1. Who We Are
Steady Steel Inc operates this business management application
from 42 Wilstead Dr, Newmarket, ON L3Y 4T9, Canada. This policy explains how we
collect, use, and protect information within our ERP system.
2. Information We Collect
We collect and store the following types of information:
- Employee data: Name, email, login credentials, work sessions, hours worked
- Customer data: Company name, contact name, email, phone, address
- Transaction data: Invoices, payments, quotes, orders, material assignments
- Design data: 3D CAD designs saved through the SteelForge design tool
3. How We Use Information
Information is used for:
- Managing employee time tracking and payroll
- Creating and sending invoices and quotes to customers
- Processing payments via Square
- Synchronizing financial data with QuickBooks Online (Intuit)
- Managing inventory and project tracking
- Generating business reports and analytics
4. Third-Party Data Sharing
We share data with the following third-party services solely for business operations:
- QuickBooks Online (Intuit): Customer records, invoices, payments,
and time activities are synchronized for accounting purposes
- Square: Payment processing for customer transactions
- Amazon Web Services (S3): Storage of CAD design files
- Email provider: Sending invoices, quotes, and notifications
We do not sell, rent, or share personal information with third parties for
marketing purposes.
5. Data Security
All data is stored in an encrypted PostgreSQL database hosted on Heroku.
OAuth2 tokens for third-party integrations are stored in the database and
transmitted over HTTPS. Access to the business application requires authentication,
and administrative functions require elevated privileges.
6. Data Retention
Business records (invoices, payments, work sessions) are retained indefinitely
for accounting and legal compliance purposes. Users may request deletion of
their personal data by contacting us directly.
7. Your Rights
You have the right to request access to, correction of, or deletion of your
personal data stored in this system. To exercise these rights, contact us at
the address below.
8. AI Assistants, Our API and Our MCP Server
AI assistants and other software can price work from us through our API
(www.steadysteel.org/api/v1) and our MCP server (www.steadysteel.org/mcp).
Neither takes an account or a sign-in, and neither sets or reads cookies.
The page an order link opens sets none either. Pressing one of its order buttons
adds the link's number to this site's session cookie, the one our store uses, so an
order placed after it is counted as coming through that link. A quote request link
opens our quote request form, which sets that session cookie as every form on this
site does.
- What we keep: the job we were asked to price (material, sizes,
quantity, the plate outline, holes and bends, or the product and tier), any short
label put on a part, and the price we gave. For a link: what it points to, or the
job described in words for a quote request, how many times it was opened and
clicked, and when it was first and last opened. With each, the name the assistant
gives itself or its software's user-agent, with any email address or phone number
in it blanked out.
- What we don't take: anything about you. There is no field for a
name, email address or phone number. A job description that carries a web address,
email address or phone number is refused, and a part label that carries one is
dropped. You give your own details on this site when you order or send a quote
request, and the rest of this policy covers them.
- What it's for: to price the job, hold the price, build the page a
link opens, keep the limits, and see how the API is used.
- IP addresses: we count requests by the address they come from, to
hold each caller to the limits on our API page. When the assistant runs on an AI
company's servers, the address is the company's, not yours. The counts clear
within a day. Our web host's request logs record the address, as they do for
every page on this site.
- How long we keep it: a quote holds its price for 7 days and is
deleted 30 days after that. An order link works as long as its quotes do, and a
quote request link for 30 days. Each is deleted 30 days after it stops working.
When a catalog order came through a link, the link and its quotes are kept a year
from when the link was made, so we can count that order, and then deleted. A plate
design saved for an order link is deleted from our file storage 30 days after the
link is made.
- Who else sees it: we don't share it, sell it or use it for
marketing. It is stored with our hosting providers (Heroku for the database, Amazon
Web Services for plate designs), and error reports go to our error tracker (Sentry)
with link codes removed. The company behind your assistant handles your
conversation under its own privacy policy. We see only the requests it sends us.
- Deleting it sooner: email
orders@steadysteel.org with the quote
number or the link and we will delete it.
9. Changes to This Policy
We may update this privacy policy from time to time. The "Last updated" date
at the top of this page reflects the most recent revision.
10. Contact
For privacy-related inquiries:
Steady Steel Inc
42 Wilstead Dr, Newmarket, ON L3Y 4T9
Email: orders@steadysteel.org
Phone: 416-560-9330