Privacy Policy

1. Introduction

IronBolt AI LLC (“IronBolt,” “we,” “us,” or “our”) is a New York limited liability company that provides customizable artificial-intelligence-powered telephone and customer-engagement systems to businesses.

This Privacy Policy explains how we collect, use, disclose, process, retain, and protect personal information in connection with our website and services.

Please read this Privacy Policy together with our Terms of Use, Legal Notices, Do Not Sell or Share My Personal Data page, and Cookie Settings.

2. Scope of This Privacy Policy

We handle personal information in two different capacities.

A. Information We Control

We control personal information we collect and use for our own business purposes, including information relating to website visitors, prospective clients, clients and their representatives, demos, billing, support, administration, security, and our own business communications.

B. Information We Process for Clients

When a business uses IronBolt, our systems may process information about that business's callers, customers, prospective customers, and other contacts.

In that context, IronBolt generally acts as a service provider or processor on behalf of the business client and processes information according to the client's instructions and our agreement with that client.

The client determines the purposes for which its customer information is processed and is responsible for its own privacy notices, contact lists, communication practices, consent requirements, and lawful instructions.

If you interacted with a business that uses IronBolt and wish to exercise a privacy right relating to that interaction, you may contact that business directly. You may also contact IronBolt, and where appropriate we will refer or assist with the request.

This Privacy Policy does not govern the independent privacy practices of our clients or unrelated third parties.

3. Information We Collect and Process

Depending on the interaction and service configuration, we may process:

• name;
• telephone number;
• email address;
• business name;
• service address;
• professional or employment information;
• service requests;
• appointment or scheduling information;
• billing and transaction information;
• website and network information;
• call metadata;
• call recordings;
• call transcripts;
• AI-generated call summaries;
• SMS and messaging information;
• CRM information;
• customer and lead information;
• client-provided scripts, workflows, offers, pricing, and configurations;
• support communications; and
• inferences generated from interactions, such as the apparent reason for a call or requested service.

Not every category is collected in every situation.

4. Information You Provide Directly

You may provide information when you request a demo, submit a website form, call us, communicate with us, become a client, provide account or billing information, provide system-configuration information, request customer support, or otherwise interact with IronBolt.

Information you provide may include your name, business name, telephone number, email address, billing information, and information concerning your business and its operations.

5. Information Collected Automatically

Our hosting and security infrastructure may automatically receive technical information such as IP address, browser type, device type, operating system, referring URL, pages requested, dates and times of access, and ordinary server-log information.

As of the date of this Privacy Policy, IronBolt does not use third-party website analytics, advertising pixels, retargeting technologies, or session-recording technologies.

Standard hosting and security logs may still be maintained for operational and security purposes.

6. Information We Receive From Business Clients

Clients may provide information necessary to build, configure, and operate their IronBolt systems, including company information, services, hours, service areas, client-approved pricing, scripts, questions, routing instructions, notification recipients, escalation rules, appointment settings, offers and promotions, and customer or prospective-customer lists for client-directed engagement workflows.

Clients are responsible for having the right to provide that information and for its accuracy and lawfulness. IronBolt does not independently verify every customer list supplied by a client.

7. Call, Voice, Recording, and Transcript Data

IronBolt's services may directly interact with callers through AI-powered telephone systems.

Call recording and transcription are enabled by default unless otherwise configured.

Depending on the interaction, IronBolt and its service providers may process caller name, telephone number, call time and duration, reason for the call, requested service, answers to configured questions, preferred callback information, call metadata, audio recordings, call transcripts, and AI-generated summaries or classifications.

The standard caller-facing recording notice is: “This call may be recorded for quality purposes.”

Calls may also be transcribed and processed using automated and artificial-intelligence technologies as part of providing the configured service.

Recording, monitoring, and communications laws vary by jurisdiction. Clients remain responsible for evaluating requirements applicable to their businesses, callers, locations, and use of the service.

IronBolt does not use client calls, recordings, transcripts, or client customer data to train or fine-tune general-purpose artificial-intelligence models.

8. SMS and Messaging Data

IronBolt may facilitate text-message notifications to client personnel and, where configured by a client, client-directed communications to customers or prospective customers.

We and our messaging providers may process sender and recipient telephone numbers, message content, timestamps, delivery information, replies, and opt-out information.

Message and data rates may apply. Where supported, recipients may reply STOP to stop messages and HELP for assistance.

Message frequency varies and depends on your account activity and, for client personnel, on the client's inbound call volume.

No mobile information is shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent are not shared with any third parties. Mobile numbers may be disclosed to the messaging service providers that transmit messages on our behalf, solely to deliver the messages described in this section.

Clients are responsible for obtaining any legally required consent, maintaining lawful contact lists, honoring applicable opt-outs and do-not-call requests, and complying with applicable communications laws and carrier requirements.

9. Cookies and Similar Technologies

Our website currently uses browser storage that is strictly necessary to operate the website, maintain security, and remember privacy and cookie preferences.

One optional functional technology is available: a website chat provided by a third-party CRM and messaging provider. It is off by default and does not load unless you turn on the Functional category in Cookie Settings. If you leave that category off, the chat does not load and nothing is requested from that provider.

Analytics and advertising technologies are not currently in use.

You can review and change your preferences through Cookie Settings.

10. How We Use Personal Information

Where we act for our own business purposes, we may use personal information to:

• operate, maintain, and secure our website;
• provide, configure, and support IronBolt services;
• conduct demos;
• respond to inquiries;
• provide customer support;
• administer accounts;
• process billing and payments;
• prevent and investigate fraud, abuse, and security incidents;
• troubleshoot and maintain our services;
• communicate with clients and prospective clients;
• comply with legal obligations;
• enforce agreements; and
• protect our rights and systems.

When acting on behalf of a client, we process information to carry out that client's configured services and instructions, including answering calls, collecting information, creating transcripts and summaries, delivering notifications, scheduling, and operating client-authorized engagement workflows.

11. How We Disclose Personal Information

We may disclose personal information to service providers and subprocessors; the business client on whose behalf information was collected; professional advisers such as attorneys and accountants; payment and billing providers; parties involved in a merger, acquisition, financing, restructuring, or sale of assets; governmental or law-enforcement authorities where legally appropriate; and other parties where reasonably necessary to protect rights, safety, security, or property.

We do not disclose client customer information to unrelated third parties for their own independent marketing.

12. Service Providers and Subprocessors

IronBolt relies on third-party providers that may perform functions involving cloud hosting and infrastructure, telecommunications and telephone services, artificial intelligence and language processing, speech processing, transcription, messaging, CRM services, scheduling, payment processing, security, email delivery, and automation.

We disclose provider categories rather than maintaining vendor names in this Privacy Policy. Providers may change as our technology and infrastructure evolve.

13. Client Customer Data

A client's customer database remains the client's property. IronBolt does not acquire ownership of client customer information merely because we process it.

We do not sell or rent client customer databases and do not use client customer information to market IronBolt's own services.

14. Artificial Intelligence Processing

IronBolt uses artificial intelligence and automated technologies to interact with callers, process conversations, collect information requested by clients, create transcripts, create AI-generated summaries, assist with lead intake, classify interactions, perform scheduling or routing functions, and operate client-configured engagement workflows.

AI systems are probabilistic and may make mistakes, including misunderstanding speech, misinterpreting accents or poor-quality audio, incorrectly classifying caller intent, creating inaccurate transcripts or summaries, providing incorrect information, or failing to recognize unusual circumstances.

We do not warrant that AI-generated conversations, transcripts, summaries, classifications, or collected information will always be accurate, complete, appropriate, or suitable for a particular purpose.

Clients remain responsible for appropriate human review and verification before relying on AI-generated information for important decisions.

IronBolt is not an emergency response service. Where a caller asks whether they are speaking with a person, the AI assistant is configured to respond truthfully.

15. Advertising and Analytics

IronBolt does not currently use Google Analytics, third-party analytics technologies, advertising pixels, retargeting technologies, targeted-advertising trackers, or session-recording technologies on this website.

If these practices change, we will update this Privacy Policy and Cookie Settings and provide applicable controls.

16. Sale or Sharing of Personal Information

Some U.S. state privacy laws define “sale” and “sharing” broadly.

IronBolt does not sell personal information for monetary consideration.

Based on the website technologies currently in use, we do not believe we sell or share personal information for cross-context behavioral advertising as those terms are defined under applicable state privacy laws.

If our practices change, we will update our disclosures and provide legally required opt-out mechanisms. See Do Not Sell or Share My Personal Data for additional information and privacy choices.

17. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, subject to legal, contractual, security, backup, fraud-prevention, and dispute-resolution requirements.

• Call recordings: generally up to 90 days.
• Call transcripts: generally up to 12 months.
• AI-generated call summaries: generally up to 12 months.
• Call metadata needed for billing, fraud prevention, security, or dispute handling: generally up to 24 months.
• Client-uploaded customer or campaign lists: while needed to provide the service and generally deleted or returned within 90 days after termination, subject to backup, legal, security, and contractual requirements.
• Website inquiries and prospective-client communications: generally up to 24 months after the last meaningful interaction.
• Support communications: generally up to 24 months after resolution.
• Privacy-request records: generally at least 24 months after completion.
• Billing, accounting, tax, security, fraud, contractual, and dispute records: for the period reasonably necessary to satisfy applicable legal, accounting, tax, enforcement, and recordkeeping obligations.

A particular client agreement or lawful preservation obligation may require a different period.

18. Data Security

We use reasonable administrative, technical, and organizational measures appropriate to the nature of the information we process. No website, service, or electronic transmission can be guaranteed to be completely secure.

If you believe your interaction with IronBolt is no longer secure, contact us using the information below.

19. Consumer Privacy Rights

Depending on where you live and which law applies, you may have rights to:

• confirm whether we process personal information about you;
• access personal information;
• correct inaccurate information;
• request deletion;
• receive certain information in portable form;
• opt out of a qualifying sale;
• opt out of qualifying sharing or targeted advertising;
• limit certain uses of sensitive personal information where applicable;
• appeal certain privacy-request decisions; and
• receive nondiscriminatory treatment for exercising applicable privacy rights.

Privacy rights vary by jurisdiction and may be subject to exceptions.

20. California Privacy Rights

If the California Consumer Privacy Act, as amended, applies to IronBolt's processing of your information, you may have rights including access, correction, deletion, portability, opting out of qualifying sale or sharing, and nondiscriminatory treatment.

Depending on the interaction, categories of information we may process include identifiers, commercial information, internet or network activity information, audio and electronic information, professional information, and inferences.

Based on our current website technology, we do not believe the website constitutes a sale or sharing of personal information for cross-context behavioral advertising.

21. Other U.S. State Privacy Rights

Residents of other states may have similar privacy rights where applicable law applies to IronBolt. We use a common privacy-request process and provide applicable rights based on the requesting person's jurisdiction and circumstances.

22. How to Submit a Privacy Request

You may submit a privacy request through our online privacy-request form, by emailing support@ironboltai.com, or by calling 929-381-9649.

Please identify the privacy right you wish to exercise and provide enough information for us to locate the relevant records.

23. Verification of Privacy Requests

We may take reasonable steps to verify your identity before fulfilling a request. Verification requirements will depend on the nature and sensitivity of the information involved. We will request only information reasonably necessary to verify the request.

24. Authorized Agents

Where applicable law permits, an authorized agent may submit a request on your behalf. We may request evidence of authorization and may separately verify your identity.

25. Appeals

Where applicable law provides a right to appeal a privacy-request decision, you may appeal by replying to our response, emailing support@ironboltai.com, or calling 929-381-9649.

26. Opt-Out Preference Signals

IronBolt recognizes qualifying browser-based opt-out preference signals, including Global Privacy Control (GPC), where applicable.

When a qualifying signal is detected, optional website categories are treated as disabled for that browser.

27. Children's Privacy

Our website and services are marketed to businesses and are not directed to children.

We do not knowingly solicit personal information directly from children under 16 through the IronBolt website.

Because IronBolt processes communications for business clients, information relating to a minor could incidentally be processed if a minor contacts one of our clients. In that situation, IronBolt processes the information on the client's behalf.

28. Do Not Track

Our website does not respond to traditional browser “Do Not Track” signals because there is no universally accepted standard for those signals. We separately recognize qualifying Global Privacy Control signals as described above.

29. Third-Party Websites and Integrations

Our website and services may link to or integrate with third-party scheduling providers, meeting providers, CRM platforms, calendars, communications platforms, and other services.

Those services are controlled by third parties and have their own privacy practices. IronBolt is not responsible for their independent privacy practices.

30. International Data Processing

IronBolt is based in the United States and currently markets and onboards clients in the United States.

Our service providers may process information in the United States or other countries. Our website and services are not presently directed to individuals in the European Economic Area, United Kingdom, or Switzerland.

31. Changes to This Privacy Policy

We may update this Privacy Policy as our services, technology, or legal obligations change. The “Last Updated” date above identifies the latest revision. Where required by law, we will provide additional notice of material changes.

32. Contact Us

IronBolt AI LLC — New York limited liability company
Phone: 929-381-9649
Email: support@ironboltai.com