Privacy Policy

1. Who we are

Project Iris LLC operates Iris, a workspace for interior design firms. Our business mailing address is 7796 South Crestone Peak, Littleton, CO 80127. Contact hello@projectiris.co with privacy questions or requests. Iris is intended for U.S.-based interior design firms and their authorized users age 18 or older.

2. Information we receive

We receive account and business details such as names, email addresses, job titles, phone numbers, firm addresses, logos, time zones, invitations, and project assignments. Firms and authorized users provide project information, which may include client and contractor contacts, property addresses, specifications, pricing, status records, notes, images, documents, and links. A firm may provide information about you before you activate an account.

We receive enquiries, feedback, and support correspondence. Iris and its infrastructure providers may also process technical information needed for authentication, operation, security, and troubleshooting, such as IP addresses, browser information, access events, and error logs.

3. How we use information

We use information to operate accounts and projects; send invitations and service messages; apply permissions; store and display records; provide reports and authorized downloads; answer requests; troubleshoot problems; protect the service; and meet legal obligations. A firm directs how project information is recorded and shared. Iris separately administers account, support, and security information.

4. Who can see project information

The firm controls project assignments and permitted sharing. Clients and contractors have view-only access to eligible shared projects. Notes follow their chosen audiences. Private notes are intended for their author rather than other ordinary users. These user-facing restrictions do not mean authorized Iris operators or infrastructure providers are technically unable to access information needed for legitimate service, support, or security work.

Authorized recipients may retain copies they downloaded before access ended. Changing permissions cannot retrieve those copies. Do not upload unnecessary sensitive information, such as government identification numbers, payment-card information, health records, or passwords, into project records.

5. Service providers and other disclosures

Iris uses providers to help operate the service, including Supabase for account and data services and Bluehost for website hosting. Email delivery and support may involve additional providers. Information may be disclosed when lawfully required, to protect rights or security, or as part of a business transfer subject to applicable safeguards.

Our proposed policy is not to sell personal information, use it for targeted advertising, or use identifiable customer content to train general-purpose AI models. Identifiable project images, logos, and testimonials require separate permission for marketing. The final policy must reflect verified provider and administrative practices.

6. Browser storage

Iris uses browser storage and similar technologies for authentication, preferences, and service functions. Blocking or clearing them may affect sign-in and saved settings. The final notice will describe any additional tracking identified in the technical review and any choices required by applicable law.

7. Retention and deletion

While firm service continues, changing a project to Completed or Lost does not delete its information or start a cancellation countdown. Authorized design firm staff retain view-only access according to their permissions; clients and contractors lose access to those projects.

Proposed cancellation policy: when firm service ends, ordinary editing and client and contractor access end. The Account Admin has 90 calendar days from the confirmed service-end date to request retrieval. Iris will notify the Admin of the service-end date, retrieval deadline, and planned deletion date. Operational project content will be deleted within the following 30 calendar days, subject to applicable law and legitimate preservation requirements.

Backup expiration and retention of limited account, acceptance, security, support, and business records are being finalized. Those schedules must be verified before this draft takes effect. Individual privacy requests are evaluated separately and may require earlier action under applicable law.

8. Requests and choices

Email hello@projectiris.co to request access, correction, deletion, or a copy of personal information, or to ask about your rights. We may verify identity and authority and coordinate with the firm responsible for project information. A request does not authorize disclosure of another person’s private notes or another firm’s records. Applicable legal rights, exceptions, response deadlines, and any required appeal process will govern.

9. Security and children

We aim to use safeguards appropriate to the information and service; no system can guarantee absolute security. Iris is intended for adults and is not directed to children. Contact us if you believe a child has supplied personal information.

10. Policy updates

The final policy will display its effective date and describe how material changes are communicated. Acknowledging a privacy notice does not waive your legal rights or give blanket consent to unrelated processing. Separate consent will be requested where required.