Skip to content
pactlume.
PACTLUME POLICIES

Privacy notice

Your agency’s information, its use, and your choices.

Effective September 24, 2026

Who we are

Pactlume is an invoice coordination service provided by Julian Neil, operating Pactlume in El Paso, Texas, United States. The current pilot serves United States businesses. This notice explains how we handle information in the service. Contact [email protected] with privacy questions or requests.

Your agency decides what client and invoice information to put in its workspace and who may join it. If your information was provided by an agency, contact that agency about its use of your records. You can also contact us for help routing a request.

Information we handle

We use information you provide, information your agency provides, and limited information generated while operating the service.

  • Account and access information: email address, verified-email status, account identifier, display name when supplied, agency membership, roles, and session and security information such as IP address and browser information.
  • Workspace information: agency and client details, invoices, recorded payments, blockers, assignments, promised dates, document links, notes, follow-up drafts, and activity history. Recording a payment in Pactlume does not move money or verify a bank receipt.
  • Agency chat: message text, author identifier and displayed name at sending, timestamps, and membership read positions.
  • Subscription information: Stripe customer and subscription references, subscription state, invoices, and payment reconciliation records. Stripe processes payment details; do not enter full card numbers or bank login credentials in Pactlume notes, chat, or support requests.
  • Support and trial feedback: the information you provide when asking for help, reporting a problem, or recording whether your agency intends to continue.

How we use information

We use this information to provide the workspace, authenticate users, enforce permissions, organize invoice work, prepare follow-up drafts, administer subscriptions, provide support, protect the service, and carry out authorized exports and closures.

Follow-up drafts are generated from templates. The current service does not send invoice content to an AI generation provider, synchronize accounting accounts, send invoice reminders automatically, or collect your clients’ invoice payments. Opening a document link or sending a copied draft uses a separate service chosen by you.

Who can see workspace information

Current agency members can access their agency’s information according to their role. Agency administrators manage membership, billing, and workspace exports. The product operator can access workspace records when needed for administration, security, and support.

Agency chat is one group conversation for the agency, including members added after a message was sent. It is not a private direct-message service. Removing a member blocks their subsequent requests but preserves messages they already sent. The current interface does not offer message editing or deletion.

The operator reviews support reports and trial feedback. The final closure export also includes these records associated with the agency, including submitted text and reporter name and email, for the designated verified contact administrator. Ordinary workspace exports do not include them. An in-app support report may therefore later be disclosed to that administrator through the final closure export.

Product-owner status alone does not grant chat access through the application or include chat in an ordinary workspace export. Chat access requires agency membership, and exporting chat requires agency administrator membership. These application controls do not remove the operator’s infrastructure administration responsibilities.

Service providers and other disclosures

DigitalOcean provides application hosting and PostgreSQL storage. Better Auth runs within the application to manage email-link authentication and sessions. Resend sends sign-in emails, closure notices, and secure export links. Stripe hosts subscription Checkout and the customer billing portal and processes subscription payments.

A final workspace export is temporarily encrypted in the application database. Retention emails contain a protected download link, not an attachment containing your workspace data. The designated contact administrator must sign in with their verified account and remain authorized to download it.

Providers may process information in the United States and other locations where they operate. Their own policies and contracts also govern information they handle independently, including Stripe’s payment processing. We may disclose information where necessary to meet a legal obligation, respond to a lawful request, protect rights and security, or complete a business transfer with appropriate protections.

We do not sell workspace information or use it for targeted advertising. The current application does not include advertising trackers.

How we protect access

We use verified email sign-in, server-side agency and role checks, HTTPS connections, and restricted export access. Temporary final exports are encrypted while stored. Access and export permissions are checked against the current account and membership. Contact [email protected] promptly if you suspect unauthorized access.

Agency administrators control membership, and you control the security of your email inbox, devices, and downloaded copies. We cannot remove copies that an authorized person has already downloaded or shared outside Pactlume. Keep sensitive information out of records when it is not needed for the agency’s work.

Cookies and browser storage

The service uses cookies needed for sign-in and sessions. Hosting and security providers may also use necessary cookies to protect traffic and prevent abuse. Your browser remembers preferences such as appearance, selected workspace, and tutorial progress. Blocking essential cookies may prevent sign-in. You can clear browser storage to remove saved preferences; this does not delete your agency’s stored workspace records.

How long information is kept

Operational workspace records are maintained while the agency is using the service. Archiving an invoice keeps its record. Effective subscription cancellation or a verified workspace closure starts a 90-day retention period. A billing pause or expired trial alone does not start deletion.

Before operational deletion, we require confirmed advance notices and a final export for the designated verified contact administrator. Delivery or export problems postpone deletion. Our Data retention policy describes the full process, access requirements, and records outside the workspace purge.

Shared sign-in accounts may remain while needed for other workspaces. Necessary billing, tax, dispute, security, and minimal retention-audit records can remain beyond workspace deletion for their separate purposes or applicable legal obligations. Support correspondence outside the workspace is kept while needed to resolve the request and handle related issues. These records are restricted to their administrative purposes and reviewed when handling a verified closure or deletion request.

Provider-held records and any backups follow their applicable contracts, configured retention, and legal requirements. They are not all erased by the workspace purge. Backup copies are not an ongoing workspace archive or a promised recovery service. A verified request may result in deletion, correction, or an explanation of the information we must still retain and why.

Your choices and requests

Agency administrators can export workspace data as JSON, including eligible chat records, even while normal access is paused. If an export exceeds a supported limit, contact support for assistance with a complete export; we do not silently truncate it.

Email [email protected] from your sign-in address to request access, correction, deletion, or account closure. We verify your identity and authority over the relevant records. Some information may belong to your agency or must be retained for a documented obligation. We will explain the response and any available next steps. Rights under applicable law are not limited by this notice.

Pactlume is offered for business use and is not intended for children. Do not submit passwords, full payment-card details, bank credentials, or sensitive personal information unrelated to invoice coordination.

Changes and contact

We identify the effective date of this notice above. If we make a material change affecting existing customers, we will provide notice through the service or the agency’s contact email. Contact [email protected] about this notice or the handling of your information.