Effective September 1, 2026
Custos is operated by JK Filing LLC. It stores the records a firm keeps about where its physical files are. The firm owns that data and controls who sees it. We collect nothing for advertising, run no tracking analytics, and never sell personal information.
Account information: your email address, a display name, and your sign-in credentials, which are handled by our authentication provider. We never see your password.
Firm records: what firm members enter, including client names and contact details, case captions, movement history, notes, and hours. This data is visible only to members of that firm; every firm's data is isolated from every other firm's at the database level.
Technical data: push notification subscriptions you enable, short-lived request counts by network address used to prevent abuse of public pages, and error reports when something breaks. Error reports are scrubbed before they leave the server: no cookies, no headers, and web addresses reduced to their shape so a report never says which files anyone opened.
To run the service, send the notifications you have turned on, process billing, and keep the service secure. That is the whole list.
Custos uses cookies only to keep you signed in and to remember preferences such as your theme and current firm. There are no advertising or third-party tracking cookies.
These providers process data on our behalf, each for one job:
Supabase (database and authentication, hosted on Amazon Web Services in the United States) · Vercel (application hosting) · Stripe (payments; card details go directly to Stripe and never touch our servers) · Sentry (error reports, scrubbed as described above) · Upstash (short-lived abuse-prevention counters).
The movement history is append-only by design, because a custody record that can be quietly edited is worthless. Firms can remove records from view, export everything at any time, and take their data with them when they leave. To delete an account, or for any privacy request, email jamesknapstad@gmail.comand we will respond within 30 days. Where an account's name appears in another firm's custody history, that history is preserved, since it is the firm's record of its own files.
Firm data is isolated per firm at the database layer, enforced by the database itself rather than application code alone. Connections are encrypted in transit, data is encrypted at rest, and the movement history cannot be deleted even by our own application role.
Custos is a professional tool for organizations. It is not directed to children, and we do not knowingly collect information from anyone under 13.
If this policy changes materially, we will announce it in the app before the change takes effect. Questions and requests go to jamesknapstad@gmail.com.