Privacy
Policy.

MatterFirst is a legal practice management platform used by law firms and their staff to manage matters, documents, clients and billing. This policy covers information we collect as the operator of the Service. Where your firm uses MatterFirst to process information about its own clients, your firm is the controller of that data and we act as its processor.

We collect the following categories of information:

• Account information — name, email address, phone number, firm name, role and authentication identifiers used to create and secure your account.
• Customer content — matters, documents, contacts, notes, tasks, invoices and other data you or your firm upload to or create within the Service.
• Billing information — subscription plan, billing contact and payment details (payment card data is handled by our payment processor and is not stored by us).
• Usage and device data — log data, IP address, browser and device type, pages viewed and actions taken, collected to operate, secure and improve the Service.
• Communications — messages you send us for support, sales or feedback.

We use personal information to:

• Provide, maintain and secure the Service and your account.
• Process subscriptions, billing and payments.
• Respond to your enquiries and provide customer support.
• Monitor, troubleshoot and improve the performance and features of the Service.
• Detect, prevent and respond to fraud, abuse and security incidents.
• Comply with our legal obligations and enforce our terms.

We do not sell your personal information. We share it only as needed to run the Service:

• Service providers and subprocessors — cloud hosting, database, email delivery, error monitoring and payment processing partners who process data on our behalf under contract.
• Your firm — administrators and authorised users within your firm can access data associated with your workspace.
• Legal and safety — where required by law, regulation, legal process or to protect the rights, property or safety of MatterFirst, our users or the public.
• Business transfers — in connection with a merger, acquisition or sale of assets, subject to this policy.

The Service is hosted on managed cloud infrastructure. Data is currently stored and processed in Australia. We use technical and organisational measures — including encryption in transit, access controls and audit logging — to protect personal information against unauthorised access, loss or misuse. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

We retain personal information for as long as your account is active or as needed to provide the Service, and thereafter as required to meet our legal, accounting or reporting obligations, resolve disputes and enforce our agreements. On termination, customer content may be deleted or returned in accordance with our Terms of Service.

Subject to applicable law, you may request access to, or correction of, the personal information we hold about you, and you may ask us to delete it where we are not required to retain it. To exercise these rights, contact us using the details below. If your data is managed within a firm's workspace, please also contact that firm, as it controls that data.

We use cookies and similar technologies to keep you signed in, remember preferences, secure the Service and understand how it is used. You can control cookies through your browser settings, though disabling some cookies may affect functionality.

The Service is intended for use by businesses and is not directed to individuals under 16. We do not knowingly collect personal information from children.

We may update this Privacy Policy from time to time. When we do, we will revise the "last updated" date above and, where appropriate, notify you through the Service. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

If you have questions about this policy or how we handle your information, or wish to make a privacy complaint, contact us at hello@matterfirst.com. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC).