# Privacy Policy · HandledIQ

> What HandledIQ collects, why, where it lives and your choices. Includes a section for homeowners.

Canonical: https://app.handlediq.com/legal/privacy
Last updated: 2026-10-26

## Privacy Policy

Effective October 26, 2026. Version 2026-10-26. Operated by Ironclad Solutions LLC, a Puerto Rico company that operates HandledIQ.

This policy explains what Ironclad Solutions LLC, a Puerto Rico company that operates HandledIQ collects when businesses use HandledIQ, why, where it is kept and the choices people have. It covers the people who sign in to HandledIQ, and the homeowners and customers whose information a shop keeps in it (see [If a company uses HandledIQ to serve you](#homeowners)). Our [contact privacy notice](https://app.handlediq.com/privacy) covers our own contact form.

### Two kinds of information

**Account information** about the shop and the people who sign in. HandledIQ decides how this is used, as this policy says.

**Shop records**, including information about the shop’s customers and their homes. The shop decides what goes in and how it is used; HandledIQ handles it on the shop’s behalf, under the [Data Processing terms](https://app.handlediq.com/legal/data-processing).

### What we collect

#### From people who sign in

- Name, work email and role. Passwords are stored only as a one-way Argon2id hash; we never see or keep the password itself.
- Sign-in records: when a session started and was last used, a fingerprint of each session token, and a trusted-device marker if emailed sign-in codes are on.
- The network address of sign-in attempts, kept for one day to stop password guessing.
- A technician’s location while they share it during a working day, from their phone or from a tracker the shop puts in the truck they drive, used for the live map, the customer’s on-the-way link and the truck’s miles. A truck tracker’s points from outside that day are deleted, never kept or shown. Trackers send to HandledIQ’s own server, never to another company. Positions are deleted after 30 days.
- On the HandledIQ phone app, the phone’s alert address while alerts are on, so the person’s own alerts reach that phone. It goes when they turn alerts off or delete their account.
- What a person does in the app: who said yes to what, who sent what and when. This record is how HandledIQ shows who authorized each action.

#### About the shop

- The shop’s name, address, phone, trade, time zone, website and settings.
- Keys and permissions for services the owner connects (for example Stripe, Google, Meta, QuickBooks, Xero or old field-service software). These are encrypted before they are stored.
- What the shop enters for its own work: jobs, schedules, price book, estimates, invoices, payments recorded, costs, expenses, payroll preparation files and team chat.

#### About a shop’s customers (kept for the shop)

- Names, phone numbers, email addresses and service addresses.
- Home and equipment details, photos, notes, visit records, estimates, invoices and payment status.
- Texts and emails exchanged with the shop, and written transcripts of calls answered by HandledIQ’s receptionist when the caller agrees.
- Each customer’s choices about texts and email, including STOP and unsubscribe, kept so they are honored.

We do not ask for or keep full card numbers, bank account numbers, Social Security numbers or health information. Please don’t type them into notes.

### How we use it

- To run HandledIQ for the shop: keep its records, show its schedule, prepare and send its messages, take its payments through Stripe, and connect the services it chose.
- To keep accounts secure, find and fix problems, and answer support requests.
- To meet legal obligations and enforce our terms.

We do not sell personal information. We do not share it for anyone else’s advertising. We do not use one shop’s records to serve or train anything for another shop. A private model built only from one shop’s own corrected decisions is made only if that shop’s owner says yes; it serves only that shop, and the owner can retire it at any time.

### AI that reads records

Hoss, record search and HandledIQ’s decision support run on computers Ironclad Solutions LLC operates. HandledIQ does not send shop records to outside AI companies on its own. An AI app connects only when someone chooses it: an AI app a shop’s owner connects reads what the owner allowed, with each customer as a stand-in and without their names, phones, emails, streets, notes or photos unless the owner turns customer details on for that app, and a person’s own AI app gets the shop prices and open times it asks for (see [Booking from an AI app](https://app.handlediq.com/legal/ai-booking)). One more exception is speech: when a caller agrees to a written transcript, Telnyx turns their speech into text during the call (see [Subprocessors](https://app.handlediq.com/legal/subprocessors)). When a shop’s owner turns on coaching and a homeowner agrees to have a sales visit recorded, HandledIQ’s own speech reader writes the visit down on computers we operate and the recording is deleted; the words and the coaching stay with the shop. AI suggests; it never authorizes money or messages by itself.

### Who receives information

- **Our subprocessors**, only for the work listed on the [Subprocessors](https://app.handlediq.com/legal/subprocessors) page.
- **Services a shop connects**, when the shop’s owner turns the connection on (for example sending an approved invoice to QuickBooks).
- **The shop’s customers**, through the links the shop sends them (their home record, estimate, invoice or payment page). These links are private: each is a long random address that search engines are told not to index.
- **Authorities**, when the law requires it. Where allowed, we tell the shop first.
- **A buyer**, if HandledIQ is ever sold or merged, under the same promises in this policy.

### Google and Meta accounts a shop connects

When a shop’s owner connects a Google account (Google Ads, Business Profile or Search Console) or a Meta business account, HandledIQ receives only what the owner allows on Google’s or Meta’s own screen. It uses that only for the HandledIQ features the owner turned on for that shop: what its ads cost and which booked jobs they brought, the shop’s request links, and the ad, post or listing changes the owner approved. HandledIQ’s use and transfer to any other app of information received from Google APIs will adhere to the [Google API Services User Data Policy](https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements. We never sell this information, never use it for another shop or anyone else’s advertising, and never use it to train AI models. The owner can disconnect at any time in Marketing, under Accounts. The [connected advertising notice](https://app.handlediq.com/marketing/privacy) has the details.

### Cookies and similar

HandledIQ uses only the cookies it needs to work: a sign-in cookie, a form-safety cookie, and, when emailed sign-in codes are on, a trusted-device cookie that lasts 30 days. All are HttpOnly and sent only over HTTPS on the live site. There are no advertising or analytics trackers. The browser also remembers a few display choices on your own device.

### Where it is kept

HandledIQ’s app and database run on a server in Virginia that Ironclad Solutions LLC rents from OVHcloud US and runs itself. A standby copy runs on a computer Ironclad Solutions LLC operates in the United States. Traffic reaches them over HTTPS through Cloudflare. Encrypted backups go off-site to Cloudflare R2, with a second copy at Backblaze in the United States. Some subprocessors may process data in other countries under their own safeguards; the [list](https://app.handlediq.com/legal/subprocessors) says where.

### How long it is kept

- Shop records are kept while the shop’s account is open, so the shop has its full history. HandledIQ adds corrections as new history instead of erasing what was there.
- Technician positions: 30 days. Sign-in attempt addresses: one day. Sign-in sessions end after 12 hours, or 30 minutes without use.
- When a shop asks us to close its account, we delete its records except what the law requires us to keep, such as records of consent and of money that moved. Deleted records can remain in encrypted backups until those backups are replaced.

### Your choices

- **Shop owners** can see, correct and export everything in their shop at any time, and can close the shop from Passports & export: 7 days later it closes, and within 30 days its records are deleted and the owner gets a signed receipt of what was deleted and what the law makes us keep. They can also ask by emailing [hello@handlediq.com](mailto:hello@handlediq.com) from the owner’s email.
- **People who sign in** can delete their own account from inside HandledIQ, on the phone app or the web: Settings, then Delete your account (a technician: Profile, then Delete my account). Their sign-in goes at once, with their alert addresses, Hoss chats and, for a technician, their photo, location points, calendar links and license photos; the shop keeps its own records of the work they did. They can also ask their shop’s owner to correct or remove their sign-in, or email us.
- **Customers of a shop** should ask that shop first, because the shop controls its records. You can also email us and we will pass your request to the shop and help it respond.

Depending on where you live, you may have rights to access, correct, delete or get a copy of your information, and to not be discriminated against for using them. We honor these through the steps above and will verify a request before acting on it.

### If a company uses HandledIQ to serve you

Home-service companies use HandledIQ to schedule visits, send estimates and invoices, take payments and keep a record of the work at your home. That company decides what information about you it keeps and how it uses it; HandledIQ stores and processes it for them and does not use it for anything else.

- Links you receive from the company (your home record, an estimate, an invoice or a payment page) are private to you. Anyone with the link can open it, so share it only with people you trust.
- Card payments are handled by Stripe for the company. HandledIQ does not see or keep your card number.
- Texts come from the company. Reply STOP to any text to stop them, and HELP for help. The company’s own [text message terms](https://app.handlediq.com/terms), when it has them, explain more.
- If the company’s phone is answered by HandledIQ’s receptionist, it tells you so, and saves a written transcript only if you agree.
- HandledIQ does not sell your information, does not market to you itself, and does not share your information with other companies for their marketing.
- To see, correct or delete your information, contact the company. If you can’t reach them, email [hello@handlediq.com](mailto:hello@handlediq.com) and we will help.

### Children

HandledIQ is for businesses and is not meant for children. We do not knowingly collect information from children under 13.

### Changes and contact

We publish each new version with its date at [Changes to these terms](https://app.handlediq.com/legal/changes). Questions or requests: [hello@handlediq.com](mailto:hello@handlediq.com) · [(888) 905-3626](tel:+18889053626).

### Related

- [Terms of Service](https://app.handlediq.com/legal/terms)
- [Data Processing terms](https://app.handlediq.com/legal/data-processing)
- [Acceptable Use](https://app.handlediq.com/legal/acceptable-use)
- [Subprocessors](https://app.handlediq.com/legal/subprocessors)
- [Security](https://app.handlediq.com/legal/security)
- [Booking from an AI app](https://app.handlediq.com/legal/ai-booking)
- [Changes to these terms](https://app.handlediq.com/legal/changes)
- [Text message terms](https://app.handlediq.com/terms)