Last updated: 27 July 2026. Applies to US customers of Tallymail. Questions or data requests: help@tallymail.us.
Tallymail hosts customer data in the European Union (Ireland), on Supabase's eu-west-1 region. This applies to all Tallymail customers, including US law firms. We disclose this plainly because we believe you should be able to make an informed decision before signing up, not discover it in a data processing agreement after the fact. Full detail, including what protections apply and what this means for your state bar's cloud-computing guidance, is available in our data residency notice (full text below) and is also published as a standalone document for reference.
Your firm's data — email metadata, billable-time entries, matter records, and account information — is stored and processed on servers physically located in Ireland, operated by Supabase, our database infrastructure provider. We have not yet built a US hosting region. Every US state bar that has issued guidance on cloud computing for lawyers (including California, New York, Illinois, Texas, and Florida) has concluded that lawyers may ethically use cloud-based tools, provided the lawyer takes reasonable care and the provider takes reasonable security steps — none of the opinions we've reviewed require the provider's servers to be physically located in the United States. This is not legal advice; your firm's own ethics obligations are for your firm's own counsel to confirm.
If US-hosted data matters to your firm, tell us at help@tallymail.us — this feedback is what will determine whether and when we build a US hosting region.
If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, "CCPA"), gives you certain rights over your personal information. We describe those rights and how to exercise them below, regardless of whether Tallymail currently meets CCPA's applicability thresholds, because we believe in giving you this information either way.
Tallymail's core function requires reading matter-related email content in your connected inbox in order to classify it against your matter list and generate a billable-time entry. We collect only what's necessary for that function: sender/recipient metadata, timestamps, subject lines, and enough message content to support classification and time-entry generation. We do not read, store, or expose personal or non-billable email content beyond what's needed for this purpose, and we do not use your email content to train third-party AI models without your explicit consent.
Tallymail uses AI-assisted classification to match emails to matters and draft time-entry descriptions. We disclose this processing in full so that attorneys using Tallymail can make their own competence and confidentiality assessments under applicable rules of professional conduct (including, for US attorneys, the framework set out in ABA Formal Opinion 512 on generative AI tools). This disclosure is provided to support your firm's own compliance assessment — it is not a claim that Tallymail itself is "ABA-approved" or "certified," since Opinion 512 governs lawyer conduct, not vendor certification.
We do not sell your personal information. We share information only with service providers necessary to operate Tallymail (e.g., Supabase for hosting, Stripe for payment processing), each bound by their own data protection obligations, and only as necessary to provide the service to you.
Regardless of your state of residence, you may request: access to the personal information we hold about you, correction of inaccurate information, deletion of your personal information (subject to legal and contractual retention requirements), and export of your data in a portable format. To exercise any of these rights, email help@tallymail.us with your request — we will verify your identity before acting on any request involving personal or account data, and will respond within a reasonable time consistent with applicable law.
Tallymail uses encryption in transit and at rest, access controls limiting who can view customer data, and follows GDPR-standard data protection practices as a baseline across all customers regardless of location. A data processing agreement (DPA) is available to every US customer on request or automatically with a paid subscription.
[Full terms of service to be drafted and reviewed by counsel before publication — this is a placeholder summary only, not a complete or binding terms document.] Tallymail is provided on a subscription basis, billed monthly, with a 14-day free trial. You may cancel at any time; no long-term contract is required. Tallymail is provided by Regularis Legal Limited, a company registered in England and Wales, and these terms are intended to be read alongside a separate, fuller terms-of-service document to be finalized before public launch.
For any question about this notice, a data request, or anything else: help@tallymail.us.