Privacy Policy

1. Scope and who we are

Iron Peak Technologies LLC ("Iron Peak," "we," "us," or "our") provides Form Command. This Privacy Policy applies to our public website, registration and support forms, and the Form Command application. It does not govern websites and services operated independently by third parties.

2. Information we collect

Information you provide

• Account information: company or organization name, email address, password-derived authentication data, account status, roles, entitlements, and account timestamps.
• Project and construction information: project names, job numbers, locations, uploaded PDF, DWG, or DXF files, original filenames, drawing metadata, interpreted linework and wall geometry, dimensions, corrections, form inventory and quantities, pour plans, form layouts, field plans, warnings, and related planning records.
• Support communications: your name, email address, subject, message, submission context, and our response or handling records.
• Transactional email records: recipients, message type, delivery status and timestamps, provider identifiers, and limited failure summaries used for reliable delivery and duplicate prevention.
• Billing information: Stripe customer, Checkout Session, subscription, Price, invoice, and webhook identifiers; subscription state; selected plan; trial and billing-period dates; amounts; and operational records. Payment-card details are entered directly in Stripe-hosted interfaces and are not stored by Form Command.

Information collected automatically

Our servers and security tools may process IP address, standard request and response information, browser or device characteristics made available through web requests, authentication and session events, application usage, errors, security events, and timestamps. We use this information to deliver, protect, troubleshoot, and maintain the service.

3. Cookies and similar technologies

Form Command uses cookies and related technologies needed for authentication, sessions, anti-forgery protection, security, and keeping signed-in users connected. Disabling them may prevent parts of the application from working.

Registration and the public support form use Google reCAPTCHA when configured to distinguish legitimate activity from abuse. reCAPTCHA receives a response token and may process network and device information, including IP address, under Google's applicable terms.

The current application is not designed to use advertising cookies or cross-site behavioral advertising. If we introduce nonessential tracking, we will update this policy and implement choices required by applicable law.

4. How we use information

We use information to provide and administer Form Command; authenticate users and enforce permissions; store files and project records; interpret supported drawings; generate, save, and display planning outputs; operate trials and subscriptions; process and reconcile Stripe events; send account, billing, and support communications; provide support; prevent fraud and abuse; maintain security and availability; diagnose errors; comply with law; and establish, exercise, or defend legal claims.

We may use aggregated or de-identified information that cannot reasonably identify you to understand and improve service operation.

5. How we disclose information

We disclose information only as reasonably necessary for the purposes described above:

• Service providers: Stripe processes hosted Checkout, billing, and the Customer Portal; Google provides reCAPTCHA; Amazon SES delivers outbound application email; and hosting, database, storage, and infrastructure providers support service operation.
• Your organization: project and account information may be available to authorized users and administrators associated with the account.
• Legal and safety: we may disclose information when reasonably necessary to comply with law or lawful process; protect rights, safety, and security; investigate misuse; or enforce agreements.
• Business transactions: information may be transferred as part of a merger, financing, acquisition, reorganization, bankruptcy, or sale of assets, subject to applicable confidentiality and legal requirements.

We do not sell personal information for money, and the current service does not share personal information for cross-context behavioral advertising or targeted advertising.

6. Retention, cancellation, and deletion

We retain information while an account is active and as reasonably necessary to provide and secure the service, support customers, maintain business and financial records, resolve disputes, enforce agreements, and comply with law. Retention varies by record and purpose.

You may request access, correction, or deletion through Contact Support or by emailing support@formcommand.app. We may need to verify the requester and their authority over the account. We may retain limited billing, email activity, security, dispute, legal, and backup records where reasonably necessary or required. Information in backups may remain until those backups cycle out through ordinary processes.

7. Security

We use administrative, technical, and organizational measures designed to protect information, including password hashing, access controls, anti-forgery validation, server-side billing verification, security checks, and transport protections provided by our environment and providers. No transmission or storage method is completely secure, and we cannot guarantee absolute security.

You are responsible for using a strong, unique password, protecting credentials, limiting authorized access, controlling the content uploaded to the service, and contacting us promptly if you suspect misuse.

8. Your choices and rights

You may update certain account and project information in the application. You can manage eligible subscriptions and payment methods through the Stripe Customer Portal available from Account Settings. You may contact us to request access to, correction of, or deletion of personal information.

Depending on where you live and applicable law, you may have additional privacy rights. We will not discriminate against you for making a lawful privacy request. We may deny or limit a request where an exception applies and will explain the decision where required.

9. Children's privacy

Form Command is a business service and is not directed to children under 13. We do not knowingly collect personal information directly from children under 13. Contact us if you believe a child has provided information so we can review and respond appropriately.

10. Policy changes and contact

We may update this policy as the service or legal requirements change. We will post the revised policy with a new “Last updated” date and provide additional notice where required by law.

For privacy questions or requests, contact Iron Peak Technologies LLC at support@formcommand.app or use our support form.