Privacy Policy

Introduction

Sandia Software Services ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services, including Case Timeline and Email Saver.

Information We Collect

Account Information

When you create an account, we collect:

• Name and email address
• Company or law firm name
• Password (encrypted)
• Billing information (processed securely via Stripe)

Usage Data

We automatically collect:

• IP address and browser information
• Pages visited and features used
• Date and time of access
• Error logs and performance data

Product-Specific Data

Case Timeline: Case information, timeline events, documents, party information you create and upload.

Email Saver: Gmail account credentials (OAuth tokens), email metadata for archiving rules, files saved to your Google Drive.

How We Use Your Information

We use collected information to:

• Provide, operate, and maintain our services
• Process your transactions and manage subscriptions
• Send you service-related communications
• Respond to your inquiries and provide support
• Monitor and analyze usage patterns to improve our services
• Detect, prevent, and address technical issues or security threats
• Comply with legal obligations

Data Security

We implement industry-standard security measures to protect your data:

• AES-256 encryption for data at rest
• TLS/SSL encryption for data in transit
• Role-based access controls
• Regular security audits and updates
• Secure authentication with bcrypt password hashing
• OAuth 2.0 for third-party integrations (Gmail, Google Drive)

Data Sharing and Disclosure

We do not sell your personal information. We may share data with:

• Service Providers: Stripe (payment processing), cloud hosting providers, email delivery services
• Legal Requirements: When required by law, court order, or government regulation
• Business Transfers: In the event of a merger, acquisition, or sale of assets
• With Your Consent: When you explicitly authorize disclosure

Third-Party Services

Our services integrate with:

• Google APIs: For Gmail and Google Drive access (Email Saver). See Google's Privacy Policy.
• Stripe: For payment processing. See Stripe's Privacy Policy.

Your Rights

You have the right to:

• Access your personal information
• Correct inaccurate or incomplete data
• Request deletion of your data (subject to legal retention requirements)
• Export your data in a portable format
• Opt out of marketing communications
• Revoke third-party access (Gmail, Google Drive)

To exercise these rights, contact us at privacy@sandiasoftwareservices.com.

Data Retention

We retain your data for as long as your account is active or as needed to provide services. After account cancellation, data is retained for 30 days in read-only mode, then permanently deleted unless legally required to retain it longer.

Cookies and Tracking

We use cookies and similar technologies to:

• Maintain your session and authentication
• Remember your preferences
• Analyze site traffic and usage patterns

You can control cookies through your browser settings.

Children's Privacy

Our services are not intended for individuals under 18. We do not knowingly collect information from children.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the service. Continued use after changes constitutes acceptance.

Contact Us

If you have questions about this Privacy Policy, contact us: