Legal

Privacy Policy

Last updated November 3, 2026

Information We Collect

Contact and sign-up information: name, firm, email, phone and plan when you contact us or start a membership. Account information: names, emails and roles of the people a firm invites. Firm Data: the clients, tags, notes, memos and files a firm adds to its workspace. Technical information: sign-in times, IP addresses and basic logs used for security.

How We Use It

To provide, secure and support the Service; to reply to inquiries; to bill memberships; and to tell administrators about changes to the Service. We do not sell personal information and do not use Firm Data for advertising.

Separation Of Firm Data

Each firm's workspace is stored separately. People at one firm cannot see another firm's data. Client portal users see only the information their firm shares with them.

Cookies

Sandstone uses a sign-in cookie to keep you signed in. We do not use advertising cookies.

Service Providers

We use hosting, email and payment providers to run the Service. They process information only on our behalf.

Retention

We keep account and Firm Data while a membership is active. After cancellation, a firm may request an export within 30 days, after which its workspace data is deleted from active systems.

Your Choices

You can ask to access, correct or delete your personal information through the contact page. Requests about Firm Data are handled with the firm's administrator.

Changes

We will post updates here and change the date above.