Iron Horse AES · Your privacy
Privacy & Cookies
Effective and last updated: October 30, 2026
What we collect, why we use it, and the choices you have.
This policy covers ironhorseaes.com and junk.ironhorseaes.com, operated by IronHorse AES L.L.C. (Iron Horse AES). It covers website visits and inquiries you send us.
1. Information we handle
Company website inquiries. When you choose “Send project brief” on ironhorseaes.com, we receive the name, email address, optional company and phone details, selected services, project location, dates, and description you provide. We use a request reference to handle your inquiry. Typing a draft, or copying or downloading it, does not by itself submit it to us.
Junk removal requests and payments. When you submit a request, we receive your contact details, pickup location, job description, access information, chosen items or load, proposed price and any uploaded photos. We save requests and normalized photos privately in Supabase and use them to review, price and arrange the work. Private links and essential cookies let you view your request; approved staff use separate sign-in sessions. Stripe hosts the payment request for the agreed or published price. We store invoice identifiers, totals and payment status, but do not collect or store your card details. Dispatch confirms pickup timing separately.
Website delivery and security. Hosting and infrastructure providers process technical information such as IP addresses, requested URLs, timestamps, browser/device information and errors to deliver the sites, troubleshoot problems and prevent abuse. The company inquiry form also uses a temporary hashed network identifier for rate limiting.
Optional analytics. If you allow it, we collect the visit and interaction information described below. Please do not send payment-card details, government identifiers, passwords, or sensitive personal information in a project brief or planner.
2. How we use information
- Respond to your inquiry, discuss scope and availability, and communicate about services you request.
- Deliver and protect the websites, prevent spam and misuse, and resolve technical problems.
- Understand use of public pages and improve the sites when you allow optional analytics.
- Maintain necessary business records, resolve disputes and meet legal obligations.
Submitting an inquiry does not subscribe you to a marketing mailing list. We do not use these sites to make automated decisions about your eligibility for services.
4. Optional analytics & session replay
We use PostHog only after you choose “Allow analytics & replay.” It helps us understand public page visits, browser/device basics, general referral and campaign labels, and selected actions such as clicking a contact link. Random browser and session identifiers connect activity within that site; we do not use them to build named visitor profiles or link your identity across the two websites. IP anonymization is enabled.
Session replay reconstructs interactions such as scrolling and clicks on eligible public pages. We mask page text and input values and block form areas, uploaded content and other private elements. Replay is disabled on contact and planner forms and on private, admin, sign-in and payment pages. We do not enable recording of console logs, network request bodies or headers, video or audio.
Analytics event URLs have query strings and fragments removed, and event fields are restricted so form descriptions, names, email addresses, phone numbers, addresses and private links are not sent as event details. Referrals are limited to the referring site, and campaign labels must follow a restricted format. Transport and infrastructure providers still process network information needed to deliver requests.
Choosing Decline or withdrawing permission stops future optional capture and recording. It does not prevent you from requesting service. We do not run advertising pixels or use these sites for cross-site advertising. Read more about PostHog’s data collection controls.
5. Service providers & disclosures
We use providers for specific functions:
- Vercel hosts and delivers both websites and processes associated technical and security information.
- PostHog processes optional visit analytics and public-page replays in our US-region project when you allow collection.
- Supabase stores private removal requests, photos, staff sessions and payment records. Stripe handles hosted invoices and payments.
- Resend delivers company inquiries and junk request/payment updates, and Google Workspace handles our business email. They process the message and contact details needed for that communication.
- The junk website serves its typeface files from its own hosting. Font delivery does not enable optional analytics.
We disclose information to the people and providers who need it to respond to your request or supply these functions. We may also disclose it when required by law, to protect rights or safety, or in a business transfer subject to appropriate protections. Information may be processed in the United States and other countries where our providers operate.
Links to outside websites take you to services with their own privacy practices. Their policies apply to information you provide directly to them.
6. Retention & security
PostHog session recordings are configured for 30-day retention. That period applies to replay recordings, not to all analytics events or business messages. Other visit analytics are retained under our provider’s retention settings while needed to understand and improve site use.
Inquiry and email retention depends on whether we are still discussing a project, providing support, keeping necessary business or transaction records, meeting legal obligations or resolving a dispute. Infrastructure logs follow the hosting and security services’ retention settings. Browser-storage durations are described above. Contact us for information about a particular record or to request deletion; legal or operational exceptions may apply.
We use HTTPS, access restrictions and data-minimizing analytics settings to protect information. No internet transmission or storage system can be guaranteed completely secure. Copies or downloads you create remain under your control on your device.
7. Your privacy choices & requests
You may contact us to ask what personal information we hold about you, request access or a copy, correct inaccuracies, or request deletion. Depending on applicable law, you may also have rights to restrict or object to processing, withdraw consent, or complain to a privacy regulator. California rights, where the CCPA applies, include access/knowledge, correction, deletion, and opting out of sale or sharing. We do not sell or share website information for cross-context behavioral advertising.
Email info@ironhorseaes.com with the subject “Privacy request,” or call (818) 825-3104. Describe your request and which website or inquiry it concerns. We may need information to verify your identity or an authorized agent’s authority before providing or deleting records. Do not send identity documents or sensitive account details in your initial message. We will respond within the time required by applicable law and will not discriminate against you for exercising a privacy right.
These websites are intended for people arranging business or household services, not for children under 13. If you believe a child has provided personal information, contact us so we can address it.
8. Contact & policy updates
IronHorse AES L.L.C.
Email: info@ironhorseaes.com
Phone: (818) 825-3104
We update this policy when our website practices change and show the revised date above. If a change requires a new choice, we will request it before starting the affected optional collection. This policy does not open bookings or activate features marked as previews.