Client PortalCarlisle Client Portal privacy notice
Effective September 16, 2026. This notice describes the private staff workspace, including its optional Google Drive connection. Individually approved finance-only viewers may access their assigned client’s financial planning section; other client features remain unavailable.
Information used
When you sign in with Google, Clerk receives basic identity information such as your Google account identifier, name, email address and profile picture if available. Authentication and hosting services process session and security information, which can include device/browser details and IP addresses.
The workspace stores approved user identities, roles, client/task permissions, work records, notes, document references, internal reports and activity history. Access activity includes verified sign-in session dates and portal/financial-section visits, visible only to the firm owner. Repeated visits are grouped; approved first-visit alerts are shown to the owner. No IP addresses or device fingerprints are stored in this access log.
Purpose and providers
We use this information to identify approved users, enforce access, maintain work continuity and investigate security or access problems. Clerk provides authentication. Cloudflare hosts the application and database. Google provides Google sign-in and, when separately connected, Drive file storage.
Optional Google Drive connection
The owner may separately authorize limited per-file Drive access. This allows the portal to create upload folders and files, and read or manage files created by or explicitly selected for the app. It does not request Gmail access or unrestricted access to the whole Drive. Uploads are stored in Drive; the portal stores file references and related work records, and temporarily transfers file contents for uploads/downloads. Connecting Drive does not automatically share files with staff or clients. Existing Drive sharing permissions continue to apply to files opened directly in Google.
Connection credentials are stored encrypted. Google identity and Drive data accessed through this connection are used to provide the workspace features, not sold, used for advertising, or used by this workspace to train AI models. This notice does not describe separate tools or services a user may independently choose to use.
Sessions, retention and requests
Sign-in uses cookies and session information. Signing out ends the portal session. You may revoke the app’s Google authorization in your Google Account settings; this does not automatically delete files already stored in Drive.
Deactivating access does not automatically delete historical work or audit records. Contact us to request access correction, account removal or a review of retained information. Requests are reviewed in light of security needs and applicable client-record obligations. The portal does not currently offer automatic account-data deletion. Uploaded files are not automatically malware-scanned.
Contact
For privacy or access questions, contact Avi at avi@carlislecfo.com.