Privacy & Confidentiality Policy
IronBelle Consulting, LLC — how we protect and handle your data.
Scope and information collected
This policy describes information handled by IronBelle Consulting, LLC through its website and remote platform. Information can include account and contact details, company profiles and hazards, worker names and training records, JSAs, incident descriptions, photos, uploads, sketches, signatures, support messages, and subscription or payment-status information. Incident and worker records may contain sensitive personal information. Provide only information needed for the task and that you are authorized to share.
How information is used
We process information to create and secure accounts, provide document and workflow features, generate AI-assisted drafts, store records and revisions, track training and tasks, send service communications, manage subscriptions and referrals, and respond to support requests. Authorized members of your organization can access records according to their roles. Account and service events may be recorded for security and audit purposes.
Service providers and AI processing
The platform uses Supabase for authentication, database, and file storage, Vercel for hosting, Stripe for payment processing, and email delivery providers for service messages. AI features use OpenAI to process relevant prompts, company or job information, and, where used by the feature, uploaded content or images. These providers receive information needed for their functions and process it under their applicable terms. Do not submit passwords, payment-card details, or unnecessary sensitive identifiers in AI prompts or uploads.
Payments and access
Payment-card details entered in the payment workflow are processed by Stripe. IronBelle uses subscription, transaction, and billing identifiers to manage service access. Information may also be accessible to authorized IronBelle personnel or service providers performing support and operations. Role permissions do not replace your duty to choose appropriate users and protect shared devices.
Sharing and required disclosures
We do not sell client documents. Information is shared as needed with your authorized organization users and the service providers described above. Information may also be disclosed when legally required or to address fraud, security incidents, or legal claims. This policy does not promise that information is never shared or accessed by providers.
Security and browser storage
The app uses account authentication, role-based permissions, and cloud services. No online system can guarantee absolute security. Secure your credentials and devices and report suspected unauthorized access. Cookies and browser storage are used for login sessions and app functionality; blocking or clearing them may sign you out or affect features.
Retention and deletion requests
Records may remain stored while needed to provide the service, maintain revision or signature history, address disputes, or meet legal and accounting obligations. Canceling a subscription does not automatically delete its records. Contact IronBelle to request access, correction, or deletion. We may need to verify your identity and authority, and some requests may be limited by legal duties, shared company records, or backup retention. This policy does not promise an immediate deletion deadline.
Worker information and organization requests
If your employer or organization manages your account or uploads your information, contact its authorized administrator about workplace records and access. The organization is responsible for providing appropriate notices and obtaining any permissions required for its uploads, photos, and signatures. You may also contact IronBelle for assistance with a privacy request; rights and available options depend on applicable law.
Optional worksite location
JSA worksite coordinates are optional. Use my location asks your browser for permission to capture your device location once; IronBelle does not track location in the background. You can enter coordinates manually, decline permission, or use the JSA without coordinates. After you confirm and save, coordinates, device-reported accuracy where available, and capture/confirmation times are stored with the JSA revision and included in its PDF for authorized company users. These coordinates are not sent to the AI generator by this feature. Using device location opens a satellite/aerial map and shares the selected area and normal connection information with USGS The National Map, subject to https://www.usgs.gov/privacy-policy. Opening the external satellite map shares coordinates with Google Maps, subject to https://policies.google.com/privacy. Imagery is not live; coverage, detail and image dates vary. Maps load only when requested through Use my location or Show satellite map. This also applies to supported digital forms that include worksite coordinates. Removing coordinates affects the next saved version; previous revisions and previously downloaded PDFs retain their records. Location records follow the retention and privacy-request process described above.
Service location and policy updates
Cloud service providers may process information in locations different from yours. The platform is intended for organizational workplace use. The policy version and update date appear on this page. Questions and privacy requests should be sent to IronBelle.ceo@gmail.com.
Offline drafts on your device
When enabled, offline JSA drafts store entered job information, photos, and associated draft content in this browser on this device. Device copies can be accessed by someone using the unlocked browser, including after sign-out. Signing out does not delete these copies. Drafts expire after seven days for app recovery; expired entries are cleaned when the app checks draft storage, not by a guaranteed remote erasure. Use the remove-device-copy control or clear browser data to remove local drafts. A cloud deletion request does not erase separately stored device copies or downloaded files.
Shared JSA links and signed copies
An active guest QR/signing link can provide access to the JSA shared through that link without a company account. Guest names are self-reported and are not independently identity-verified by the QR feature. Signature images and recorded signing events are stored with the signed version. Workers can download their signed copy and may optionally request it by email through the supported workflow. Share links only with intended participants and protect downloaded or emailed copies; copies already received cannot be recalled by editing a JSA.
AI photos, support, and narrated guidance
Photo-assisted review sends the selected work-area photo and relevant job context to the AI provider when requested. Support messages and relevant context may be processed by AI and are visible to authorized IronBelle administrators. Narrated guidance uses ElevenLabs, which receives the text submitted for speech generation under its applicable terms. Do not include passwords, unnecessary sensitive worker information, or confidential material you lack permission to share.
Workspace settings and chemical uploads
Workspace choices, selected departments, and workflow settings are stored with company records and available according to existing role permissions. A department shortcut does not create department-level privacy segregation of shared records. Chemical inventory entries and uploaded SDSs are available to authorized company users. Provide only information and files you have authority to upload.
Version 2026-10-13.1 · Updated October 13, 2026 · Questions? IronBelle.ceo@gmail.com