Last updated 16 October 2026. This policy covers the Iron VMS website (ironvms.com), the hosted demo console at ironvms.com/login, and the Iron VMS apps for iPhone, iPad and Android. Iron VMS is made by WiredLeap, Bengaluru, India.
The short version
- Iron VMS is on-premise software. When your organisation runs it, video, snapshots, faces and number plates are recorded and processed on your organisation's own server. WiredLeap does not receive them.
- The mobile apps are a window onto an Iron VMS console. They have no advertising, no third-party analytics and no tracking across apps or websites.
- We do not sell personal data.
What the console stores
To sign you in and show you the right cameras, the Iron VMS server you connect to stores your account: name, username or email address, a hash of your password, your role and unit, and your settings (language, theme, layouts). It also keeps an audit trail of actions such as sign-ins, acknowledged incidents and exported clips. If your organisation sets up alerts, it stores the phone numbers and email addresses that alerts are sent to.
On a customer's own server, that organisation is the controller of this data and decides how long it is kept. On the public demo at ironvms.com, WiredLeap is the controller; demo recordings are kept for about three days and demo accounts are shared test accounts.
Camera video and AI analytics
Video from the cameras your organisation connects is recorded on its server. AI analytics (people and vehicle detection, number plate recognition, face recognition where your organisation has enabled it with consent) run on that server or on a GPU box your organisation controls. If an administrator chooses to enable an optional cloud model (Google Gemini or Anthropic Claude) for a use case, snapshots for that use case are sent to that provider under its terms; this is off unless turned on.
What the apps access on your device
- Network: to reach the Iron VMS console.
- Camera and photos (iPhone and iPad, only if you choose): when you pick an image in the console, for example a face to search for, you can take a photo or choose one. The image is uploaded only to the Iron VMS server you are signed in to.
The apps keep your sign-in session and console preferences in the app's own storage on the device. Deleting the app removes them.
Sharing
We share personal data only with service providers that run the demo service for us (hosting in India and the EU, and WhatsApp, SMS and email delivery for alerts you configure), or when the law requires it.
Security
The hosted console is served over HTTPS. Passwords are stored as salted hashes. Access inside an organisation follows its hierarchy, so each person sees only the cameras of their unit.
Your choices and deleting your data
If your account is on your organisation's server, ask its administrator to correct or delete it. For the demo or anything else, email suumit@mydukaan.io and we will reply within 30 days. You can ask for a copy, correction or deletion of your personal data.
Children
Iron VMS is a business tool and is not directed at children under 13.
Contact
WiredLeap, Bengaluru, Karnataka, India. Email suumit@mydukaan.io or subhash@mydukaan.io.