Security and data handling

What we read

• Contacts: names, emails, phones, addresses, company, custom field values, created/updated dates and the client-portal, co-counsel and balance flags.
• For a merge you start: the ids of matters, relationships, communications and documents linked to the duplicate, which contacts are calendar attendees (calendar entries are never changed), and the text of its notes (to copy them).
• We do not read document files, matter descriptions, bills or trust ledgers. Financial endpoints are only asked "does this contact have any?" to block unsafe merges.

What we store and for how long

• OAuth tokens: AES-256-GCM encrypted; deleted when you disconnect.
• Contact snapshot and duplicate groups: encrypted; deleted 7 days after the scan.
• Change journal (old and new values, needed for undo): encrypted; deleted 30 days after the job.
• Counts, ids, job status and billing state: kept while your account exists.
• "Delete my data" in Settings removes the tokens, contact snapshot, duplicate groups, plans and change journal above, ends your sessions and revokes our access in Clio. The counts, ids, job status and billing state line stays with your account until you write to support@atesensoftware.com to have it deleted.

Safeguards

• Preview + typed confirmation for every merge, bulk edit and undo; nothing runs automatically.
• Write-ahead journal, read-back verification of every change, ETag checks, pause/resume, one job per account at a time.
• Server-side kill switch that stops all writes immediately.
• Logs contain ids, counts and error codes only — never names, emails or note text.
• Content-Security-Policy, HttpOnly/Secure session cookies, CSRF tokens, least-privilege Clio permissions.

Sub-processors

• Cloudflare, Inc. — hosting (Workers) and encrypted database (D1).
• Paddle.com Market Ltd — checkout, invoicing, tax (merchant of record). Paddle never sees your Clio data.
• Resend, Inc. — transactional e-mail (counts and links only).

Report a security issue: support@atesensoftware.com (subject "SECURITY"). We acknowledge within 2 business days.