This Privacy Policy explains how Aureum Technologies LLC (“Aureum,” “we,” “us”) handles information in connection with AureumCore.
It helps to separate two things:
We use information to provide and secure the service, authenticate users, process subscriptions, maintain the audit log, provide support, detect and prevent abuse, and communicate with you about your account. We use Google Analytics data from our public website and signup pages to understand how visitors find and use those pages. We do not sell your information.
Your matters are yours. We do not access the contents of your matters and documents except in narrow, logged circumstances — for example, when you ask us for support on a specific record, or where required by law. There is no general back-door admin view on top of your tenant. Firms share one database, and every request is limited to the requesting firm's records by firm-scoped access and authorization checks in the application.
AI features run on infrastructure we operate. Your Content is not sent to third-party AI providers such as OpenAI or Anthropic, and it is never used to train any model — ours or anyone else’s.
We use a small number of vendors to run the service, under contracts that limit them to processing data on our behalf. These currently include payment processing (Stripe), email delivery (SendGrid), cloud hosting in the United States, e-signature delivery for signing workflows, and website analytics (Google Analytics) on our public website and signup pages. We do not share Your Content with advertisers.
We keep Your Content for as long as your account is active. Deleted records are soft-deleted first and can be restored from the recovery bin for a period before permanent deletion. Encrypted backups are kept on a rolling basis for a limited recovery period. After your account closes, you have a reasonable period to export your data before we delete it.
Documents and the database are encrypted at rest, browser connections to the service use HTTPS, two-factor authentication is available to every user, and tenant isolation is enforced on every read and write. No system is perfectly secure, but we take protecting your data seriously.
Depending on your location, you may have rights to access, correct, export, or delete personal data. For Account data, contact us and we will help. For Your Content, your firm administrator controls access and deletion directly in the app; if you are a client or invited user, please contact the firm that invited you, since they control that data.
Inside the application (your firm's workspace and the client portal), we use the cookies needed to keep you signed in and operate the application. Our public website and signup pages also use Google Analytics, which sets its own cookies to measure visits and how visitors interact with those pages.
Your data is hosted in data centers in the United States.
AureumCore is a business tool not intended for children, and we do not knowingly collect personal information from anyone under 18.
We may update this policy from time to time. If we make material changes, we will notify you through the service or by email.
Questions about privacy or a data request? Get in touch.