Iron Dispatch

Privacy Policy

Last updated September 23, 2026

Who we are

Iron Dispatch is field-operations software for oilfield service companies: equipment tracking, fuel delivery, dispatch, inspections, and time tracking. Your employer (or the company that gave you access) is the controller of the work data in their account; Iron Dispatch operates the platform on their behalf.

What we collect

  • Account information — your name, email address, phone number, role, and job title, entered by you or your company's office.
  • Work records — the things you log in the app: fuel deliveries, equipment moves, inspections, work orders, hours worked, breaks, and sign-offs, and the signatures a customer gives on a delivery ticket.
  • Location — see the next section. This is the most important thing to understand about this app.
  • Photos — pictures you take in the app (fuel gauges, inspection defects, certification cards, compliance documents). Stored privately for your company.
  • Device basics — the technical minimum to run the app (browser type, session tokens). We do not run advertising trackers. The public website (irondispatch.app) uses Vercel Web Analytics and Cloudflare Web Analytics, which count page views in aggregate without cookies and without storing anything that identifies a visitor. The signed-in app has no analytics. When the app itself breaks, it sends us a crash report: what went wrong, on which screen, the app version, your role, and a random number that stands for your phone. It never includes your name or what you typed. Crash reports are deleted after 30 days. The walkthrough request form and the free-trial request form use Cloudflare Turnstile to tell people from bots; Cloudflare sees the request details needed for that check and nothing you type.
  • Website requests — if you ask for a walkthrough or a free trial on the website, we keep the name, email, phone and company you give us so we can reply.
  • Questions to Copilot — when someone in your company asks Copilot a question, sets the company up with Copilot, or reads an equipment manual into the app, the question and the company records needed to answer it are sent to Anthropic, the maker of Claude, to write the answer.
  • Spoken directions — the directions voice is recorded ahead of time. When it needs to say a place name your company saved, such as a well site, a yard or an errand stop, that name is sent once to Google Cloud Text-to-Speech to record it.
  • Address lookups — when someone types an address and taps Find this address or Look up this address, the typed address is sent to the US Census Bureau's address service to find it on the map.
  • Support access — Iron Dispatch staff can sign in as someone in your company to help, when your company has turned on support access in its settings, for the time it chooses (24 hours, 7 days or 30 days). Without that permission, staff can only do it in an emergency by writing down a reason, and your company's owner is emailed right away. Every support visit is listed in your company's settings.

Location tracking — read this

If you share your location, or your company turns on location sharing for everyone on the clock, the app records your device's GPS position while you are clocked in so the office can see where each truck last checked in and verify site visits. While a driver is clocked in and sharing location, the app records where the truck went. Those recorded trips are kept for 30 days and then deleted. Where a truck drives a road our map does not yet have, the shape of that road is kept for the navigation system with everything that could identify the person, company, phone or trip removed. The road layer also learns how fast roads actually drive — as a number per road, never per person. Nothing in it can answer how fast any one driver was going. Nothing is recorded off the clock or signed out. Your company decides whether sharing is required and who can see it; ask your office about their policy.

How your information is used

To run the product your company signed up for: dispatching work, tracking equipment and fuel, producing invoices and delivery tickets for their clients, approved employee hours (which your company can send to QuickBooks Online as time entries), compliance records, and notifications about your assignments. We do not sell personal information, and we do not use it for advertising.

Who we share it with

  • Your company — owners, managers, and dispatchers in your organization see the work data and (if enabled) on-the-clock locations.
  • Their clients — delivery tickets, invoices, and statements your company chooses to send include the relevant job records.
  • Service providers — infrastructure we use to run the platform: Supabase (database and file storage), Vercel (hosting), Resend (email), Stripe (subscriptions are billed through Stripe outside the app; no card details are entered in Iron Dispatch), Mapbox (map tiles), Anthropic (Copilot answers), Google Cloud Text-to-Speech (spoken place names), the US Census Bureau (address lookups), and, where a company connects them, QuickBooks (their accounting) and GPS-tracker providers. Each receives only what is needed for its function.
  • Legal — if the law requires it.

Retention & deletion

Work records are business records — they are kept for as long as your company keeps its account, because invoices, safety inspections, and compliance files need history. Recorded trips are deleted after 30 days; only anonymised road shapes are kept for the map. If you leave a company, your account is deactivated by their office; to exercise deletion rights over personal data, contact your company (the controller) — we assist them in fulfilling requests.

Request account or data deletion

In the app: open Me and tap Request account deletion. That files the request against your account so it cannot be lost in an inbox, and you can choose your whole account or just your personal details. Or by email: write to privacy@irondispatch.app from the address on your account with the company you work(ed) for and what you want removed — your whole account or specific personal data. We confirm the request with your company (the data controller), deactivate the account, and delete personal data that the company is not legally required to retain (safety and billing records may have to be kept; location breadcrumbs and personal details do not). We respond within 30 days.

Security

Data is encrypted in transit, stored with per-company isolation enforced at the database layer, files live in private storage with short-lived access links, and nightly backups are maintained.

Children

Iron Dispatch is a workplace tool for adults. It is not directed at children and we do not knowingly collect information from anyone under 16.

Contact

Questions or requests: privacy@irondispatch.app. We'll update this page when the policy changes and note the date above.

← Back to home · All legal documents