Privacy Policy
Effective October 15, 2026 · Fred, at consera.build
Fred is an assistant for contractors made by Iron & Oak Collective LLC ("Iron & Oak", "we", "us"), a New York company. This policy explains what we collect when you use Fred, what we do with it, and the choices you have. We wrote it to be read, not skimmed; if anything is unclear, email info@ironandoakindustries.com.
What we collect
- Account details. Your email address (used to sign you in with a one-time code), and the name, company, trade, time zone, and phone number you choose to enter in Settings.
- Your conversations with Fred. The messages you send, Fred's replies, and the notes Fred keeps about your work so he can help next time (for example your company name, current jobs, crew, and preferences). You can edit or clear these at any time.
- Files. Photos, PDFs and other files you hand to Fred, and the documents, spreadsheets and images Fred makes for you.
- Messages Fred sends on your behalf. When you approve an email or text, we keep a record of who it went to, when, and whether it was delivered.
- Technical data. Basic logs needed to run the service and to meter usage (for example which model answered, how many tokens it used, and whether a request failed). We do not use advertising trackers.
Google Calendar and Gmail, if you connect them
Connecting Google is optional. If you tap Connect, Google asks you to approve access to your Calendar and Gmail. Fred then uses that access only to do what you ask him to do in the app:
- Calendar: read upcoming events to answer questions and show your day; create, change or remove events when you ask.
- Gmail: search and read messages when you ask about them; send or reply as you when you ask, after showing you the message for approval.
What this means in practice:
- Your Google sign-in is stored encrypted, on our servers or with Composio, our integration provider, and is used only to make these requests for you.
- We do not keep copies of your mailbox or calendar. Content Fred reads for you appears in that conversation, like anything else you discuss with him, and nowhere else.
- We do not use Google user data for advertising, we do not sell it, and we do not use it to train artificial-intelligence models.
- No person at Iron & Oak reads your Google data except with your explicit permission to fix a problem you reported, or where the law requires it.
- You can disconnect at any time in Settings. Disconnecting revokes Fred's access with Google and deletes the stored tokens.
Business apps, if you connect them
Connecting other business apps is optional. In Settings you can connect services such as QuickBooks, Xero, Jobber, Shopify, Clover, Gusto, DocuSign, Slack or HubSpot. Nothing in this section applies to you unless you connect one. Each app shows its own approval screen listing what Fred may access, and Fred uses that access only to do what you ask him to do in the app:
- Reading: Fred reads records (for example customers, jobs, orders, invoices, products or payroll summaries) when you ask something that needs them.
- Changes: anything that would create, change or send something in a connected app is shown to you first and happens only after you approve it.
- Where the connection lives: Composio, our integration provider, holds the app's access tokens encrypted and carries Fred's requests to the app. We do not keep copies of your app data. What Fred reads appears in that conversation, and in any report or dataset you ask him to build, and nowhere else.
- Your customers' information: a connected app can include information about your own customers, such as names, emails and orders. We process it only on your instructions and only to provide Fred to you. We do not sell it, use it for advertising, or use it to train artificial-intelligence models.
- You can disconnect any app in Settings. Disconnecting revokes Fred's access and deletes the stored connection. If a platform tells us you removed Consera, or passes on a request to delete one of your customers' data (for example Shopify's privacy requests), we act on it within 30 days.
How we use your information
- To run Fred: answer you, build your documents, set your reminders, send the messages you approve, and remember your work between conversations.
- To keep the service working and safe: diagnose failures, prevent abuse, and meter usage.
- To contact you about the service, for example a sign-in code or a reminder you set. We do not send marketing email from Fred.
Who else sees it
We do not sell your information. We share it only with the services that make Fred run, and only what each one needs:
- Cloudflare hosts Fred, stores your data, and routes email to and from fred@consera.build.
- Model providers (currently OpenAI and Google) receive the text and files needed to produce Fred's answers. We use their business APIs, under terms that do not allow them to train on your data.
- Composio holds the connections to the business apps you connect (and to Google, when it is connected through Composio) and carries Fred's requests to them.
- Resend delivers some email. ElevenLabs turns Fred's replies into speech when you tap Read it. Quo sends text messages you approve. Google and Apple push services deliver notifications you turned on.
- Authorities, when the law requires it, and successors if Iron & Oak is ever sold (this policy would still apply).
How long we keep it
Your conversations, files and notes stay until you delete them or close your account. Delivery records and technical logs are kept for up to 12 months. When you close your account we delete your data within 30 days, except records we must keep by law.
Your choices
- Edit your profile, change Fred's voice, turn notifications on or off, and disconnect Google or any business app in Settings.
- Clear a conversation from the chat menu, or remove any chat from your list.
- Delete your account from inside the app: Settings → Account → Delete my account. It removes your conversations, Fred's notes, your files and documents, your connections (Google access is revoked) and your profile at once. If you cannot sign in, email support@consera.build from your sign-in address and we delete it within 30 days.
- To get a copy of your data, email support@consera.build from your sign-in address. We answer within 10 business days.
Security
Fred runs on Cloudflare's network. Data is encrypted in transit; connection tokens are encrypted at rest with keys that live only on the server; files and conversations are reachable only through your signed-in session. No system is perfectly secure, and we will tell you if a breach affects your information.
Children
Fred is a work tool for adults. It is not directed at anyone under 18, and we do not knowingly collect information from children.
Changes
If we change this policy in a way that matters, we will tell you in the app before it takes effect. The date at the top is the version you are reading.
Contact
Iron & Oak Collective LLC · info@ironandoakindustries.com · Rochester, New York.