Terms of Service.

These Terms of Service (the “Terms”) are a binding agreement between the customer that opens an account (“you,” “your,” or the “agency”) and RMH Websites, the United States business operated by Ryan Huffman that owns and operates Client Atrium (“Client Atrium,” “we,” “us”). They govern access to and use of the Client Atrium application at www.clientatrium.app and the related services we provide (together, the “Service”). These Terms are linked at account creation. By creating an account or using the Service, you agree to them, and your acceptance is recorded together with the version of the Terms you accepted.

The Service is offered for business use. You must be at least 18 years old to use it, and if you accept these Terms on behalf of a company, you represent that you have authority to bind that company.

The marketing website at clientatrium.com describes the product; these Terms and the Privacy Policy are the agreement. If the website and these Terms ever appear to disagree, these Terms control, and we would like to hear about the disagreement so we can fix the website.

Two kinds of people use the Service. Agencies are our customers: they open accounts, choose plans, pay any fees, and control their workspaces. Client users are the people an agency invites into a client workspace. Client users are not our customers; they use the Service under the agency’s account and at the agency’s direction.

Agency team members sign in with passwords. You are responsible for keeping those credentials confidential and for all activity under your account, and you agree to tell us promptly at security@clientatrium.com if you believe your account has been accessed without authorization. Client users are invited by email and set their own password on first sign-in. A client user’s access is scoped to their own workspace.

Agencies decide who to invite, what those people can see, and when access should end, and are responsible for keeping those decisions current.

“Content” means everything you and your client users store in the Service: messages, files, project records, contracts, signature records, and the personal data inside them. You and your client users retain all ownership of Content. You grant us a limited license to host, process, transmit, back up, and display Content solely as needed to provide, secure, and support the Service. We claim no other rights in it, and we do not use Content to train AI models.

For Content inside client workspaces, the agency decides why and how that data is processed. In data protection terms, the agency is the data controller (or the “business” under United States state privacy laws) and Client Atrium is a processor and service provider, acting on the agency’s instructions as expressed through the Service’s settings and features. For the account and billing data agencies give us directly, we are the controller. The Privacy Policy describes both roles in detail.

You are responsible for having the legal right to upload and process the data you bring into the Service, including your clients’ personal data, and for meeting your own privacy obligations to your clients.

As of the effective date above, the plans are:

• Free, $0. 1 seat, 2 client workspaces, 5 GB storage, 20 GB bandwidth a month, 25 MB per file with video up to 250 MB, and 3 e-sign documents a month. White-label is not included, so client workspaces show Client Atrium branding, and AI features are not available.
• Studio, $99 per month. 3 seats included.
• Agency, $249 per month. 10 seats included.
• Scale, $449 per month. 25 seats included.

Every paid plan includes unlimited client workspaces and client users. Extra seats are $25 per month each on any paid plan. Annual billing is two months free: you pay for ten months and receive twelve. A seat is a member of your team; clients and client users never count as seats and never affect your bill.

Each plan carries the storage, bandwidth, and file-size limits published on the pricing page. The limits published for your plan when you purchase it apply to your subscription, and we will notify you before reducing them.

New accounts begin with a 60-day trial with all paid features enabled. No payment method is required to start or run the trial, which also means we cannot charge you when it ends.

When a trial expires without an upgrade, the account downgrades automatically to the Free plan. Nothing is deleted. If the account has more than 2 client workspaces, the workspaces you already have keep working; you cannot create additional client workspaces until the account is back within the Free plan limit or upgraded. Features that belong to paid plans, including white-label branding and the AI helpers, stop applying. The same rules apply when a paid subscription downgrades to Free for any reason.

Payments are processed by Stripe. We never store full card numbers; Stripe holds your payment details under its own terms and safeguards.

Paid subscriptions renew automatically, monthly or annually, until cancelled. Cancellation is self-serve in your account settings, with no call and no retention flow, and takes effect at the end of the current billing period. You keep full access until then, and no further charges occur after cancellation. We do not offer pro-rata refunds for partial billing periods. We believe this is fair because cancellation always stops future charges, the trial requires no card, and the Free plan means an expired subscription never locks you out of your data.

If we change a plan’s price, we will give you at least 30 days’ notice by email, and the new price takes effect at your next renewal after that notice. If you do not accept the new price, cancel before the renewal and you will not be charged it.

Prices exclude any taxes that law requires us to collect, which are added at the applicable rate.

If an agency signs up using your referral code and starts a paid plan, we apply a credit worth two months of each account’s own plan to both accounts: theirs and yours. If you are not on a paid plan when the referral converts, your credit is set at the value of the plan they started and is held on your account until you upgrade. There is no limit on the number of agencies you may refer.

Credit is applied against future invoices for the Service. It is not cash, not a refund, and cannot be withdrawn, transferred, or redeemed for money. Credit has no value outside your account and is forfeited if the account is closed.

A referral does not earn credit where the referred account signs up on the Free plan, where a trial ends without a paid plan starting, where the code refers to the same agency (self referral), where the code does not match an existing workspace, or where a reward has already been granted for that account.

We may change, suspend, or end the referral program at any time. Changes apply going forward and do not remove credit already granted to your account. We may withhold or reverse credit obtained through fraudulent or artificial signups, including self-referral arrangements and coordinated rings, and repeated abuse is a breach of these Terms.

The Service’s e-signature features are designed to support electronic signatures under the United States ESIGN Act and the Uniform Electronic Transactions Act (UETA). Before signing, each signer is shown a disclosure and asked to consent to doing business electronically, and that consent is recorded. Every signing session produces a tamper-evident audit trail of timestamped events, and the completion certificate carries the document’s cryptographic fingerprint, so a copy of an executed document can be checked against its certificate and the audit record to establish that it did not change after signing.

We are not a law firm and do not provide legal advice. We do not warrant that any particular signed document is valid or enforceable in any jurisdiction; requirements vary by document type and place, and some categories of document require more than an electronic signature. The agreements signed through the Service are between their parties. We are not a party to them, and any dispute about a signed agreement is between the people who signed it.

You agree not to use the Service to:

• store or distribute content that is unlawful, or use the Service for an unlawful purpose;
• infringe anyone’s intellectual property, privacy, or publicity rights, including uploading client data you do not have the right to process;
• send spam or unsolicited bulk mail through the Service’s email features, including thread notifications and signature requests;
• misrepresent your identity, or anyone else’s, in a signature flow or anywhere else;
• distribute malware, probe or breach the Service’s security or tenant isolation, or interfere with other customers’ use;
• place deliberately excessive load on the infrastructure or resell access to the Service outside your own client relationships.

Commercial email deserves its own sentence. Under email laws such as CAN-SPAM, messages sent through the Service can be treated as sent by both the agency and the platform, which is why we make the obligation explicit: if you use the Service’s email features to send commercial messages, especially from your own domain and sending address on the Agency plan, you must comply with CAN-SPAM and any similar law that applies to you, including identifying yourself accurately as the sender and honoring opt-out requests.

We may suspend or restrict an account to protect the Service or other customers, as described in Section 15.

The Service hosts files and content submitted by its users. We respond to copyright infringement notices under the Digital Millennium Copyright Act, 17 U.S.C. § 512. Copyright notices should be sent to hello@clientatrium.com.

A valid notice must include:

• identification of the copyrighted work claimed to be infringed;
• identification of the allegedly infringing material and enough information for us to locate it;
• your contact information (name, address, email);
• a statement of good-faith belief that the use is not authorized by the copyright owner, its agent, or the law;
• a statement, under penalty of perjury, that the notice is accurate and that you are the owner or authorized to act for the owner;
• your physical or electronic signature.

On receiving a valid notice, we will remove or disable access to the identified material and notify the user who stored it. That user may send a counter-notice containing identification of the removed material, a statement under penalty of perjury of good-faith belief that the removal was a mistake or misidentification, consent to the jurisdiction of the federal court for their district (or, outside the United States, to the federal courts of New York), and their signature. Unless the original claimant tells us within roughly two weeks that it has filed a court action, we may restore the material.

We terminate the accounts of repeat infringers in appropriate circumstances.

Export is self-serve on every plan, including the Free plan. An agency admin can export any workspace at any time and receives an archive containing conversations as readable transcripts and structured records, the workspace’s files with a manifest, signed documents as PDFs with their completion certificates and signature log, and project, decision, people, and invoice records. The formats are open and readable without our software. Direct messages, and private channels the exporting admin cannot already access, are not included; very large file libraries are delivered as download links listed in the manifest. If you need an export we cannot produce this way, ask us and we will provide it within a reasonable period, and in any event no later than 30 days after a verified request.

Destructive actions in the Service archive rather than erase, so a mistaken click cannot destroy the history of a client relationship. When you want data genuinely removed, an agency admin can erase a client workspace from its manage page, which destroys its messages, files, projects, decisions, and invoices immediately and irreversibly, or you can delete the account. Erased data leaves backups as backup cycles complete. Signed agreements and their audit trails survive erasure, because electronic-signature law expects executed records to persist; where they exist, the workspace is emptied and retained as a record of those agreements rather than removed. We may also retain records that law requires us to keep, such as billing records, for the required period. The Privacy Policy covers retention in more detail.

We protect Content with the measures described in the Privacy Policy and on the Security page: encryption in transit and at rest, database-level tenant isolation verified by automated tests, and an archive-first design in which destructive actions archive rather than erase.

The database is backed up nightly and backups are encrypted. Backups exist so the Service can be restored after an infrastructure failure. They are not a general-purpose archive: we do not offer restoration of individual items an authorized user deleted, and backups cycle out within 90 days.

Self-serve export exists on every plan so that nothing in the Service is ever your only copy. For records whose loss you could not tolerate, executed agreements above all, export them and keep your own copies as they are created. If we confirm a breach of security affecting personal data, we will notify affected agency account owners as the Privacy Policy describes.

Subject to the section titled Limitation of liability, we are not liable for loss of Content caused by an authorized user’s own actions (including erasing a workspace or deleting an account), by suspension or termination carried out under these Terms, or by failures of third-party services described in the section titled Third-party services, except to the extent the loss results from our failure to operate the safeguards this section describes.

Your client relationships should not depend on our company’s lifespan, so we make a continuity commitment: if we permanently discontinue the Service, we will use commercially reasonable efforts to provide customers in good standing with a self-hostable build of the software sufficient to run their own instance, together with reasonable advance notice and a window to export data.

We phrase this as a reasonable-efforts commitment because a shutdown scenario cannot be fully specified in advance, not because we intend it loosely. The commitment covers the software needed to run your instance; it does not transfer our trademarks or the services of third-party providers, and it does not apply to accounts terminated for breach.

The Service includes optional AI features on certain paid plans, currently Agency and Scale. Each one is disabled by default and is enabled individually by the agency. Agencies can exclude specific clients from AI processing, and the Service honors that exclusion: content from excluded clients is not sent to AI providers.

When an agency enables an AI feature, the relevant content is routed through Vercel AI Gateway to third-party model providers to generate the output. We do not use your Content to train AI models. Processing by the model providers is governed by their terms. AI output can be wrong; review it before relying on it or sending it to a client.

The Service runs on third-party infrastructure: Supabase for database and file storage, Vercel for hosting, Bunny.net for media storage and delivery, Stripe for payments, Resend for transactional email, and, only when an agency enables AI features, model providers reached through Vercel AI Gateway. The full list, with roles and locations, is maintained in the Privacy Policy.

We choose these providers with care, but their services are theirs: their certifications apply to the layers they operate, and interruptions in their services can affect the Service.

Some features work by connecting an account you hold with a third party, such as connecting your Google account to power website analytics. You authorize those connections yourself through the third party’s own consent flow, you can revoke them at any time (in the Service or at the third party), and revoking disables the feature without affecting the rest of your account. Data received through a connection is handled as the Privacy Policy describes. The third party’s own terms govern your account with them, and the accuracy of what their service reports is theirs, not ours.

The Service, its software, and the content we publish about it belong to us or our licensors. These Terms give you the right to use the Service during your subscription and no other rights in it.

Your trademarks, logos, and branding remain yours. White-label features display your branding at your instruction, and that display gives us no rights in your marks beyond rendering them in your workspaces.

If you send us feedback or suggestions, we may use them to improve the Service without restriction or obligation to you.

You may stop using the Service at any time by cancelling your subscription and, if you wish, deleting your account.

We may suspend or terminate an account for material breach of these Terms. Where practical, we will give notice and a chance to cure first; we may act immediately when the breach creates security or legal risk for us, for other customers, or for client users.

Following termination, except where the law prevents it, the account retains 30 days of read-only access so you can export your Content. After that window we may delete the account’s data in line with Section 10 and the Privacy Policy.

Sections that by their nature should survive termination do survive, including Sections 3, 10, 16, 17, 18, 20, and 21.

The Service is provided “as is” and “as available.” To the fullest extent permitted by law, we disclaim all implied warranties, including merchantability, fitness for a particular purpose, and non-infringement, and we do not warrant that the Service will be uninterrupted or error-free.

One thing this section does not do: it does not withdraw the factual statements on our Security page about how the Service actually works. Those descriptions are accurate to the best of our knowledge, we keep them current, and we correct them if they stop being true.

To the fullest extent permitted by law, neither party is liable for indirect, incidental, special, consequential, or punitive damages, or for lost profits, revenue, goodwill, or data, arising out of or related to these Terms or the Service, even if advised of the possibility.

To the fullest extent permitted by law, our total liability arising out of or related to these Terms or the Service is capped at the fees you paid us in the 12 months before the event giving rise to the claim, or, if you are on the Free plan and have paid no fees in that period, at $100.

Nothing in this section limits liability that cannot be limited under applicable law.

You will defend and indemnify us against third-party claims, and the reasonable costs of them, to the extent arising from your Content, your breach of these Terms, or your violation of law, including a claim by your client that you lacked the right to upload or process their data. We will notify you promptly of any such claim and reasonably cooperate, at your expense, in its defense.

The Service will change over time as we add and improve features. We will not materially reduce the core functionality of your plan during a paid term without notice.

If we make a material change to these Terms, we will notify you at least 30 days before it takes effect, by email to your account address, in-app notice, or both. Continued use of the Service after the effective date constitutes acceptance; if you do not accept the change, cancel before it takes effect. Non-material changes, such as clarifications and corrections, may take effect when posted with an updated effective date.

These Terms are governed by the laws of the State of New York, United States, without regard to its conflict of laws rules.

Before either of us files a claim, we agree to try to resolve the dispute informally: the party raising it writes to the other (for us, hello@clientatrium.com) with a description of the issue, and both parties negotiate in good faith for at least 30 days.

If informal resolution fails, any dispute arising out of these Terms or the Service will be resolved exclusively in the state or federal courts located in New York, and both parties consent to their jurisdiction and venue. These Terms contain no arbitration clause and no class action waiver; we did not take those rights from you.

These Terms, together with the Privacy Policy and your plan selection, are the entire agreement between us about the Service. If a provision is found unenforceable, the rest remain in effect. A failure to enforce a provision is not a waiver of it. You may not assign these Terms without our consent, which we will not unreasonably withhold; we may assign them in connection with a merger or sale of the business, with notice to you. Neither party is liable for delay or failure caused by events beyond its reasonable control.

Notices to you go to your account email address. Notices to us go to hello@clientatrium.com. Security reports go to security@clientatrium.com. A person reads both inboxes and will answer.