Privacy policy

EOIRTracker is run by Abundance App LLC (“we”, “us”). This policy covers go.eoirtracker.com, the service immigration law firms use to track their clients’ cases in immigration court, and the emails and text messages it sends.

It does not cover the EOIRTracker phone app for families, which has its own privacy policy, or our marketing site at www.eoirtracker.com.

Your firm decides which clients and cases to track and what to tell them. For your clients’ information, your firm is in charge of it (the “controller”) and we handle it for your firm, on its instructions, to provide the service (the “processor”). We do not sell it, use it for advertising, or use it for anything other than running EOIRTracker for you.

For the information about the people who use the service — your lawyers and staff — and about your firm’s account and billing, we are responsible for it ourselves.

If your firm needs a data processing agreement, write to support@eoirtracker.com and we will provide one.

About the people who use EOIRTracker

• Your name, email address and password. We store only a scrambled form (a hash) of the password, never the password itself.
• If you sign in with Google: your Google account’s email, name and an identifier Google gives us.
• If you turn on two-step sign-in: the secret for your authenticator app (encrypted), or the mobile number we text codes to, and one-time recovery codes (stored only as hashes).
• Your firm, your role in it, team invitations, and your notification settings, including any extra email addresses you add for alerts.
• Sign-in sessions: when you signed in and were last active. We do not store your IP address with your session.

About your firm’s cases and clients

• Each client’s A-Number and nationality, which are what immigration court’s public case system needs to find a case.
• What the court’s system shows for the case: the client’s name as the court has it, hearing dates, times and locations, the judge, the case status and decisions. We keep a history of what changed and when.
• What your firm adds: your own reference numbers, the client’s email address, mobile number and preferred language, and similar case details. You choose what to add.
• Cases imported from spreadsheets or synced from your case-management system, and a record of each import.

Client notices and confirmations

If your firm turns on client notices, we email (and, if your firm also turns on texts, text) your client when their case changes, with a link to confirm they have read it. We keep a copy of each notice and where it was sent. When a client confirms, we record the date and time, their IP address, their browser, and an approximate location (city, region and country) worked out from the IP address using a database on our own server — no outside service is asked. This goes into a confirmation certificate your firm can download as proof the client was told.

Help requests

When someone at your firm asks us a question through the help button, we keep the conversation, the page it was asked from, any case it is about, and any screenshots attached. Everyone at your firm can see your firm’s conversations.

Calendars and integrations

• If you connect Google Calendar or Outlook, we keep the access tokens the calendar gives us (encrypted) and the identifiers of the events we create.
• If your firm creates API credentials, we keep a scrambled form of the secret and a log of API requests, including the IP address they came from.

Billing

Your plan, its status and dates, and the identifiers Stripe gives us. Card details are entered on Stripe’s own pages; we never see or store your card number.

How you found us

If you arrive from an advertisement or a link with campaign details in it, we note that campaign information (the source, the ad-click identifier and the page you landed on) and save it with your firm when you sign up, so we know which marketing works.

Records we keep to run the service

• A log of each email we send (who it went to, the subject and whether it was delivered).
• Server logs of web requests, including IP addresses and browser details. The codes in sign-in, password-reset and confirmation links, and anything searched for, are blanked out in these logs.
• A record of each check we make on the court’s website and whether it worked.

We do not ask for Social Security numbers, immigration forms or case documents, and the service has nowhere to upload them.

To check a case, our software enters its A-Number and nationality into the public case-status website of the Executive Office for Immigration Review (EOIR), part of the US Department of Justice, the same way a person would, and reads back what it shows. That means EOIR receives those details each time we check.

We reach EOIR’s website through network providers that route our connections. Our connection to EOIR is encrypted end to end, so these providers can see that we are connecting to EOIR but not which case we are asking about.

If our own lookup of a case fails, we may ask a case-lookup service to look it up on EOIR’s website for us instead. That service receives the case’s A-Number and nationality, which it needs to find the case, and sends back what EOIR shows. We use it only when our own lookup fails.

We are not part of, or affiliated with, EOIR or any government agency, and we have no special access to court records.

• To check your cases, show you what changed, and alert your team by email.
• To send hearing reminders, add hearings to calendars you connect, and send notices to your clients when your firm turns that on.
• To run your account: signing in, two-step sign-in, team invitations, billing and plan limits.
• To answer your questions and fix problems.
• To keep the service secure: limiting repeated sign-in attempts, spotting automated sign-ups, and checking new passwords against lists of known leaked passwords (only the first few characters of a scrambled form of the password are sent, so the password itself never leaves our server).
• To understand how people find and sign up for EOIRTracker (see “Cookies and analytics”).

We do not sell personal information. We share it only with the companies that help us run the service, each for the job listed, and when the law requires it. Telling Meta about sign-ups (below) may count as “sharing” under California law; see California residents.

• Amazon Web Services — hosts the service, its database, backups, help-request screenshots and logs, in the United States.
• Postmark — sends our emails, including alerts to your team and notices to your clients.
• Twilio — sends text messages: two-step sign-in codes, and notices to your clients if your firm turns texts on. A text says what changed and links to the notice; it does not include the A-Number.
• Stripe — takes payments and keeps billing records. Stripe receives the account owner’s email address and your plan, never client or case information.
• Google — for Sign in with Google and Google Calendar if you use them, and for Google Analytics (see below).
• Microsoft — for Outlook Calendar if you connect it, and to host our support mailbox (support@eoirtracker.com, on Microsoft 365 provided through GoDaddy). That mailbox receives a copy of each help request: the message, your firm’s name, the name and email of the person who asked and the page they were on — never the A-Number.
• Anthropic — our staff use Claude, Anthropic’s AI assistant, to help read and answer help requests. It sees the message, any screenshots attached, your firm’s name, the name of the person who asked and the firm’s plan. If a case is attached it sees only the last three digits of the A-Number.
• Network providers — route our connections to EOIR’s website, as described above.
• A case-lookup service — used only when our own lookup of EOIR’s public website fails. It receives the A-Number and nationality to look the case up, as described above.
• Meta — to measure our advertising, we may tell Meta that a firm signed up, started a trial or paid, with the account owner’s email address in scrambled (hashed) form and Meta’s own browser identifiers. Never client or case information.

Calendar events we create carry the client’s name (or A-Number when there is no name), the A-Number, the judge, the hearing type and the court’s address, because that is what a hearing entry needs. They live in your calendar, under your calendar provider’s terms.

We may also disclose information if the law requires it, to protect the rights or safety of others, or as part of a sale or merger of our business, in which case this policy would continue to apply to it.

We use these cookies:

• session_id — keeps you signed in. It ends after 7 days without use, and after 30 days at most.
• Two-step sign-in cookies — hold a half-finished sign-in for 5 minutes, and remember a browser you trust for 30 days.
• Sign-in and calendar connection cookies — protect the hand-off to Google or Microsoft, and last 10 minutes.
• et_ft — set only when you arrive from a link with campaign details. It holds those details and the page you landed on for 90 days, across eoirtracker.com sites, so we can tell which campaign led to a sign-up.

Google Analytics runs only on our public pages: sign in, sign up, forgotten password, and these terms and privacy pages. It never runs once you are signed in, so it never sees your cases or clients. Even on those pages we send Google the page’s address without anything after it, so nothing typed into a link reaches Google. Google Analytics sets its own cookies on those pages.

Your browser also remembers, on your own device, which columns you chose for the cases table and any help message you have not yet sent.

• Every connection to EOIRTracker is encrypted (HTTPS).
• Each firm’s data is kept apart by the database itself, which only lets a request see the firm it belongs to.
• Passwords are stored only as strong one-way hashes. Two-step sign-in is available to everyone, and a firm owner can require it for the whole team.
• Our servers’ disks, our database backups and stored screenshots are encrypted. Calendar access tokens and two-step secrets are also encrypted by our own software.
• A-Numbers are kept out of our application logs and our analytics.

In the United States: the service and its database run on Amazon Web Services in the US West (Oregon) region. The companies listed above may process information in other places under their own safeguards.

• While your account is open, we keep your firm’s cases, their history, client notices and confirmations. This is deliberate: a confirmation is your firm’s proof that a client was told, so we never delete it automatically.
• Removing a case archives it. You can restore it with its history, so it is not deleted.
• When a subscription ends, your firm’s data stays until the account is closed.
• Help-request screenshots are deleted 180 days after the conversation’s last activity. The messages themselves are kept.
• Server logs are kept for 30 days.
• A case’s court information is shared by everyone who follows that case; once nobody follows it, we delete it and its history.

Closing your account

You can close your account from Settings. If you are the only member of your firm’s account, closing it permanently deletes the firm’s account with all its cases, notices, confirmations and check history, cancels its subscription, and removes the hearings we added to your calendar. If other people remain, the firm’s account and its data stay with them. A record of the emails we sent is kept.

Backups

We back up the database every day. Daily backups are kept for 35 days, weekly backups for about 13 months, and monthly backups for 10 years, so deleted information can remain in a backup until that backup expires. Backups are encrypted and used only to recover from a failure.

• You can see and correct your own details, and your firm’s cases and client details, in the app at any time.
• You can download your firm’s active cases as a spreadsheet (CSV), and download each client’s confirmation certificate.
• You can close your account from Settings, as described above.
• You can ask us for a copy of the information we hold about you, or to correct or delete it, by writing to support@eoirtracker.com. We will tell you what we can do and when. Depending on where you live, the law may give you further rights, and we will honor them.

If you are a client of a law firm that uses EOIRTracker, your firm controls your information. Please ask your firm first; we will help your firm answer you.

If you live in California, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (together “CCPA”), gives you the rights below, to the extent it applies to us. This section adds to the rest of this policy.

Your firm’s clients. For information about a law firm’s clients, we act as the firm’s service provider: we use it only to provide EOIRTracker to that firm, never sell or share it, and do not combine it with other information except as the CCPA allows. A client who wants to use these rights should contact their law firm; we will help the firm respond.

What we collect, in the CCPA’s categories

• Identifiers — name, email address, mobile number, IP address, account and Google identifiers, and A-Numbers.
• Customer records — the billing identifiers Stripe gives us (we never hold card numbers).
• Commercial information — your plan, trial and payment history.
• Internet or network activity — server logs, sign-in times, campaign details from the link you arrived by, and Google Analytics on our public pages.
• Approximate location — the city, region and country worked out from an IP address when a client confirms a notice. We do not collect precise location.
• Professional information — your firm and your role in it.
• Sensitive personal information — your account password (stored only as a hash), and information about a person’s immigration court case, which reveals their immigration status. We use it only to provide the service, so the right to limit its use does not need to be exercised.

We collect this from you, from your firm, from the court’s public website and from your browser, for the purposes in “How we use information”, and keep it as described in “How long we keep information”. We disclose each category to the companies listed in “Who we share information with”, for the job listed there.

Selling and sharing

We do not sell personal information, and we have not in the past 12 months. Telling Meta that a firm signed up, started a trial or paid, with the account owner’s scrambled email address, may be “sharing” for cross-context behavioral advertising under the CCPA, so we treat it as sharing. To opt out, email support@eoirtracker.com with the subject “Do not share my information” and we will stop reporting your firm’s events to Meta. We do not knowingly sell or share the information of anyone under 16.

Your rights

• Know and access — ask what personal information we hold about you, where it came from, why we use it and whom we disclose it to, and get a copy.
• Delete — ask us to delete it, subject to the exceptions the law allows (for example, records we must keep).
• Correct — ask us to correct inaccurate information.
• Opt out of sharing — as described above.
• No discrimination — we will not charge you more, give you a worse service or deny you the service for using these rights.

How to make a request

Email support@eoirtracker.com from the address on your account, saying which right you are using. We will confirm we received it within 10 business days and answer within 45 days; if we need longer, we will tell you why. We may ask for information to confirm it is you. Someone you authorize can make a request for you, with your written permission.

EOIRTracker is a service for law firms, not for children. A firm’s cases may concern children; that information is handled for the firm exactly as described above.

If we change this policy we will update the date at the top. If a change is significant, we will also email each firm’s account owner before it takes effect.

Abundance App LLC, operator of EOIRTracker. support@eoirtracker.com. Our terms of service also apply to your use of EOIRTracker.