Privacy policy

This policy explains what MadFish Solutions, LLC (“MadFish”, “we”) collects through the Iron Register website and the Iron Register service, how we use it, and the choices you have. Iron Register is sold to federally licensed firearms dealers. When a dealer uses Iron Register to record its customers’ information, the dealer is the controller of that information and we process it on the dealer’s behalf under our Terms of service.

Information we collect on this website

• What you send us. The Get Started form asks for your shop name, your name, email, phone, store URL, number of locations and current point-of-sale system. We use it to contact you about Iron Register and to plan your setup.
• Technical data. Our servers log the IP address, browser type and pages requested for security and rate limiting. We do not run third-party advertising or analytics trackers on this site.
• Cookies. The website uses no cookies. The Iron Register application uses a session token to keep you signed in.

Information dealers store in Iron Register

A dealer using Iron Register stores business records that federal and state law require it to keep: firearm acquisition and disposition records, ATF Form 4473 transaction records, sales, inventory, and customer contact and identification details. This information belongs to the dealer. We access it only to operate the service, to support the dealer at its request, or as the law requires.

• Isolation. Each dealer runs on its own server with its own database and encryption keys. Dealers’ data is never combined.
• Encryption. Data is encrypted in transit and at rest. Government identification numbers and Form 4473 transferee details are additionally encrypted at the field level and are never written to logs.
• Retention. Bound book and Form 4473 records cannot be deleted through the application, so that dealers can meet the retention periods in 27 CFR 478. Other records are retained for as long as the dealer’s subscription is active and for 30 days afterward, during which the dealer can export everything.
• No NICS transmission. Iron Register does not connect to the FBI NICS system or any state point of contact. Dealers run background checks themselves and record the outcome.

How we use information

• To provide, secure and improve the service, and to bill for it.
• To respond to your questions and support requests.
• To send service notices, such as security or availability announcements. We do not send marketing email without your consent, and you can opt out at any time.

Sharing

We do not sell personal information, and we do not share it with advertisers. We share information only with:

• Service providers that host the servers, deliver email and process our own subscription payments, under contracts that limit their use of the data to providing the service to us.
• Integrations a dealer turns on, such as BigCommerce, Flxpoint or ShipStation. Only the data needed for that integration is exchanged, and only at the dealer’s direction.
• Law enforcement or regulators when required by law, including ATF inspections directed at the dealer. We will notify the dealer unless prohibited.

Your choices and rights

If you submitted a form on this site and want your details corrected or deleted, email us and we will do so within 30 days. If you are a dealer’s customer and want to know what a dealer holds about you, contact the dealer; federal recordkeeping law may prevent it from deleting certain records. Residents of states with privacy laws may have additional rights, which we honor to the extent they apply.

Children

This website and the service are for businesses. We do not knowingly collect information from anyone under 18.

Changes

We will post any changes to this policy here and update the date above. Material changes affecting dealers will be emailed to the account owner.

Contact

MadFish Solutions, LLC · privacy@ironregister.com