Privacy Notice
Effective October 26, 2026 ยท Version 1.0
This notice explains what information the S2MB apps collect and how it is used. It covers every app provided by S2MB Data Management ("S2MB", "we", "us"), the assumed business name (DBA) of Mario Fuller, registered in Texas. You are using ARTS, one of these apps.
The S2MB apps are:
- TIMS (Tracking Information Management System): manages clients and their cases, sponsors, payments and document requests.
- MET (Marketing Expense Tracker): manages vendors, cost centers and general ledger codes, routes expense requests for approval, and reports on spending.
- ARTS (Asset Retirement Transfer System): lets teams request, approve and track the retirement or transfer of equipment.
Who is responsible
S2MB runs these apps and is responsible for the personal information they collect (the "controller"). Questions about this notice go to the contact in "Contact us" below.
What we collect
In every app:
- Account information: your name, email address, role, password (stored only as a one-way hash), two-step verification settings, the version of the Terms of Use you accepted and when, and a record of sign-ins and account changes (date, time and IP address).
In TIMS:
- Client and case information: records that authorized users enter about clients and their cases, such as judgments, convictions and trial officials, and documents they upload.
- Sponsor information: sponsor contact details and the relationship to the client.
- Account statements: payments and balances recorded for sponsors and clients.
In MET:
- Vendor information: vendor names, contact and address details used to pay them. MET does not store vendor tax IDs or bank details.
- Expense records: check requests, expense proposals and travel expenses, with amounts, cost centers, general ledger codes and who requested and approved them.
- Employee information: details of the employees who request or approve expenses, or who travel, such as name and contact details.
In ARTS:
- Request information: who asked for an equipment retirement or transfer, their department and location, and who approved or denied it and when.
- Equipment information: details of the equipment, such as its type, asset tag, serial number and where it is going.
Why we use it
- To provide each app: in TIMS, case management, sponsor and client records, payment tracking and document requests; in MET, expense requests, approvals and spending reports; in ARTS, equipment requests, approvals, alerts and reports.
- To keep the apps secure: sign-in, access by role, two-step verification, lockout after failed attempts, and the audit log.
- To send email the apps need, such as account messages and approval alerts.
- To answer support requests.
We don't sell personal information, use it for advertising, or use it for profiling.
Who we share it with
- Companies that provide services to us and handle information on our behalf: our hosting provider and our email provider.
- When you choose a new password, we check it against known data breaches using the Have I Been Pwned service. Only the first 5 characters of a one-way (SHA-1) hash of the password are sent; the password itself never leaves the app.
- When the law requires it, for example a valid subpoena or court order.
How long we keep it
- Account information: while your account is active and for 7 years after it is closed.
- TIMS client and case, sponsor and account statement records: 7 years after the case is closed, unless the law requires longer.
- MET vendor and expense records: 7 years, unless the law requires longer.
- ARTS request and equipment records: 7 years after the request is closed.
- Sign-in and audit records: 7 years.
Cookies
The S2MB apps use only cookies that are strictly necessary: one keeps you signed in, one protects forms against forgery, and short-lived ones support two-step verification. We use no analytics, advertising or tracking cookies, so there is nothing to opt in to or out of.
Security
Connections to the S2MB apps use HTTPS. Access depends on your role, passwords are stored as one-way hashes, accounts lock after repeated failed sign-ins, some roles must use two-step verification, and sign-ins and account changes are logged. No system is completely secure; if you think your account has been misused, email us straight away.
Your requests
You can ask to see, correct or delete your personal information in any S2MB app by emailing support@s2mb.com. Tell us which app. We may need to confirm who you are first. Some records may need to be kept for legal reasons; if so, we'll tell you why.
People under 18
You must be 18 or older to hold an account in any S2MB app.
Changes to this notice
This notice is shared by all S2MB apps. If we change it, we'll post the new version here with a new date. If a change is significant, we'll ask you to review it when you next sign in to any S2MB app.
Contact us
S2MB Data Management
Email: support@s2mb.com