Privacy Policy

1. Who We Are and What This Policy Covers

This Privacy Policy describes how Castro Enterprises Inc. dba IgnyteRT (“IgnyteRT,” “we,” “us”) collects, uses, and shares personal information in connection with:

  • our marketing website at ignytert.com;
  • our application at app.ignytert.com; and
  • related signup, billing, and support interactions

(together, the “Service”). IgnyteRT is a B2B platform: our customers are businesses (“Subscribers”) that use the Service to send retention and follow-up messages to their own customers.

Two very different categories of data. This policy distinguishes between:

  • Subscriber Data — information about you and your business when you visit our website, sign up, or use the Service. We are the controller of this data, and Sections 3–9 of this policy govern it.
  • End-Customer Data — the contact lists and customer information Subscribers upload into the platform to run their campaigns. We process this data only on the Subscriber’s behalf and instructions, as a service provider/processor. Section 10 governs it. If you are an End Customer and have questions about how your information is used, please contact the business that messaged you — they, not IgnyteRT, decide who to contact and why.

2. Information We Collect

2.1 Information you provide

  • Signup information: first name, last name, company name, work email, mobile number, and a password you set. Your acceptance of the Terms and this policy, and its timestamp, are recorded.
  • Password handling: your password passes through the website in transit only and is never stored, logged, or retained on the website. It is stored solely as a cryptographic hash in the application backend. We cannot see your password.
  • Onboarding and account information: business details you provide inside the app, credit and auto-reload settings, campaign configurations, and support communications.
  • Payment information: payments are processed by Stripe. Card data is entered directly into Stripe’s embedded checkout. IgnyteRT never receives, stores, or processes your card number. We receive from Stripe only non-card information such as payment status, last four digits, card brand, and billing outcomes.

2.2 Information collected automatically

When you visit ignytert.com or use app.ignytert.com, we and our analytics providers automatically collect device and usage information — IP address, browser and device type, pages viewed, referring URLs, session interactions, and approximate location — via cookies, pixels, and similar technologies (see Section 7).

2.3 Incomplete signups

If you begin signup but do not complete it, we retain the information you entered (e.g., name and email). We may use this information to contact you about completing your signup and, unless you opt out, to send related marketing communications.

3. How We Use Subscriber Data

We use Subscriber Data to:

  • create, activate, and administer your account (including the website-to-app account creation and Stripe-webhook activation flow);
  • provide, maintain, secure, and improve the Service;
  • process payments, manage subscriptions, credits, and auto-reload, and send transactional messages (receipts, service notices, security alerts);
  • provide support and respond to inquiries;
  • market our services, including remarketing (see Sections 2.3 and 7), subject to your opt-out rights;
  • analyze usage to improve the product; and
  • comply with law, enforce our Terms, and protect the Service and its users.

4. How We Share Subscriber Data

We share Subscriber Data with:

  • Service providers acting on our behalf: hosting (Railway), payment processing (Stripe), analytics (Google Analytics, Microsoft Clarity — see Section 7), communications and support tooling, each bound to use the data only to provide services to us;
  • Advertising partners: Meta, via the Meta Pixel, for advertising measurement and remarketing. This may constitute “sharing” for cross-context behavioral advertising under California law; you can opt out as described in Sections 7 and 8;
  • Telecommunications and channel providers (carriers, The Campaign Registry, Meta/WhatsApp) as necessary to register campaigns and deliver messages;
  • Professional advisors and authorities where required by law, legal process, or to protect rights and safety;
  • Successors in connection with a merger, acquisition, financing, or sale of assets; and
  • Others with your direction or consent.

We do not sell Subscriber Data for money. See Section 8 regarding “sharing” for advertising purposes under California law.

5. Data Retention

We retain Subscriber Data for as long as your account is active and as needed afterward to comply with legal, tax, and accounting obligations, resolve disputes, and enforce agreements. Typical retention periods: account records 3 years after closure; billing records 7 years; analytics data per provider defaults (e.g., GA4 14 months).

6. Security

We use reasonable administrative, technical, and physical safeguards appropriate to the nature of the data, including encryption in transit (TLS), hashed password storage, access controls, and segregation of the marketing website from the application system of record. No system is perfectly secure; you are responsible for safeguarding your credentials.

7. Cookies, Analytics, and Advertising Technologies

The website and application use the following technologies, deployed via Google Tag Manager:

  • Google Analytics 4 — site and app usage analytics;
  • Meta (Facebook) Pixel — advertising measurement and remarketing audiences;
  • Microsoft Clarity — session analytics and heatmaps.

Tracking operates across ignytert.com and app.ignytert.com (cross-domain measurement), meaning your activity on both may be linked.

Your choices:

  • Cookie notice: a notice on ignytert.com describes our use of cookies and links to this policy and to the “Do Not Sell or Share My Personal Information” preference page.
  • Browser controls and ad settings: Google Ads Settings, Meta Ad Preferences, and industry opt-outs at optout.aboutads.info.
  • Global Privacy Control (GPC): we honor GPC signals as an opt-out of sharing where required by law.
  • Google Analytics opt-out browser add-on.

8. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the right to: know/access the personal information we collect about you; delete it; correct it; opt out of “selling” or “sharing”; limit use of sensitive personal information (we do not use sensitive personal information for purposes requiring limitation); and non-discrimination for exercising your rights.

Categories collected (past 12 months): identifiers (name, email, phone, IP); commercial information (subscription and payment history); internet activity (usage and analytics data); professional information (company name); inferences (product-interest audiences).

“Sale” / “Sharing”: We do not sell personal information for money. Our use of the Meta Pixel and similar advertising technologies may constitute “sharing” for cross-context behavioral advertising under the CPRA. You may opt out via the “Do Not Sell or Share My Personal Information” link in the website footer, your cookie preferences, or a Global Privacy Control signal.

Exercising rights: submit requests to privacy@ignytert.com. We will verify your identity and respond within the statutory period. You may designate an authorized agent.

Other US states: Residents of Virginia, Colorado, Connecticut, Texas, and other states with comprehensive privacy laws may have similar rights and may exercise them through the same channels.

Outside the United States: The Service is offered to, and directed at, businesses in the United States only. We do not target the Service to individuals in the European Economic Area or the United Kingdom.

9. Your Communications Choices

You may opt out of marketing emails via the unsubscribe link in any marketing message. Transactional and account messages (receipts, security notices, service announcements) are sent as part of the Service and cannot be opted out of while your account is active.

10. End-Customer Data (Information Our Subscribers Upload)

Subscribers upload contact lists and related information about their own customers to run campaigns. For this End-Customer Data:

  • The Subscriber is responsible. The Subscriber determines what is uploaded, who is messaged, and why. Under our Terms, Subscribers warrant that they have obtained all legally required consents before messaging their contacts.
  • We are a service provider/processor. We process End-Customer Data solely to provide the Service on the Subscriber’s instructions, under our Terms and Data Processing Addendum. We do not sell End-Customer Data, use it to build advertising audiences, or use it for our own marketing.
  • Opt-outs are honored. Standard opt-out keywords (e.g., STOP) are processed automatically, and opted-out contacts are suppressed from further messaging by that Subscriber through our platform.
  • If you are an End Customer: to access, delete, or ask questions about your information, contact the business that messaged you. If you contact us directly, we will forward your request to the relevant Subscriber and reasonably assist.
  • Retention: End-Customer Data is deleted or returned following account closure per our retention schedule (120 days after account closure, unless a longer period is required by law).

11. Children

The Service is a business tool and is not directed to anyone under 18. We do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact us and we will delete it.

12. Changes to This Policy

We may update this policy from time to time. Material changes will be announced via email or in-app notice before taking effect, and the “Last Updated” date will change. Continued use after the effective date constitutes acceptance.

13. Contact Us

IgnyteRT — Privacy Castro Enterprises Inc. dba IgnyteRT 115 N Euclid Ave Ste B, Ontario, CA 91762 privacy@ignytert.com