Privacy Policy

1. Who We Are

Ironline Automation ("Ironline", "we", "us", or "our") is a business automation service provider based in Toronto, Ontario, Canada. We provide done-for-you SMS automation systems to trades businesses and local service companies operating in Ontario.

This Privacy Policy explains how we collect, use, disclose, and protect personal information in connection with our services and website at ironlineagency.com.

Ironline Automation operates in compliance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and Canada's Anti-Spam Legislation (CASL).

2. Information We Collect

Information from End Customers (Recipients of SMS Messages)

When individuals interact with our automated SMS systems on behalf of our clients, we may collect:

• Phone number (provided when they call or text a client's business number)
• First name (if provided during SMS conversation)
• Message content (the content of text conversations with the automated system)
• Timestamp and date of messages
• Opt-in and opt-out status
• Service request details (type of service requested, general location)

Information from Business Clients

When businesses engage Ironline Automation as a service provider, we collect:

• Business name, address, and contact information
• Owner or authorized representative name and email
• Business phone number
• Service area and operational details
• Payment information (processed securely through Stripe — we do not store card details)

Information Collected Automatically

When you visit ironlineagency.com, we may collect standard web analytics data including IP address, browser type, pages visited, and time on site. We do not use tracking cookies for advertising purposes.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Delivering SMS automation services — sending missed call text-backs, appointment reminders, lead follow-up messages, and review requests on behalf of our clients
• Managing opt-in and opt-out requests — ensuring compliance with CASL and carrier regulations
• Improving service quality — reviewing conversation logs to improve AI response accuracy
• Billing and account management — processing payments and managing client accounts
• Legal compliance — maintaining records required by applicable law
• Communication — responding to inquiries and providing client support

We do not use personal information for advertising, profiling, or any purpose beyond delivering the services described above.

4. SMS Messaging — Consent and Opt-Out

How Consent Is Obtained

End customers provide consent to receive SMS messages through one or more of the following methods:

• Missed call text-back: When a customer initiates contact by calling a business, an automated text-back is sent in response. The customer's call constitutes implied consent to receive a reply via SMS.
• Web form submission: When a customer submits their phone number through a business's website or contact form and agrees to receive communications.
• Keyword opt-in: By texting START to a business number, customers provide express consent to receive messages.
• Appointment booking: When customers book appointments through the business's scheduling system and provide their phone number for confirmation and reminders.

How to Opt Out

You can opt out of receiving SMS messages at any time by replying STOP to any message. Your opt-out will be processed immediately and automatically. You will receive one final confirmation message and no further messages will be sent.

To opt back in, reply START to the business number at any time.

For additional support, reply HELP to any message.

5. Third-Party Services We Use

Ironline Automation uses the following third-party services to deliver our platform. Each has its own privacy practices:

• Twilio — SMS delivery infrastructure. Twilio processes message content and phone numbers to deliver SMS messages. Privacy policy: twilio.com/legal/privacy
• Airtable — Data storage for client and customer records. Privacy policy: airtable.com/privacy
• OpenAI — AI language processing for automated conversation responses. Privacy policy: openai.com/privacy
• Stripe — Payment processing for client billing. We do not store payment card details. Privacy policy: stripe.com/privacy
• Cal.com — Appointment scheduling for demo bookings. Privacy policy: cal.com/privacy

We do not sell, rent, or share personal information with third parties for their own marketing purposes. Information is only shared with third parties to the extent necessary to deliver our services.

6. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected:

• SMS conversation data — retained for the duration of the client relationship, plus 12 months
• Client business information — retained for the duration of the service agreement, plus 7 years for legal and tax purposes
• Opt-out records — retained indefinitely to ensure compliance with opt-out requests
• Website analytics — retained for 12 months

When data is no longer needed, it is securely deleted or anonymized.

7. Data Security

We take the security of personal information seriously. Our safeguards include:

• Encrypted data transmission (HTTPS/TLS) for all web communications
• Access controls limiting who can view personal data
• Use of reputable, security-certified third-party platforms (Twilio, Airtable, Stripe)
• Regular monitoring and error detection on all automated systems

No method of electronic transmission or storage is 100% secure. While we use commercially reasonable safeguards, we cannot guarantee absolute security.

8. Your Rights Under PIPEDA

Under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), you have the right to:

• Access — Request a copy of the personal information we hold about you
• Correction — Request that inaccurate or incomplete information be corrected
• Deletion — Request that your personal information be deleted (subject to legal retention requirements)
• Withdrawal of consent — Withdraw consent for the use of your personal information at any time
• Complaint — File a complaint with the Office of the Privacy Commissioner of Canada (priv.gc.ca)

To exercise any of these rights, contact us using the information in Section 10. We will respond to requests within 30 days.

9. Children's Privacy

Our services are intended for business owners and adults. We do not knowingly collect personal information from individuals under the age of 18. If you believe we have inadvertently collected information from a minor, please contact us immediately and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

Continued use of our services after any changes constitutes acceptance of the updated policy.

11. Contact Us

For any questions, concerns, or requests related to this Privacy Policy or your personal information, please contact us:

We are committed to resolving privacy concerns promptly. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada at priv.gc.ca or 1-800-282-1376.