Privacy Policy

Slantwire Studios, LLC operates Custody Folio and is responsible for the personal information described in this policy.

Privacy questions and rights requests may be sent to [email protected].

Custody Folio is intended for adult users. Children may not create or use accounts.

Account and profile information: email address, account role and status, display name, timezone, and email-code authentication settings and events.

Case and family records: matter labels, court and order information, child labels, parenting schedules, exchanges, locations, witnesses, notes, tags, and event details.

Financial records: child-support orders and payments, agency or case references, expenses, reimbursements, amounts, dates, and related notes.

Files and communications: photos, videos, audio recordings, screenshots, documents, email or text-message copies, evidence metadata, support messages, and generated reports or exports.

Optional attorney and legal team conversations: requests, questions, replies, item checklists, requested dates and date ranges, review status, timestamps, and copies of selected record text or file details that you attach. These conversations are stored separately from your case records and ordinary case reports.

Optional records may reveal health, behavioral, school, family, legal, or other sensitive information about you, children, or other people. Enter only what is reasonably necessary.

We process IP address and network information, browser or device type, request time, route, request identifier, authentication and security events, and diagnostic information needed to deliver and protect the service.

Security logs use shortened hashes for IP addresses, user agents, account IDs, and case IDs where practical. They do not intentionally include note bodies, file contents, child names, court details, or payment references.

When first party product measurement is enabled, we process a fixed event name, event time, web or iOS platform, approved source and campaign codes, plan interval when relevant, completion or bounded technical status, and a keyed opaque cohort identifier. This event store does not include names, email addresses, raw account identifiers, case identifiers, customer record contents, file information, child information, health information, full IP addresses, full user agents, or free text feedback.

Private preparation drafts are saved with your case for your use and are excluded from legal team access and case reports. You can delete a draft or deliberately send its text as a separate message. Private case archives include these drafts and records excluded from reports, so review them before sharing.

Optional conversation email preferences include frequency, time zone, and quiet hours. Notifications are off by default. When enabled, a delivery queue stores account and connection identifiers and activity timestamps, but no message or record contents.

Passwordless sign-in codes are generated and verified by Supabase Auth and delivered through Resend. Codes expire, can be used only once, and are not stored in Custody Folio records.

For signed-in workspaces, we collect limited technical events to understand where using the app fails: interacting with a record form, attempting a save or upload, validation failures, server-confirmed outcomes, and unexpected browser errors. The website and the iOS web workspace use the same diagnostics.

Each event contains an internal account identifier, random diagnostic reference, server timestamp, feature category, fixed event and error code, web or iOS platform, and whether the event came from the client or server. A server event can also include the HTTP status. We use this information for app functionality, reliability, troubleshooting, and support, not advertising.

These diagnostic events do not contain note text, file contents or names, case or child identifiers, form values, screenshots, screen recordings, keystrokes, full URLs, raw error messages, stack traces, IP addresses, or complete browser user-agent strings. They are stored in our restricted Supabase database and are not shared with invited attorneys or other users. Separate authentication and infrastructure logs follow the descriptions and retention periods elsewhere in this policy.

Help → Report a problem lets you create a reference for a selected feature. It stores that category and time with your account; it does not automatically send an email. If you separately email support, we receive the message, your sender address, and any reference or other information you choose to include. Please omit sensitive records and case details.

A browser preference remembers when you dismiss the diagnostics privacy notice. Diagnostic collection does not read or replay what you type. Network or logging failures can prevent an event from reaching us; a missing event does not prove that you did not attempt an action.

To create and secure accounts, save and synchronize records, provide attorney access and conversations you authorize, generate exports, scan uploads for malware, respond to support and rights requests, and maintain service reliability.

To prevent fraud or abuse, investigate security events, enforce our Terms, comply with law, and establish, exercise, or defend legal claims.

When first party product measurement is enabled, to understand whether people find the service, create an account, save a first record, use a timeline or report, choose to provide feedback, and start or end a subscription. General marketing reports suppress source groups representing fewer than five people.

Where a legal basis is required, we rely on performance of our agreement, your requested use of the service, legitimate interests in operating and securing the service, compliance with law, and consent when the law requires consent.

Custody Folio does not use customer records for advertising or sell personal information.

If you authorize an external tool, it can submit selected source text and proposed notes to one case for your review. It cannot read existing case records or files, finalize notes, or contact an attorney. The external service's own terms and data settings apply to information you give it.

Received submissions, including pending and dismissed submissions, are stored with your case. Saving adds the reviewed notes and a text source file to your ordinary case records, where existing access permissions apply. Original files are not transferred automatically. You can download received submissions and revoke a connection; revoking stops future access but does not delete earlier submissions or recall information the external service already received. Case or account deletion removes associated submissions and connections, subject to the backup retention described below.

On supported devices, you can start an audio recording after granting microphone access. The microphone is used for the recording you start. Denying permission does not prevent manual record entry or uploading an existing file.

In a signed-in cloud workspace, finishing a recording starts an upload to private Files & evidence, including when recording ends at the time or size limit. Audio is stored as a recording and is not automatically transcribed. Saved recordings follow the same case-sharing, retention, and deletion rules as other evidence files.

Only record or upload audio when you have the authority and any consent required by applicable law. Device microphone permission does not establish another person's consent to being recorded.

After your trial ends, an optional survey may ask why you have not subscribed, whether you expect to subscribe, and what you found useful. Each selected answer is saved immediately; follow-up questions are optional. You can dismiss the survey and keep using your available records and export tools. We store fixed answer choices, an account identifier, survey version, trial-end date, response and delivery times, and dismissal status until account deletion. We do not collect case contents or free-text responses through this survey.

Trial-end survey answers are emailed directly to the founder through Resend, with a random response reference and trial-end date, without your email address or custody records. Emailed copies follow the support-correspondence retention period below; they are separate from the account database and are not automatically removed by account deletion. Contact the privacy inbox to request deletion of those copies. Answering does not grant permission for follow-up email or marketing. The browser may temporarily remember that you answered or dismissed the survey to prevent repeat prompts if connectivity fails.

The dashboard may ask whether saving a first record was easy. A Yes or No answer is stored with your account identifier, question version, and response time until account deletion. Answering this optional poll does not grant permission for email follow-up and does not collect record contents.

Earlier feedback invitations offered a choice about a single product-feedback contact. Declining does not affect access, trial, or subscription status.

For a saved feedback invitation choice, we retain the account identifier, invitation version, permission choice, and a contact count limited to one. We do not copy custody record contents into the feedback consent record.

If you previously chose Yes, contact me once, that permission is limited to one product-feedback message from [email protected]. You can withdraw it by contacting support; it is not permission to add you to a mailing list.

The public research form keeps your answers in the page while you review, copy, or download them; the form does not submit your answers to Custody Folio. If you choose to email them, we receive your sender address, response, attachments, and stated follow-up preference. We use them to understand product needs and follow that preference. Emailed feedback follows the retention period for support correspondence.

Supabase provides authentication, database, and private file storage; Backblaze provides encrypted off-site evidence backups; Hetzner hosts the application; Cloudflare provides network delivery, DNS, and security protection; and Resend delivers authentication email, optional generic workspace notifications, and optional trial-end feedback to the founder.

Apple iCloud Mail processes support, privacy, and security messages. Resend processes the recipient address and delivery information needed to send passwordless sign-in codes and optional generic workspace activity emails. Activity emails contain no case names, message text, or record contents.

When web subscription billing is enabled, Stripe processes checkout, subscription, invoice, refund, dispute, payment-method, and U.S. service-address information used to enforce the current web-purchase territory. When App Store billing is enabled, Apple processes in-app purchases, subscriptions, cancellations, and refunds. Custody Folio does not store full card details.

Service providers are required to protect user data consistently with this policy and applicable law. They process information to provide contracted services; payment providers may also process information for their own fraud prevention, regulatory, and other legal obligations under their terms and privacy notices. The current provider list and processing descriptions appear on the Subprocessors page.

We may disclose information in response to valid legal process, to protect people or the service, or as part of a business transfer where the recipient assumes these privacy obligations. We review requests and disclose only what we reasonably believe is required.

Custody Folio stores a pseudonymous billing-account identifier, Stripe customer or subscription identifiers, Apple signed transaction identifiers and status information, product and status information, payment-period dates, verified provider-event digests, trial dates, and privacy-safe billing audit records. Card details remain with the billing provider.

Billing records needed for financial, fraud, dispute, tax, or legal obligations are separated from custody records. After account deletion, the user link is replaced with a keyed pseudonymous hash and trial and active-entitlement records are removed. Provider financial records may remain for the period legally required.

When you create an individual invitation for an attorney, paralegal, or legal staff member and affirmatively authorize sharing, the invited account receives read-only access to the selected case until you revoke it, the invited person leaves, the grant expires, or the case or account is deleted. This includes records later added to that case. Each invited person has separate access and conversation history. Staff cannot record an attorney review. Email verification confirms control of the invited address; it does not verify a professional license or legal representation.

The attorney may view, download, print, and export the shared records. Revocation blocks future access but cannot recall copies already downloaded.

When Requests & messages is available, you can separately enable conversations with an invited attorney. Both participants can send requests and replies; the attorney can record a review of a conversation version. The attorney cannot edit your underlying case records. Only the client can attach selected copies of case record text or file details.

Pausing conversations stops the attorney's access to the conversation history but leaves their separate read-only case access in place. Revoking Attorney Access stops both. Neither action deletes conversation history retained for the client, and neither recalls downloaded copies.

An invitation does not create legal representation or attorney-client privilege. Custody Folio is not a law firm and cannot determine whether a communication or record is privileged.

Adults may keep records referring to children, another parent, witnesses, attorneys, or other people, but must have a lawful reason to do so and must use neutral labels where possible.

Do not enter Social Security numbers, full bank or card numbers, passwords, verification codes, unnecessary medical or school details, or information unrelated to the custody matter.

If we learn that a child created an account or directly provided account information, we will disable the account and delete the information as appropriate. Contact the privacy inbox to report a suspected child account.

The account holder is the source of information entered about other people and is responsible for providing any notice or obtaining any authorization required by applicable law.

Account and case records remain until you delete them or close the account. Successful deletion through the available controls removes the selected records and private evidence files from active systems. If cleanup cannot be confirmed, the app reports an error instead of confirming completion; some steps may already have finished.

Attorney messages and attached copies of record text or file details remain separately in conversation history until the associated case or account is deleted. Editing or deleting an original record does not change those earlier copies. Add a reply to correct an earlier message, or contact the privacy inbox for a request concerning information retained in a conversation. Original file downloads remain available only while the file exists and access is authorized.

Encrypted backups rotate and deleted customer content ages out no later than 180 days after a verified deletion. Restored backups must reapply valid deletion requests before serving production traffic.

Workflow diagnostic events expire after 30 days and are removed by an hourly cleanup job. Account deletion removes the linked events from the active database. Backup copies follow the backup rotation described above. A reference copied into a support email becomes part of that separate support correspondence.

Raw request logs are retained for up to 180 days. Authentication, security, attorney-access, and deletion audit events may be retained for up to 365 days when reasonably necessary to protect accounts, prove actions, or comply with law.

First party product measurement events expire no later than 180 days after collection. A feedback permission choice remains while the account is active so Custody Folio can enforce the one message limit, and is removed when the account is deleted.

Closed support and privacy correspondence is normally retained for up to 24 months. A documented legal hold may extend a period only for information reasonably necessary to comply with law or establish, exercise, or defend a legal claim.

Billing-provider transaction and legally required accounting records may follow longer statutory retention periods. They are minimized and separated from deleted custody content.

You can view, correct, export, and delete records inside the app; choose neutral labels; revoke attorney access; withdraw optional sharing consent; and permanently delete the account.

You may request access, correction, deletion, portability, withdrawal of consent, or information about disclosures by contacting the privacy inbox, including if someone else's records contain information about you. You do not need to create an account to make a request. We will verify identity and any authority to act for another person, protect other people's information, and respond within the period required by applicable law.

We do not discriminate against a user for exercising a privacy right. If we deny a request, you may reply with the subject Privacy Appeal for a separate review and instructions for contacting the appropriate regulator.

Washington residents and people whose consumer health data is collected in Washington should also review the Consumer Health Data Privacy Policy.

We use essential cookies to keep you signed in, maintain your selected workspace, and protect requests against forgery. Blocking these cookies can prevent sign-in and account controls from working. These are separate from the optional product measurement described below.

Custody Folio does not track users across unrelated websites or apps for targeted advertising, and we do not permit advertising networks to collect records-workspace activity.

When first party product measurement is enabled, Custody Folio uses a same service cookie containing an opaque random visitor token and signed approved attribution codes for up to 30 days. It is used only for aggregate acquisition and product improvement measurement and is not an advertising identifier.

Because we do not perform cross-site advertising tracking, browser Do Not Track signals do not change how the service operates. Privacy controls such as Global Privacy Control are honored where applicable to a covered sale or sharing, but Custody Folio does not currently sell or share data for cross-context behavioral advertising.

Custody Folio is operated from the United States. Providers may process information in the United States or other countries where they operate, including the European Economic Area.

Where required, we use contractual or other lawful transfer safeguards. Users in jurisdictions providing additional rights may contact the privacy inbox and may complain to their local data-protection authority.

The date at the top identifies the current version. We will post changes here before they take effect and provide an in-app or email notice when a change materially affects how sensitive records are collected, used, shared, or retained.

When law requires renewed consent, the app will ask for it before the new processing begins. Prior versions and acceptance records are retained as reasonably necessary to document the agreement that applied.