Privacy

Last updated September 28, 2026.

Iron Mountain Delivery LLC is a small courier business in Superior, Montana. To carry your things we have to know some things about you: who you are, where you live, what we're picking up. This page tells you exactly what we keep, why, who else sees it, how long we hold on to it, and what you can do about it. It covers this website, your account, our texts and emails, phone calls, and our van.

Questions go to privacy@ironmountaindelivery.com, or call the number at the bottom of this page.

The short version

We keep what we need to do the job, and not much else.
We don't sell your information, rent it, trade it, or use it for advertising. Not to anyone.
A handful of companies help us run the business. Each one gets only what its one job needs.
Photos of your door are deleted after 180 days, and most other records have a set lifetime too.
You can see, correct, get a copy of, or delete your information. Just ask.

What we collect

What you tell us

Your account: name, phone number, email, and a password. We store the password only in a scrambled form that can't be turned back into the password, so not even we can read it.
Your places: addresses, the exact spot on the map, gate and door codes, and where you'd like things left.
Your requests: what we're carrying, from where to where, when, how to handle it, and whatever a store needs to hand over your order, such as the name or order number it's under.
Your mail authorization: if you sign USPS Form 3801 through us so we can collect your mail, we keep the signed form and a record of how it was signed: the time, your device's internet address, and the kind of browser. That record shows the Post Office the signature is really yours.
Your choices: whether you agreed to texts and emails, the exact words you agreed to, and when.
What you send us: calls, texts, emails and notes, and anything you tell a driver that we need to remember.
Founders sign-ups: if you pledged to use us before we opened, your name, how to reach you, your town, what you'd send with us, and a rough idea of how often.

What we record doing the job

Proof of delivery: a photo of where we left your things, and sometimes a signature. We photograph the parcel and the spot, not you and not the inside of your home. Hidden location data is stripped from every photo before it's saved.
Package history: the tracking number on our label and each step it took, from pickup to your door.
Notes: short notes about calls and messages, so whoever answers next knows what's going on.
Pharmacy pickups: carried sealed, just as the pharmacy hands them over. We write down that it's a pharmacy pickup, not what's in the bag.

What your device tells us

Visits to this site: which pages were opened, the website that sent you there (just its name, not the page), any campaign tag in the link, and whether it was a phone, tablet or computer. Visits are tied to a random number, not your name. We don't keep your internet address with them.
Signing in: when you sign in or change a security setting, we record the time, your internet address and your browser, so a sign-in that isn't you stands out.
Your phone's location: only when you tap the button to use your location while getting a price, and only to fill in that address. We never follow where you are.
iPhone or Android: noticed from your own visits, so the texts and pictures we send you show up properly.

What others tell us

Someone sending you something gives us your name and town, and whatever address or phone number the delivery needs.
A friend who shared a price with you is known to us through their link, so they can get their thank-you credit.
Square tells us whether a payment went through. Twilio tells us whether a text arrived, and when you reply STOP or START.
Stores tell us when your order is ready.

How we use it

To do the job: pick up, carry, deliver, and prove we did.
To reach you about your jobs: confirmations, arrival notices, questions, and receipts.
To get paid, and to make refunds and corrections.
To keep your account and our systems safe, and to stop fraud.
To make the service better: which pages help, which runs are worth adding, and how long a run really takes, so prices stay fair.
To follow the law: taxes, Postal Service rules, and valid legal orders.

What we don't do with it: sell it, share it for advertising, build a profile of you, or let a computer make a decision about you on its own that matters. A price comes from the job (distance, time, size and handling) plus any plan or credit on your account, never from guesses about who you are.

Texts

If you agree to texts, we send what you agreed to: sign-in codes, confirmations, and arrival notices. How many depends on how often you use us. Message and data rates may apply. Reply STOP to any text and they stop; reply START to turn them back on, or HELP for help. Agreeing to texts is never a condition of using us.

We won't share your mobile number, or your agreement to receive texts, with anyone for their marketing or promotions. Twilio, the company that sends our texts, handles your number only to deliver our messages. None of the sharing described anywhere on this page includes your text-message opt-in or consent.

Emails

We email confirmations and receipts. You can turn off emails about your jobs in your account; receipts always come, because they're the record of what you paid. If we ever send news or offers, it'll be only to people who asked for them, with a way out in every one.

Who else sees it

Companies that help us run the business

Each gets only what its job needs, and may use it only to do that job for us.

Square takes card payments, subscriptions and invoices. You enter your card on Square's own form; the card number goes to Square, never to us. We see only the card's brand, last four digits and expiry, so you can tell which card is on file. Square also has its own privacy notice.
Twilio sends our texts and phone confirmation codes. It gets your phone number and the words of the text.
Gandi carries our email. It handles your email address and the words of the email.
Backblaze stores our backups, which are encrypted before they leave our server. Backblaze can't read them.
Our server host runs the computer this website lives on, in the United States.
Public map services built on OpenStreetMap turn an address into a point on the map and work out the route. They get the address or point being looked up, not who it belongs to.
Map pictures and page parts: some pages load maps from Esri and OpenStreetMap, and icons and map tools from public content networks (unpkg and jsDelivr). Your browser asks them directly, so they see your internet address, as any website would. They don't get your name or account.

We also connect our own business bank account through Plaid, read-only, so we can keep our books. That's our account, not yours: we never ask for your bank details.

People along the way

Stores and businesses we pick up from get the name or order number your order is under. Whoever receives a delivery sees the name on the package.
The Post Office gets your signed Form 3801 and checks our driver's identity at the counter.
Anyone with a tracking number can see where that package is, who it's going to and the town. Not the street, not the phone number, not who else you've sent things to.
A friend who referred you is told they earned a credit, not what you booked.

Only in these cases

When the law requires it, such as a subpoena, warrant or court order. We'll tell you before we hand anything over unless the law forbids it.
To protect someone, when a life or safety is at stake.
If the business changes hands, your information goes with it under these same promises, and we'll tell you first.
When you ask us to.

Anyone else who asks, at your gate, on the phone or in person, gets "I can't say."

Cookies

A cookie is a small note a website leaves in your browser. We use four, all our own:

Signed in: keeps you signed in for up to 30 days. Scripts on the page can't read it.
Shared price: if a friend's link brought you here, remembers that for 30 days so they get their credit.
Visit counter: a random number, kept for a year, so we can count returning visitors. The visits themselves are deleted after 400 days. If your browser sends Do Not Track or Global Privacy Control, we don't set it at all.
Light or dark: remembers which you picked.

No advertising cookies, no tracking pixels, no Google Analytics, no social media buttons that report back.

Location

Your places are the points you or we pin on the map, so the driver finds the right door.
Your phone's location is asked for only when you tap the button, used once to fill in the address, and not kept on its own.
Our van carries a location tracker and a road-facing dash camera. The map on this site shows where the van is, not where you are. The camera records the road; its recording loops over itself, and a clip is kept only when something happens on the road, like a collision.

How long we keep it

The app deletes these on its own schedule, every night, for everyone:

Delivery and pickup photos, and delivery signatures: 180 days.
Prices from the website that were never booked: 90 days.
Sign-ups that were never approved and never used: 90 days.
Messages from Square about payments: 90 days.
Copies of the emails we sent you: one year.
Visits to this site: 400 days.
Names and notes on requests from people without an account: two years.
Notes about calls and messages: three years.
Your account, places and signed forms: until you close your account or ask us to delete it.
The amounts you paid: as long as tax law requires. Once your account is deleted, they're kept without your name.

Our encrypted backups are replaced on a rolling schedule. Something deleted from the app can sit in an older backup for up to about thirteen months before that backup is gone; we don't bring deleted information back from them.

How we keep it safe

Everything between you and us travels encrypted.
Gate and door codes, leave-out spots, photos, signatures and bank details are encrypted again on our server, and backups are encrypted before they leave it.
Only the people whose work needs your information can see it. Office staff sign in with a second step, and every look at a customer's record is logged.
Everyone who works here is trained on handling your information when they start and every year after.

No system is perfect. If something ever goes wrong that affects your information, we'll tell you plainly and without delay: what happened, what it means for you, what we've done, and what you can do. We'll also tell Montana's Attorney General when the law calls for it.

Your choices and rights

You can ask us to:

Show you what we have about you.
Give you a copy in a file you can open and take elsewhere.
Correct anything that's wrong. Most of it you can fix yourself in your account.
Delete your information. We erase your account, places, codes, messages, signed forms, photos and your record at Square. We keep only what the law makes us keep, like the amounts you paid, without your name on them. If a job is still under way or a bill is unpaid, we'll finish that first.
Stop collecting your mail. Tell us and we'll stop and let the Post Office know. You can also cancel a Form 3801 at the Post Office counter yourself.
Stop texts or emails, as described above.

We don't sell information, use it for targeted advertising, or profile people, so there's nothing to opt out of there, but we honor Global Privacy Control anyway.

How to ask: email privacy@ironmountaindelivery.com or call us. We'll confirm it's you, usually with a code texted to the phone on your account, before we show, send or delete anything. Someone can ask on your behalf with your written permission. We answer within 45 days. If we ever need longer, we'll tell you why, and it won't be more than 45 more. It costs nothing, and asking won't change how we treat you.

If we say no, we'll tell you why. Reply and ask us to look again, and the owner will review it and answer within 60 days. If you're still not satisfied, you can contact the Montana Department of Justice, Office of Consumer Protection.

Montana's Consumer Data Privacy Act gives Montanans these rights with businesses large enough to fall under it. We're small and may not be one of them, but everyone gets the same rights from us regardless.

Children

Accounts are for adults. We don't knowingly collect information from children under 13, and if we learn we have, we delete it. A child may answer the door or take a package; we record only what the delivery needs.

Other people's information

When you give us someone else's details, like the person a package is going to or someone who can take it for you, please make sure they're fine with it. We use it only for that delivery.

Changes

When this page changes, the date at the top changes too. If a change affects information we already have, we'll email account holders before it takes effect.

Contact

Iron Mountain Delivery LLC
20 Mullan Road West, Suite A
Superior, MT 59872
privacy@ironmountaindelivery.com