Privacy Policy

Short version: we don't collect much, we don't sell anything, and we tell you what's actually happening. The long version is below.

This policy is a working document. We'll update it as the site evolves and the Cloud Platform launches. The "last updated" date at the top is current.

What this policy covers

This policy describes how White Iron handles information collected through whiteiron.cloud. It does not cover the separate Cloud Platform (when launched at app.whiteiron.cloud), which will have its own privacy policy, or our engagement with specific clients, which is governed by the Master Services Agreement signed at the start of an engagement.

What we collect

Aggregated, anonymous traffic data

We use Cloudflare Web Analytics, which counts pageviews and referrers without setting cookies, fingerprinting browsers, or identifying individuals. Cloudflare's analytics product is designed around the principle that aggregate counts are useful and individual tracking is not. We can see "300 people visited /healthcare/hipaa-compliance last week." We cannot see who any of them were.

Bot protection signals (Cloudflare Turnstile)

The waitlist and contact forms use Cloudflare Turnstile, which runs a series of automated checks on your browser to confirm you're not a bot. Turnstile is a privacy-respecting alternative to traditional CAPTCHAs and does not require user interaction in most cases. Turnstile may use information about your browser environment to perform its checks. Cloudflare's Turnstile Privacy Addendum describes this in detail.

Information you submit via forms

If you fill out the waitlist form on /cloud or send us an email directly, we receive whatever information you choose to share: typically your name, email address, company or practice name, and a description of what you'd use our services for. This information is used to respond to your inquiry. We do not sell it, share it with third parties for marketing, or include it in any kind of data analysis or AI training set.

Server logs

Like every web server, ours produces access logs that include timestamps, IP addresses, and the URLs requested. Cloudflare operates the edge and retains these logs per their standard policy. We use them only for debugging, security, and operational purposes. We do not correlate them with form submissions or any other identifying data.

What we don't collect

• We don't use third-party advertising or retargeting cookies.
• We don't run Google Analytics, Facebook Pixel, or similar trackers.
• We don't fingerprint your browser to identify you across sessions.
• We don't sell or share your data with anyone for any commercial purpose.
• We don't include your data in AI training sets, model fine-tuning, or similar.

Email Routing

When you email us at info@pst.co or any *@whiteiron.cloud address, your email is delivered via Cloudflare Email Routing to our operational inbox. Cloudflare's privacy practices apply to this routing layer.

Cookies

We don't set cookies for tracking or analytics. The browser may receive transient cookies from Cloudflare's security and bot-protection services; these are operational, not used for advertising or profiling.

Your rights

You can request that we delete any information you've submitted to us, or correct it. Email info@pst.co with the request. If you're in a jurisdiction with formal data-protection laws (CCPA, GDPR, etc.) and want to exercise rights under them, the same email works — we'll respond within the statutory timeframe.

Children

This site is intended for adult business audiences. We do not knowingly collect information from anyone under 13. If you believe a child has submitted information to us, email info@pst.co and we'll delete it.

Changes

When this policy changes, we update the "last updated" date at the top. Material changes will be flagged in a notice on the site. We don't email policy changes — that's an SaaS pattern and we're not an SaaS.