Privacy Policy.

Matter Vault is a practice management platform for law firms, operated by Layer Eight Consulting LLC. This policy explains how we collect, use, and protect information when you use Matter Vault. Questions? Contact us at legal@matter-vault.com.

Account information

When a law firm signs up, we collect firm name, attorney names, email addresses, job titles, and billing contact information.

Matter and case data

Attorneys and paralegals enter matter details, client information, deadlines, time entries, and communications into Matter Vault. This data is stored in our secure database and is owned entirely by the firm.

Documents and files

Matter Vault connects to your firm's Google Drive account to store and retrieve documents. Document files are stored in your firm's Google Drive — not on Matter Vault's servers. We store only metadata about your documents (file name, size, upload date, custody events) in our database.

Google user data

Matter Vault requests access to Google Drive to create folders and upload, retrieve, and organize matter documents on your firm's behalf. We access only the folders and files created by Matter Vault within your Drive. We do not access, read, or store any other files in your Google Drive. Google Drive data is used solely to provide document storage functionality within Matter Vault and is never used for advertising, analytics, or shared with third parties.

Usage data

We collect standard server logs including IP addresses, browser type, and pages visited. This is used for security monitoring and debugging only.

• To provide and operate the Matter Vault platform
• To store and retrieve matter documents via Google Drive
• To send transactional emails (invitations, document notifications, portal access)
• To monitor for security incidents and abuse
• To respond to support requests

We do not sell your data. We do not use your data for advertising. We do not share your data with third parties except as described below.

Matter Vault's use of Google Drive is limited to storing and retrieving matter documents created within the platform. Our use of information received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements.

We share data only with:

• Supabase — database and authentication hosting
• Google— Drive storage per your firm's authorization
• Resend — transactional email delivery
• Vercel — application hosting
• Sentry — error monitoring

All subprocessors are bound by data processing agreements. We do not share data with any other third parties without your explicit consent.

Matter data is retained for as long as your firm maintains an active account. Upon account termination, we will delete your data from our systems within 30 days, except where retention is required by law. Documents stored in your Google Drive are not affected — those remain under your firm's control.

Matter Vault uses bank-level encryption in transit (TLS 1.2+). Access is protected by multi-factor authentication. We conduct regular security reviews. No system is perfectly secure — if you believe your account has been compromised, contact us immediately at legal@matter-vault.com.

Firms may request export or deletion of their data at any time by contacting legal@matter-vault.com. We will respond within 30 days.

We will notify firm administrators by email of any material changes to this policy at least 14 days before they take effect.

Layer Eight Consulting LLC
legal@matter-vault.com