What this covers
Customer Data means everything you put into or generate with settleD: time entries, mileage, expenses, matters and case names, payer and rate details, notes, imported files, and the documents you release. It often describes other people's cases, health, finances and disputes, and some of it may be confidential or sealed. This policy explains how we treat it.
You own it
Customer Data belongs to you. We claim no ownership of it and no license to it beyond what we need to run settleD for you. You're responsible for having the right to use it, and for meeting any confidentiality duties you owe under court rules, orders or contracts.
Where it lives today
| Surface | Where Customer Data is |
|---|---|
| Normalizer on settled.biz | In your browser's memory while the page is open. The file isn't uploaded. |
| settleD app (pilot) | In your browser's local storage on your device. There's no server copy, no sync and no analytics. |
| Email to us | Only what you choose to send. Please don't email case records. If you need to show us a problem, send a redacted or made-up example. |
Commitments for account sync
Account sync isn't live yet. Before it launches, this section will be finalized and pilot users will be notified. We're building it to these commitments:
- Isolation in the database. Each account's rows are isolated by database policy, not only by application code, and an automated test runs on every change to verify it.
- Minimal on the device. Only entries that are still waiting to send are held on your phone, and signing out clears them.
- Encryption. Data is encrypted in transit (TLS) and at rest by our hosting and database providers.
- Least access. Our staff don't look at Customer Data unless you ask for support on a specific item, the law requires it, or we need to investigate abuse or a security incident.
How we use it
We use Customer Data only to provide settleD to you. We don't sell it, share it for advertising, use it to profile the people named in it, or use it to train, fine-tune or evaluate any AI model, whether ours or a third party's.
We may create aggregate, de-identified statistics about how the product is used, such as how often an import needs a correction. These statistics can't reasonably identify you, your clients or any case, and we won't try to re-identify them.
Integrity of your records
settleD is built so that it doesn't change your work behind your back:
- Nothing is invented. Hours, rates, mileage, case numbers and dates come only from your records. Anything unresolved goes to a named exception list for you to fix.
- Every output line keeps its source value and source row, and the raw duration is kept beside any rounded value.
- Rounding is a policy you choose. We don't apply a default.
- Duplicates are flagged, never silently deleted. Nonbillable work is kept and left out of totals.
- A released statement is frozen. If you change the source, the policy or the parameters, the approval is withdrawn and you have to review again.
- A person releases every document. settleD doesn't sign, file, submit, send or pay anything on your behalf.
Export and portability
You can export your workspace at any time in open formats (CSV/XLSX, and PDF for documents) that you can read without settleD. We won't hold your records back because of a billing dispute. Your billing history is evidence of your own work.
Retention and deletion
- Today: you control retention on your device. Deleting the workspace or clearing site data removes it.
- Once sync is live: you can delete your account at any time. We'll delete Customer Data from active systems within 30 days, and backups will age out within 90 days. We'll keep something longer only if the law requires it, and we'll tell you if that happens.
- Your own record-keeping duties, such as how long a court or agency requires you to keep billing records, remain yours. Keep your own exports.
Legal requests
If a government or party requests Customer Data, we'll send them to you first. Where the law allows, we'll notify you before we disclose anything, so you can object. We'll disclose only what is legally required.
Incidents
If we confirm unauthorized access to Customer Data we hold, we'll notify affected users without undue delay, and within 72 hours of confirmation where possible. We'll tell you what happened, what data was involved, what we're doing about it, and what you should do.
Regulated information
Your records may include health, financial or juvenile information. settleD isn't a court system and isn't your records custodian of record. We don't claim HIPAA, CJIS, SOC 2 or any other compliance or certification. If your agency needs a vendor questionnaire, business associate agreement or data processing agreement answered, email wolf@ward.bz and we'll give you a direct answer.