Draft. Under legal review.
Privacy policy
Last updated: not yet in effect
This policy explains what personal information [Plainmatter legal entity name] (“we”) collects when you visit our website or use Plainmatter, and what we do with it.
Two kinds of data
Account and website data is information about you as our customer or visitor, such as your name, email and how you use the site. We decide how to use it, and this policy covers it.
Customer Data is what your firm puts into Plainmatter, including information about your clients and their matters. Your firm controls it. We process it only to provide the service, as our terms of service describe.
What we collect
- Account details: name, email, firm name, firm address and role.
- Billing details: billing contact and payment information, which Stripe holds. We see only the card brand and last four digits.
- Usage data: pages you open, actions you take, device and browser type, and IP address, used to run and secure the service.
- Messages you send us, including support requests and files you send for an import.
How we use it
- To provide, secure and support Plainmatter.
- To bill your firm and send service email, such as invitations, invoices and notices of changes.
- To understand which features firms use so we can improve them, using account and usage data only.
We do not sell personal information. We do not use Customer Data for advertising or to train AI models.
Subprocessors
These companies process data on our behalf. We give firm owners notice before we add one that stores Customer Data.
| Subprocessor | Purpose | Data | Region |
|---|---|---|---|
| Vercel | Runs the application servers | All Customer Data in transit | [United States] |
| Neon | Stores the database and backups | All Customer Data except files | [United States] |
| Cloudflare R2 | Stores uploaded and generated documents | Documents and files | [United States] |
| WorkOS | Signs people in and stores sign-in credentials | Names, email addresses, credentials and session data | [United States] |
| PostHog | Product analytics: page views and feature use, by internal id | Pages visited, device and browser details, internal user and firm ids | [United States] |
| Brandfetch | Bank logos in the trust account bank picker, loaded from its image CDN | IP address, browser details and our site’s address when a logo loads; no firm or client data | [United States] |
| Resend | Sends account, invoice and notification email | Email addresses and message content | [United States] |
| Stripe | Processes subscription payments | Billing contact and payment details | [United States] |
| Anthropic | Runs AI features, only for firms whose owner turns them on | Text a feature needs | [United States] |
Cookies
We use cookies to keep you signed in and to remember your settings, such as light or dark mode. We do not use advertising cookies.
How long we keep data
- Customer Data: while your account is active, then 90 days for export after cancellation, then deleted as the terms describe.
- Account and billing records: as long as tax and accounting law requires, currently [7] years.
- Usage logs: [90] days.
Your choices and rights
You can update your account details in Plainmatter. To ask for a copy of your personal information, or to correct or delete it, email hello@getplainmatter.com. If you are a client of a firm that uses Plainmatter, contact that firm, because it controls your information.
Security
Our security page describes how we protect data and what we do not offer yet.
Children
Plainmatter is a business service. We do not knowingly collect information from children under 13.
Changes
We will post changes here and email firm owners before a material change takes effect.
Contact
Email hello@getplainmatter.com with privacy questions.