LEGAL

Privacy Policy

Last updated: March 2026. MatterLayer Pty Ltd (ABN pending).

1. Information we collect

We collect information you provide directly — your name, email address, firm name, and any messages you send through our contact forms. When you use MatterLayer, the system processes matter data from your connected practice management system. This data remains yours. We also collect standard usage analytics (page views, feature usage) to improve the product.

2. How we use your information

We use your information to provide and improve MatterLayer's services, communicate with you about your account and the beta programme, analyse usage patterns to improve the product, and comply with legal obligations. We do not sell your data. We do not use your matter data to train AI models for other customers.

3. Data storage and security

All data is stored on jurisdiction-appropriate infrastructure. We use industry-standard encryption for data in transit (TLS 1.3) and at rest (AES-256). Access to customer data is strictly controlled and audited. We maintain SOC 2 Type II compliance standards.

4. Your practice management data

When you connect your PMS (Clio, Smokeball, LEAP, Actionstep, 3E, Aderant, or other supported systems), MatterLayer accesses your matter data through authorised API connections. This data is processed to provide intelligence services and is never shared with other customers or third parties. You can disconnect your PMS and request data deletion at any time.

5. Third-party services

We use a limited number of third-party services to operate MatterLayer, including cloud infrastructure providers, analytics services, and communication tools. All third-party providers are bound by data processing agreements that meet Australian Privacy Principles, UK GDPR, and applicable US state privacy law requirements.

6. Your rights

Under the Privacy Act 1988 (Cth), the UK GDPR, and applicable US state privacy laws, you have the right to access your personal information, request correction of inaccurate information, request deletion of your information, withdraw consent for data processing, and lodge a complaint with the relevant supervisory authority in your jurisdiction.

7. Data retention

We retain your personal information for as long as your account is active or as needed to provide services. If you close your account, we will delete your data within 30 days, except where retention is required by law.

8. Changes to this policy

We may update this privacy policy from time to time. We will notify you of any material changes by email or through the MatterLayer platform. Your continued use of the service after changes constitutes acceptance of the updated policy.

9. Contact

For privacy-related enquiries, contact us at [email protected].