Privacy Policy

• Account and firm information, such as names, work emails, firm identity, roles, and workspace membership.
• Beta, marketing, and support information, including signup answers, campaign data, and messages you send us.
• Connection information, including encrypted OAuth tokens, scopes, connection status, and provider identifiers.
• Operational information, such as tool name, action type, success or failure, timing, rate-limit data, and security events.
• Billing information handled by Stripe, such as customer and subscription identifiers. MatterLynx does not store full payment-card numbers.
• Practice data processed on demand when an authorized user asks MatterLynx to read or change information in a connected system.

We use information to provide and secure MatterLynx, authenticate users, connect approved services, carry out user instructions, enforce access and billing controls, maintain audit records, troubleshoot problems, communicate with users, prevent abuse, and comply with law.

MatterLynx does not use client or matter data to train AI models. When you make a request, relevant data may pass through MatterLynx to the AI assistant you selected. That provider may process or retain it under its own terms, privacy policy, plan, and settings.

MatterLynx processes practice data to complete authorized requests and limited support, security, and reconciliation work. It is not designed to replace Clio as the firm's system of record. Each user connects their own Clio account, and Clio's permissions continue to limit what that user can access.

MatterLynx's operator and infrastructure providers may have technical access where needed to operate, secure, support, or comply with law. The routine operator dashboard is designed to show account, connection, and operational status rather than client or matter content.

We share information with service providers that help operate MatterLynx, including hosting, storage, database, authentication, payment, email, monitoring, operations, practice-management, and user-selected AI assistant providers. We may also disclose information when required by law, to protect rights or safety, to investigate misuse, or as part of a financing, reorganization, sale, or transfer of the service.

See the Subprocessors page for the current service categories and providers.

MatterLynx and Clerk use essential cookies to sign users in and maintain sessions. MatterLynx uses OAuth, tenant-scoped access controls, encrypted token storage, confirmation controls, and audit records. No system is completely secure, and we cannot guarantee that unauthorized access, loss, or disclosure will never occur.

MatterLynx uses first-party funnel measurement to understand website visits, calls to action, waitlist-form progress, and successful waitlist requests. This measurement stores random visitor and session identifiers, landing path, referring site, and campaign parameters. It does not store IP addresses, browser user agents, form answers, client data, or case data.

For visitors in the United States, MatterLynx also uses Meta Pixel and Meta's Conversions API. For a successful waitlist request, we may send Meta the page URL, event time, a one-way hashed version of the work email address, IP address, browser user agent, and Meta browser or click identifiers. We do not send waitlist-form answers, practice area, firm size, client data, matter data, or privileged text to Meta.

The browser and server events use the same event ID to prevent double counting. These measurement tools are enabled by default, but MatterLynx honors Global Privacy Control and any choice to turn measurement off. You can change your choice at any time using the "Your Privacy Choices" control in the site footer.

MatterLynx does not sell client or matter data. Some privacy laws may define the use of Meta measurement as "sharing" or targeted advertising. The privacy control and Global Privacy Control signal let you opt out of that measurement.

• Most practice content is processed on demand rather than kept as a long-term MatterLynx record.
• Matter Review jobs may temporarily store request, progress, and result data and are scheduled for deletion after seven days.
• Private document uploads normally expire after two hours and are deleted after Clio confirms the result. If the result is uncertain, staged data may remain for up to seven additional days for reconciliation. Failed deletion attempts may take longer to resolve.
• Detailed operational usage events are scheduled for deletion after 90 days once aggregate reporting is complete. Legal preservation or delayed processing may extend that period.
• Aggregate usage reports may be kept indefinitely. They are designed to exclude client names, matter names, notes, documents, amounts, and other case content.
• Security and audit records have no routine deletion schedule. They are designed to retain identifiers, action types, timing, results, and other structured metadata while excluding names, contact details, notes, documents, amounts, free text, and secrets.
• Account, support, billing, transaction, and legal records are kept for as long as reasonably needed for the service, security, accounting, disputes, and legal obligations.

You or an authorized firm administrator may request access, correction, export, or deletion of MatterLynx account data and may disconnect providers. Requests are handled through a verified manual process. We may need to confirm identity and authority, and may retain records where required or reasonably necessary for security, accounting, disputes, or law. Rights and exceptions vary by location.

Send privacy requests to Joule Studios, LLC at julian@joulestudios.com.

MatterLynx is intended for business use by adults, not for children. We may update this Policy as the service changes. The effective date above identifies the current version, and material changes may require renewed acceptance or notice.