Legal
Privacy Policy
This policy explains what happens to information about you when you visit castironinsights.com. It is written to be read, not to be survived. If something here is unclear, email us and we will answer it plainly.
What this policy covers — and what it does not
This policy covers the Cast Iron Insights marketing website only: the pages at castironinsights.com, including the contact form on that site.
It does not cover:
- The Anvil product and the data held inside it. How Anvil sources and handles its data on foodservice operators and their menus is governed by our agreements with customers and by separate documentation, not by this page.
- The Anvil demo application at anvil-demo.castironinsights.com, which is a separate application on a different subdomain.
- Third-party websites we link to. Once you leave this site, whoever runs the site you land on decides what happens next.
Who we are
This website is run by Cast Iron Insights LLC, a Wyoming limited liability company that builds commercial intelligence for the foodservice channel. We are responsible for the information described below.
Contact: hello@castironinsights.com
What we collect
1. What you type into the contact form
The contact form asks for six things. First name, last name, email address and company are required — without them we cannot reply. Role or title and your message are optional; leave them blank if you want to.
When you submit the form, the page you submitted it from (its URL and page title) is sent along with your details, so we know where the enquiry came from.
We do not collect anything else through the form. There are no hidden fields.
2. Your IP address, when the page personalises a mockup
The home page shows a mockup of the Anvil interface. To make it feel less generic, the page asks a third-party geolocation service, ipwho.is, which city you appear to be in, and prints that city name inside the mockup — "Austin Provisions", for example. Making that request necessarily discloses your IP address to that service.
The city name is used for that one cosmetic label and nothing else. We do not store it, log it, attach it to you, or send it anywhere else. If the lookup fails, the mockup reads "Cast Iron Provisions" and nothing is lost.
3. Server logs
Our hosting provider, Vercel, processes basic request information — your IP address, browser user agent, the page requested, the referring page and the time — in order to deliver the site and protect it from abuse. Like essentially every website, those requests are logged.
What we do not collect
Being specific about this matters more than the reassurance is worth, so: this site runs no analytics. There is no Google Analytics, no tag manager, no advertising pixel, no session recording, no heatmapping, and no cross-site tracking of any kind. We do not build a profile of you, we do not fingerprint your browser, and we do not know which pages you looked at.
The site's fonts, scripts and map data are all served from our own domain, so loading a page does not send your IP address to Google or to any other font or script provider.
Why we use it
To read your enquiry, reply to it, and have the conversation you started. We do not add people who use the contact form to marketing email lists.
To print your city inside a product mockup. It is decoration.
To keep the site running, and to investigate abuse or errors.
Who else handles your information
We keep this list short on purpose. These are the only third parties involved in running this website:
- HubSpot — our CRM. Contact form submissions land in our HubSpot account, hosted in the United States, and are stored there so we can reply and keep track of the conversation. HubSpot processes that data on our instructions under a data processing agreement.
- Microsoft — our email provider (Microsoft 365). Email you send to hello@castironinsights.com, and our replies, are handled there.
- Vercel — our hosting provider, which serves the site and keeps the request logs described above.
- ipwho.is — the geolocation service described above. Your browser contacts it directly; we do not send it anything about you beyond what the request itself reveals, and we receive only a city name back.
We do not sell your information, and we do not share it for advertising. We do not hand it to advertisers or data brokers. We may disclose information if we are legally required to — a court order, a lawful request from an authority — or if we need to in order to establish or defend a legal claim.
If the form cannot reach HubSpot
If the submission fails — HubSpot is unreachable, or the request is rejected — the form does not pretend to have sent it. It tells you so and invites you to email hello@castironinsights.com directly instead. Mail sent that way reaches our email provider rather than HubSpot.
Cookies
This website does not set any cookies of its own. No analytics cookies, no advertising cookies, no consent-banner cookie — there is nothing to consent to, so we do not interrupt you with a banner.
One nuance, stated plainly because it is in the code: if a HubSpot tracking cookie (hubspotutk) is already present in your browser, the contact form includes it with your submission so HubSpot can connect the enquiry to your existing record. Nothing on this site sets that cookie, so unless you already have one from elsewhere, this does not apply to you.
How long we keep it
Contact form submissions and email enquiries: two years from our last contact with you, then deleted.
Server logs: kept by Vercel for a limited period under its own retention settings. We do not copy or keep them ourselves.
Geo-IP city lookups: nothing is retained. The city name lives in the page you are looking at and disappears when you close the tab.
If you ask us to delete your enquiry sooner, we will, subject to anything we are legally required to keep.
Your rights
Whatever the law where you live requires, you can ask us to:
- Access — tell you what we hold about you and give you a copy.
- Correct — fix anything inaccurate.
- Delete — erase what we hold about you.
There is nothing to opt out of on the sale or sharing front, because we do neither. Asking us to exercise any of these rights will not get you treated differently.
How to exercise them
Email hello@castironinsights.com and say what you want. We may need to confirm you are who you say you are before we act, usually by replying to the email address we hold for you. We will respond within 30 days.
Where your information is stored
Cast Iron Insights is based in the United States, and the providers listed above store the information described here in the United States.
Security
The site is served over HTTPS, and access to the enquiries we receive is limited to the people at Cast Iron Insights who need it to answer you.
Children
This is a business-to-business website. It is not directed at children under 13, and we do not knowingly collect information from them. If you believe a child has sent us information through this site, email us and we will delete it.
Changes to this policy
If we change how this site handles information, we will update this page and change the "last updated" date at the top. If a change is significant — a new processor, a new category of data, tracking where there was none — we will say so here rather than quietly editing the text.
Contact us
Questions about this policy, or about anything we hold: hello@castironinsights.com. We respond within one business day.