Last updated August 16, 2026
Privacy Policy
How Stillroot collects and handles information used to provide the service.
Information we collect
We collect account identity, firm, membership, role, billing, configuration, job, activity, and security metadata needed to provide and protect the service. Product records may include saved case lists, Dropbox destination settings, notification schedules, and Jury Seating session data supplied by users.
Court credentials
An authorized organization owner may submit court credentials through a write-only workflow into dedicated secrets storage. Saved values are not displayed back through the application or written into customer activity records. Stillroot uses them for the credential check and Court workflows requested or scheduled by the organization. Customers see only coarse readiness information; Stillroot manages disablement and remediation.
Dropbox and court documents
Dropbox is connected through customer-authorized OAuth. Stillroot stores authorization needed to deliver documents, not the firm's Dropbox password. Court documents may be processed transiently for delivery to the organization's selected Dropbox folder. Stillroot is not the long-term document vault or official court record.
Jury Seating information
Jury Seating stores the normalized workspace needed to save and resume a user's session. Uploaded panel PDFs are short-lived parsing inputs rather than the durable workspace record. The session creator controls access and deletion through the product.
Billing
Stripe hosts Checkout and billing management. Stillroot receives customer, subscription, event, and product-access information needed to manage access, but does not receive or store the full payment-card number entered into Stripe.
How we use information
We use information to authenticate users, maintain organization and product access, provide requested workflows, deliver documents, process subscriptions, maintain activity records, protect the service, troubleshoot failures, communicate about the service, and comply with legal obligations.
Sharing and service providers
We do not sell personal information or customer content. We disclose information to hosting and authentication, billing, Dropbox, Iowa Courts, and professional service providers only as needed to provide and protect the service, follow customer instructions, or comply with law. Those providers process information under their own terms and applicable agreements.
Cookies and browser storage
Stillroot uses cookies and browser storage needed for authentication, session continuity, security, and connected-service authorization. We do not currently use customer information for targeted advertising.
Retention and choices
We retain information only as reasonably needed to provide and secure the service, maintain required business and audit records, resolve disputes, and meet legal obligations. Retention varies by record type. Product records that support user deletion remain until deleted or otherwise removed under the applicable lifecycle. Security, billing, and backup records may remain longer where reasonably necessary.
Security
We use administrative and technical safeguards appropriate to the information and the service. No internet-connected system can be guaranteed perfectly secure. See the Security & Data Handling summary for the high-level controls and customer responsibilities relevant to Stillroot.
Updates and questions
We will post material changes with a revised date. Privacy and data handling questions may be directed to hello@stillroottech.com.