1. Introduction

AIChatForm ("Service") is operated by IRON35 LLC ("Company", "we", "us", or "our"). This Privacy Policy describes how we collect, use, and share information when you use our Service.

By using the Service, you agree to this Privacy Policy. If you do not agree, do not use the Service.

2. Information We Collect

We collect information you provide directly (account details, forms, responses) and automatically (IP addresses, browser information, usage data, cookies). Payment information is processed by Stripe.

Form data and conversation transcripts you create are stored on our servers and processed through third-party AI providers (OpenAI, Anthropic).

3. How We Use Information

We use collected information to provide the Service, process payments, enforce usage limits, improve features, provide support, ensure security, and comply with legal obligations.

Data License. By using the Service, you grant us a worldwide, royalty-free, non-exclusive license to use, store, process, reproduce, and analyze data you submit to or collect through the Service solely to:

• provide, operate, maintain, and improve the Service;
• monitor and prevent abuse and security incidents; and
• comply with legal obligations.

We may also use aggregated and/or de-identified information for analytics, research, and to promote the Service (for example, by publishing usage statistics), but we will not use your identifiable form responses or conversation content in our public marketing without your separate consent.

4. Information Sharing

We do not sell your personal information. We share information with:

• Service providers (Auth0, Stripe, OpenAI, Anthropic, hosting providers)
• Legal authorities when required by law or to protect our rights
• Potential acquirers in the event of a business transfer

AIChatForm uses third-party AI providers (such as OpenAI and Anthropic) to extract and generate responses from your data. These providers process information under their own privacy policies and terms, which govern how your data is handled. We do not control or assume responsibility for their data practices. Your use of our Service is also subject to their terms, and we are not responsible for your independent use of these AI services.

5. Data Security and Retention

We use commercially reasonable security measures including HTTPS/TLS encryption, Auth0 authentication, and access controls. However, no system is completely secure. We cannot guarantee the security of your information.

Data is retained while your account is active and may be retained longer for legal, tax, or operational purposes. Deleted data may remain in backups for up to 90 days.

You are responsible for obtaining any necessary consents from your end users and providing any required notices before collecting their data, and for ensuring that your collection and use of personal data through the Service complies with all applicable privacy laws. We do not provide legal advice about your obligations. We remain responsible for our own obligations under such laws in connection with our role in processing personal data.

6. Your Rights

You may access, update, or delete your data through the Service interface or by contacting [email protected]. Depending on your location, you may have additional rights under GDPR, CCPA, or other laws.

We will respond to valid requests within a reasonable timeframe, subject to legal limitations. We reserve the right to verify your identity and the validity of requests.

7. Limitations and Disclaimers

THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE," TO THE FULLEST EXTENT PERMITTED BY APPLICABLE LAW. EXCEPT AS REQUIRED BY LAW, WE DISCLAIM ALL WARRANTIES, WHETHER EXPRESS, IMPLIED, OR STATUTORY, INCLUDING ANY IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT.

We use commercially reasonable safeguards to protect your information, but we do not warrant that the Service will be error-free, uninterrupted, or completely secure.

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, IRON35 LLC AND ITS OWNERS, OFFICERS, DIRECTORS, MEMBERS, EMPLOYEES, AND AGENTS WILL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES, OR FOR ANY LOSS OF PROFITS, REVENUE, DATA, OR GOODWILL, ARISING OUT OF OR RELATING TO YOUR USE OF OR INABILITY TO USE THE SERVICE, EVEN IF WE HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

SUBJECT TO APPLICABLE LAW, THIS LIMITATION APPLIES TO CLAIMS ARISING FROM, AMONG OTHER THINGS: (A) UNAUTHORIZED ACCESS TO OR LOSS OF YOUR DATA; (B) DATA BREACHES OR SECURITY INCIDENTS; (C) ACTIONS OR OMISSIONS OF THIRD-PARTY SERVICE PROVIDERS; (D) YOUR VIOLATION OF PRIVACY LAWS OR REGULATIONS; OR (E) ANY OTHER MATTER RELATING TO THE SERVICE.

TO THE EXTENT PERMITTED BY LAW, OUR AGGREGATE LIABILITY FOR ALL CLAIMS RELATING TO THE SERVICE OR THIS PRIVACY POLICY WILL NOT EXCEED THE FEES YOU PAID US FOR THE SERVICE IN THE THREE (3) MONTHS IMMEDIATELY PRECEDING THE EVENT GIVING RISE TO THE CLAIM.

NOTHING IN THIS SECTION EXCLUDES OR LIMITS LIABILITY THAT CANNOT BE EXCLUDED OR LIMITED UNDER APPLICABLE LAW.

8. International Transfers

Your information may be transferred to and processed in countries with different data protection laws than your own. Where required by law, we take steps to put in place appropriate safeguards for such transfers (for example, contractual protections recognized under applicable data protection laws).

9. Children's Privacy

The Service is not intended for anyone under 18. We do not knowingly collect information from children. If we learn we have collected such information, we will delete it.

10. Third-Party Services

The Service also integrates with third-party services such as analytics providers (for example, Google Analytics). These services have their own privacy policies and terms, and we encourage you to review them. We do not control or assume responsibility for their data practices. Your use of our Service is also subject to their terms, and we are not responsible for your independent use of these third-party services.

11. Changes to This Policy

We may modify this Privacy Policy at any time without notice. The "Last Updated" date will reflect changes.

Your continued use of the Service after changes constitutes acceptance. It is your responsibility to review this policy periodically.

12. Indemnification

You agree to indemnify, defend, and hold harmless IRON35 LLC and its owners, officers, directors, members, employees, and agents from and against any third-party claims, damages, losses, or expenses (including reasonable attorney fees) to the extent arising out of or related to: (a) your use of the Service; (b) your violation of this Privacy Policy or applicable laws; (c) your collection or processing of data through the Service; or (d) any data you submit to the Service, except to the extent such claims are caused by our own negligence or willful misconduct.

13. Governing Law

This Privacy Policy is governed by the laws of the State of New Jersey, without regard to conflict of law principles. Any disputes shall be resolved through binding arbitration as described in our Terms of Service.