personal information, and we do not use it for advertising. We do not use customer data to train machine-learning models.
4. Who else handles it
We use a small number of service providers, each bound by its own terms and security commitments, and each only to the extent needed for its role:
| Provider | Role | Where |
|---|---|---|
| Google Cloud | Hosting, databases, file storage and backups for every SteelSync environment | United States (us-central1) |
| Cloudflare | Domain names, network security and delivery in front of the platform and this website | Global edge; traffic for US customers is served from the US |
| Stripe | Invoicing and payment processing | United States |
| Postmark (ActiveCampaign) | Delivery of email sent by the platform and the account portal | United States |
| GitHub | Hosting of the code repositories, including each customer’s module repository | United States |
| Microsoft | Single sign-on and directory sync where a customer enables Microsoft 365 integration; email sending where a customer chooses to send through its own Microsoft 365 tenant | The customer’s own Microsoft tenant |
Connectors a customer enables (for example a dealer management system or a manufacturer’s telematics service) exchange data with those services under the customer’s own accounts and agreements with them.
We disclose information when the law requires it, or to protect the rights, safety or property of IronBridge, our customers or others.
5. Security
Each customer’s environment is isolated from every other customer’s, with its own database credentials and storage. Data is encrypted in transit. Access is limited to the people who need it to run and support the platform. Audit logs record administrative actions. Nightly backups are retained for 30 days. We notify the affected customer without undue delay if we confirm unauthorised access to its data.
6. Retention
We keep customer data for as long as the customer’s pilot or subscription lasts, and delete it from the platform and its backups within 60 days after it ends, unless the law requires longer retention. Billing records and agreement acceptances are kept for as long as tax and contract law require. Website server logs are kept by Cloudflare for a short period for security and are not used to identify visitors.
7. This website
This website sets no cookies and runs no analytics or tracking. It is served by Cloudflare, which keeps standard, short-lived server logs. Email you send to the addresses on this site goes to our Google Workspace mailboxes.
8. Your choices and rights
Depending on where you live, you may have the right to ask what personal information we hold about you, to correct it, or to have it deleted. Users of a customer’s SteelSync environment should make requests through their employer, who controls that data; anyone else may write to us at the address below. We answer within 30 days. We do not treat you differently for exercising these rights.
9. Children
SteelSync and this website are for businesses and their employees. They are not directed at children under 18, and we do not knowingly collect information from them.
10. Changes
When this policy changes, the new version and its date appear here. Customers are told about material changes by email or a notice in the platform.
11. Contact
IronBridge Systems · Sidewalk Holdings LLC · PO Box 58956, Salt Lake City, Utah 84158, United States · [email protected]