Privacy notice

What we collect

Account details: name, email address, role and organization.

Records you enter: clients, engagements, dates, fees, tasks, documents, invoices, requests and messages.

Operational records: an append-only audit trail of who did what and when, and technical logs needed to run the service.

Why we hold it

To run the service for your organization, to authenticate access, to produce your paperwork and invoices, and to keep an accurate record of decisions.

How long

Signed contracts follow the retention period stated in the contract itself, seven years by default. The audit trail is retained for the life of the account and cannot be edited or deleted by any user, including an owner.

Other records are deleted within thirty days of a written deletion request, except where we must keep them by law.

Who else sees it

Only the subprocessors listed on the subprocessor page, each for a specific operational purpose. We do not sell data and we do not share it for advertising.

Your rights

You may request access, correction, export or deletion of personal data we hold about you. Write to the organization that operates your account, or to us directly, and we will respond within thirty days.