Legal

Privacy Policy

Effective 18 August 2026 Last updated 30 August 2026
The short version

01Who this policy covers

This policy is issued by Iron WatchDog ("Iron WatchDog", "we", "us") and describes how we handle information across all three of our products:

Iron WatchDog sells directly to organizations — mining companies and drilling contractors — for use by their employees and contractors. Individual consumers cannot sign up. If you use the console or mobile app, you do so with an account created for you by an administrator at your own organization.

02Two kinds of information

Keeping these separate is the clearest way to understand what we hold and who controls it.

Operational drilling data

Our sensors capture drilling parameters from instrumented rigs — rotation speed, torque, weight on bit, depth, circulation, engine and hydraulic readings, and metrics we derive from them such as rate of penetration and mechanical specific energy. This data also records which rig, which shift, and which driller a record belongs to, which is what makes per-driller scorecards possible.

This data belongs to the customer organization that operates the rigs, not to Iron WatchDog. We process it on their behalf and under their direction. We do not use one customer's drilling data to serve another customer, and we do not publish or sell it.

Account information

To give a person access to their organization's data, we hold the information needed to identify and authenticate them. This is described in the next section.

03What we collect

CategoryWhat it isWhy we have it
Identity Name, work email address, employing organization, job role or persona (driller, supervisor, administrator) To authenticate you and show you the data appropriate to your role
Credentials A hashed password and, at sign-in, a one-time six-digit code sent to your work email To verify it is really you. We never store your password in readable form
Session records A session identifier, sign-in and sign-out times, and the device or browser used To keep you signed in and to detect unauthorized access
Operational data Drilling, shift, and rig records as described in section 02 To deliver the service your organization has purchased
Support correspondence Anything you send us by email or phone when you ask for help To answer you and improve the product
Website analytics Aggregate page-view statistics on ironwatchdog.com, collected via Google Analytics To understand which parts of our public site are useful. This applies to the website only — not the console and not the mobile app

04What we never do

  • We do not sell or rent personal information to anyone, for any purpose.
  • We do not use your information for advertising, and we carry no advertising software in our products.
  • We do not track you across other companies' apps or websites, and we do not share data with data brokers.
  • We do not collect location, contacts, photos, microphone, camera, health data, or advertising identifiers in our mobile app.
  • We do not use your organization's drilling data to serve any other customer.

05How we use information

Where privacy law requires a legal basis, we rely on the performance of our contract with your organization, our legitimate interest in operating and securing the service, and, where applicable, your consent.

06Service providers who process data for us

We use a small number of established providers to run the service. Each is bound by contract to process data only as instructed, and none is permitted to use it for its own purposes.

ProviderWhat it does for usWhat it sees
Amazon Web Services Hosts our application servers and databases in the United States (AWS US East / Ohio region) All service data, at rest and in transit
Twilio SendGrid Delivers transactional email, including your one-time sign-in codes Your name and email address, and the contents of those messages
Anthropic Generates the written coaching and analysis summaries you see alongside your shift data De-identified shift metrics and rig identifiers. We do not send names, email addresses, or credentials. Anthropic does not use this data to train its models
Google Analytics Aggregate visitor statistics for the public website Standard web analytics on ironwatchdog.com only

We may also disclose information where we are legally required to, or where it is necessary to protect the rights, property, or safety of Iron WatchDog, our customers, or the public. If Iron WatchDog is ever involved in a merger or acquisition, information may transfer as part of that transaction, and this policy will continue to apply until it is superseded.

07The mobile app specifically

Because mobile apps have access to sensitive device features, here is exactly what the Iron WatchDog iOS app does and does not do.

Stored on your device

Signing out clears the session token. Deleting the app removes everything the app has stored locally.

Face ID and Touch ID

You can choose to unlock the app with Face ID or Touch ID. This is handled entirely by iOS. Your biometric data never leaves your device, is never transmitted, and is never accessible to Iron WatchDog — iOS simply tells the app whether the check succeeded.

Device permissions the app does not request

The app does not ask for and cannot access your location, contacts, calendar, photos, microphone, camera, health data, or advertising identifier. It contains no advertising software and no third-party analytics software.

Network

The app communicates only with Iron WatchDog servers, over encrypted HTTPS connections.

08How long we keep information

Operational drilling data is retained for the duration of your organization's subscription, because its value is historical — comparing this month against last year is the point of the product. Account information is retained while your account is active. Session records are retained for a limited period for security investigation.

When a subscription ends, we retain or delete data according to the terms of that organization's agreement with us. Backups are cycled out on a rolling schedule, so deleted data may persist in backup for a short period before it is overwritten. An organization can request deletion of its data at any time by contacting us.

09Your rights, and how to exercise them

Depending on where you live, you may have the right to ask what personal information we hold about you, to have it corrected, to have it deleted, to receive a copy of it, and to object to certain processing. We honor these requests regardless of jurisdiction, and we will not discriminate against you for making one.

Email info@ironwatchdog.com with the subject line Privacy Request. We will acknowledge within 10 business days and respond substantively within 30 days. We may need to verify your identity before acting, and we may need to consult your employing organization, since much of the data is held on their behalf.

Account deletion

You can delete your own account from inside the Iron WatchDog mobile app, at any time, without contacting anyone. Open Menu → Profile and choose Delete my account. You will be asked to confirm, because the action is immediate and cannot be undone.

Deleting your account permanently removes your login and everything that grants you access: your user record, your rig assignments, your permissions, any passkeys registered to you, and any active sessions. You are signed out straight away and the credentials stop working.

It does not delete your company's drilling data. The shift and sensor records produced while you worked are your employer's operational records, kept against the rig and the shift rather than against your login, and they remain part of their account. If you want that data removed as well, it has to be requested by your organization, since it is theirs rather than yours to delete.

You can still ask us instead if you prefer. Contact your organization's Iron WatchDog administrator, or email info@ironwatchdog.com and we will handle it.

10Security

All traffic to our website, console, and mobile app is encrypted in transit using TLS. Passwords are stored only as salted hashes. Sign-in requires a one-time code delivered to your work email in addition to your password. Access to production systems is restricted to the staff who need it, and data is stored in access-controlled cloud infrastructure.

No system is perfectly secure. If we become aware of a breach affecting your information, we will notify affected organizations and individuals as required by applicable law and without undue delay.

11International transfers

Iron WatchDog is based in the United States and our systems are hosted in the United States. If you use our products from outside the United States, your information is transferred to and processed there, where privacy laws may differ from those in your own country. Where required, we rely on appropriate transfer mechanisms such as the European Commission's Standard Contractual Clauses.

12Children

Iron WatchDog is a workplace tool for adults in industrial employment. It is not directed to children, and we do not knowingly collect information from anyone under 16. If you believe a child has provided us information, contact us and we will delete it.

13Changes to this policy

If we change this policy we will update the effective date at the top of this page. Where a change materially affects how we handle personal information, we will notify customer organizations directly. Continuing to use our products after a change takes effect means you accept the updated policy.

14Contact us

Questions about this policy, or about how your information is handled:

Office
4200 Research Forest Dr, Suite 190
The Woodlands, TX 77381
United States