Privacy Policy

RodyTech, LLC is a business automation consultancy based in Iowa, United States. We help small businesses achieve operational excellence through custom automation solutions, AI-driven workflows, and modern web applications.

This privacy policy applies to information collected through our website, contact forms, and any direct communications with us. It explains what data we collect, why we collect it, and your rights regarding that data.

We operate on three core principles that extend to how we handle your data:

• Accessibility: Your data should be easy to access and understand
• Ownership: You own your data, we're just temporary custodians
• Simplicity: Privacy practices should be clear and straightforward

We practice data minimization - collecting only what we need to provide our services. We don't collect data "just in case" or for future unknown purposes.

What we collect directly from you

When you submit our contact form, we collect:

• Your name (to address you properly)
• Your email address (to respond to your inquiry)
• Your message content (to understand how we can help)
• Submission timestamp (to prioritize responses)

Technical information collected automatically

When you visit our website, we may collect:

• IP address (for security and to prevent spam)
• Browser type and version (to ensure website compatibility)
• Referring website (to understand how you found us)

We do NOT collect:

• Tracking cookies
• Marketing identifiers
• Behavioral data
• Third-party analytics
• Social media pixels
• Location data beyond general geographic region

To respond to your inquiries

Your contact form submissions allow us to understand your needs and provide relevant information about our automation and AI solutions.

To improve our services

We analyze inquiries to identify common questions and improve our website content and service offerings.

For security and legal compliance

We use technical information to:

• Prevent spam and abuse
• Protect against unauthorized access
• Comply with legal obligations
• Respond to lawful requests from authorities

We never use your information for:

• Targeted advertising
• Behavioral profiling
• Sale to third parties
• Marketing without your explicit consent

We implement industry-standard security practices:

• Encryption: All data transmission uses HTTPS encryption
• Access controls: Only authorized personnel can access contact form submissions
• Secure storage: Data is stored in encrypted databases
• Regular updates: Security patches applied promptly
• Incident response: Procedures in place for potential breaches

While we take security seriously, no system is perfect. We cannot guarantee absolute security but commit to promptly notifying you of any breach affecting your personal data within 72 hours of discovery.

Essential service providers

We share your information only with providers necessary to operate our business:

• Email service providers (to send and receive communications)
• Cloud hosting services (to store data securely)
• Business tools (CRM systems for client management, only after engagement)

All service providers are:

• Contractually bound to protect your data
• Prohibited from using your data for their own purposes
• Required to delete data upon our instruction

What we never do

• Sell your personal information
• Share data with advertisers
• Provide information to data brokers
• Transfer data without your knowledge

You have complete control over your personal information. Regardless of where you live, we provide these rights to everyone:

• Access your data: Request a copy of all personal information we have about you
• Correct inaccuracies: Update or correct any errors in your personal data
• Delete your data: Request permanent deletion of your personal information
• Data portability: Receive your data in a structured, machine-readable format
• Opt-out of communications: Unsubscribe from any non-transactional communications
• Non-discrimination: We never charge fees or provide different services based on privacy choices

Email us at privacy@rodytech.net with your request. We'll respond within 30 days (or sooner if required by law).

• Contact form inquiries: 12 months from last communication
• Active client data: Duration of business relationship plus 3 years
• Technical logs: 90 days
• Legal holds: As required by law or litigation

After these periods, we permanently delete your data using secure deletion methods.

While we're based in the United States, we welcome inquiries from anywhere. If you're located outside the US, your data will be transferred to and processed in the United States. We apply the same privacy protections regardless of location.

For EU/EEA residents, we process data under legitimate interest (responding to inquiries) or consent basis, and you have additional rights under GDPR.

Our services are designed for businesses and professionals. We don't knowingly collect information from anyone under 16. If we discover we've collected data from a child, we'll delete it immediately.

California residents have additional rights under CCPA/CPRA: right to know, right to delete, right to opt-out of sale (we don't sell data), and right to non-discrimination. To exercise these rights, email privacy@rodytech.net.

We'll update this policy as our practices change or laws require. Changes become effective immediately upon posting. We'll notify you of material changes via prominent website notice and updated "Last Updated" date.

Our promise: At RodyTech, we're building a business based on trust. Just as we give our clients complete ownership of their automation systems, we believe you should have complete control of your personal data.