← Back to FirmamentPro

Legal

Privacy policy

Effective date: October 28, 2026 · Applies to the FirmamentPro desktop app for Windows (version 0.1.0.0) and the FirmamentPro account services at indmak.com that the app uses for sign-in, licensing, trials and optional cloud backup. Controller: Indmaksoft. Contact: support@indmak.com

1. The short version

• Your firm data stays on your computer. Matters, clients, documents, time entries and backups are stored in an encrypted vault (AES-256, SQLCipher) on your own device. We do not have access to them and cannot read them.
• We never receive your master password. It exists only on your device, is used only to derive encryption keys in memory, and is never uploaded, stored or logged by us. If you lose it, we cannot recover it for you.
• The desktop app never handles your account password. Sign-in, registration and password reset happen in your system browser on our website. The desktop app only receives short-lived tokens through an approved device authorization.
• We collect the minimum needed to run accounts, licensing, trials and support: your account email, device identifier, license and subscription status, and — only if you turn them on — cloud backup uploads and AI requests you explicitly send.
• No advertising, no sale of personal data, no third-party analytics SDKs in the app.

2. Data that stays on your device (we cannot see it)

The following never leaves your computer unless you explicitly choose an action that sends it (Sections 4–5):

Data	Where it lives	Protection
Master password	Memory only, while unlocking	Argon2id key derivation; never written to disk or logs; wiped after use
Matter, client, conflict, time, calendar, document, journal and library content	<AppData>/firmament/firmament.db	AES-256 (SQLCipher); the app will not open with a wrong password
Attachments and document assets	<AppData>/firmament/files/	AES-256-GCM, keys derived from the vault key
Local backup archives (.fmbak)	Your chosen backup folder / USB drive	Whole-archive AES-256-GCM encryption; needs the master password from when the backup was made
Settings and tokens cache	Inside the encrypted vault	Same AES-256 protection as the vault

Changing your computer does not move this data by itself — you move it yourself with a backup archive (see the in-app migration guide).

3. Data we process and why

Data	Purpose	Legal basis (GDPR-style)	Retention
Account email, display name	Identify your account; attribute licenses and purchases; show sign-in state	Contract (provide the service)	While the account exists; deleted on a verified account-deletion request
Device identifier (a SHA-256 fingerprint, e.g. sha256:…)	Bind license seats, enforce one-trial-per-device, show your devices	Contract; legitimate interest (license enforcement)	While the device is authorized; removed when you deactivate the device
License key status, subscription status, trial records	Unlock paid modules, enforce expirations and refunds	Contract	Per order/subscription records and tax-law retention
Purchase/order email and records (via our payment provider)	Attribute purchases to your account, handle refunds and disputes	Contract; legal obligation	As required by payment and tax records
Support communications	Answer questions, fix bugs	Legitimate interest	Until the issue is resolved, then archived per support policy

We do not collect the content of your matters, documents, time entries or backups. Support staff cannot open your vault.

4. Features that send data only when you use them

• Account sign-in (browser device authorization). Your browser talks to our website; the desktop app receives an access token (1 day) and a refresh token (30 days). Use is logged as sign-in events for security.
• Cloud backup upload (optional, off unless you configure it). If you connect S3/R2-compatible storage, encrypted backup archives are uploaded to your bucket. We never hold the keys to read them.
• AI chat (optional, per request). Only the text you explicitly select is sent to the configured AI provider to generate a reply. Nothing is sent in the background, and we do not train models on your data.
• Speech transcription models (optional download). Downloading a model contacts the configured model host; transcription itself runs on your device.
• Update and version checks. The app may check which version is current so it can tell you an update exists.

5. What we never do

• Never receive, store or log your master password.
• Never read the contents of your vault, backups or attachments.
• Never sell personal data or share it with advertisers or data brokers.
• No third-party analytics, crash-reporting or advertising SDKs are embedded in the desktop app.
• No keystroke logging, screen capture or window-content collection. The optional activity-capture feature in Time tracking records only application names/titles you allow, stays on your device, and is off by default.

6. How your data is protected

• At rest (your device): AES-256 vault encryption; OS file permissions; no plaintext secrets on disk.
• In transit: HTTPS (TLS 1.2+) for all website, API, backup-upload and AI traffic.
• Server side: salted password hashes (PBKDF2) for website accounts — the desktop app never sees them; short-lived access tokens with rotating refresh tokens; licenses signed offline (Ed25519) and verified on device.
• Backups you make are encrypted before they leave your machine; whoever holds a backup archive still needs the master password from when it was made.

7. Your rights and choices

• Access / correction: sign in on the website to review your account, licenses and devices; contact support to correct data.
• Deactivation: deactivate a device (e.g. a lost or retired computer) from your account; its local vault copy remains on that machine and can only be opened with the master password.
• Deletion: request account deletion and we will delete account records subject to order/tax record obligations. Deleting your account does not delete vault copies on your own devices — delete those yourself (uninstalling the app does not delete backups stored elsewhere).
• Trials and marketing: module trials are per device and need no marketing consent; we do not send marketing email without opt-in where required.
• Children: FirmamentPro is a professional tool, not directed at children under 16.

8. International transfers and subprocessors

Account, licensing and website services are operated by Indmaksoft and its infrastructure/payment providers (website hosting, payment processing via our checkout provider, and any S3/R2-compatible storage you configure). Where data crosses borders, transfers rely on the provider's safeguards (e.g. Standard Contractual Clauses). A current subprocessor list is available on request at support@indmak.com.

9. Changes to this policy

We will update this page when the app or the law changes, update the effective date above, and note material changes in the app's release notes. Continued use after changes take effect constitutes acceptance.

10. Contact

• Support and privacy requests: support@indmak.com
• Website: https://www.indmak.com
• When writing about a vault problem, never send us your master password or backup archives — support cannot use them and you should keep them private.