Privacy Policy

Account signups. When you create your account we store your email address, a confirmation code and confirmation timestamp, the page or element you signed up from (the "source"), any UTM parameters on your visit (utm_source, utm_medium, utm_campaign), your IP address, and created/updated timestamps. That is the complete list; it is one database table.

Analytics. When enabled, we use a session analytics service (pages viewed, clicks, scrolling, and approximate location derived from IP) and a conversion tag that records when a signup is confirmed. Analytics never run inside your firm workspace. These help us understand which pages work and measure demand.

Firm workspace. When your firm uses CaseAgent, we store what its members put into the workspace: matters, uploaded documents and their text, deadlines, notes, drafts and other output the agent produces, the members and seats of the firm, and an activity log of who did what. This is your firm's data. We process it only to provide the service to your firm.

Billing. When a firm buys a plan, checkout is handled by our payment operator. We keep the plan, billing period, amounts paid, renewal date and the payment operator's customer and subscription references. We never see or store full card numbers.

Server logs. Like nearly every website, our server records standard request logs: IP address, requested URL, user agent, and timestamp. We use them for security and debugging.

The interactive demo on the homepage lets you select a fictional sample case or paste your own case summary. Pasted text is sent to our AI model provider solely to generate the demo output you see in your browser during that session. We do not store your pasted text, and we do not use it for anything other than producing that output.

Please do not paste real client-confidential information into the demo. It is a public marketing demo, not the product. Use the fictional sample files, or paste text you have the right to share and that identifies no real client.

We use a small number of service providers to run CaseAgent. Each processes data only as needed to provide its service, and we do not name them publicly for security reasons:

• Hosting provider: runs the servers and databases that hold the site and firm workspaces.
• AI model provider: processes demo input and, when a member runs the agent, the workspace text needed for that run, to generate the output. Content is not used to train its models.
• Payment operator: handles checkout, card details, renewals and invoices for paid plans.
• Email delivery provider: sends sign in codes, invitations, reminders and billing emails to the addresses you provide.
• Analytics and advertising measurement services (when enabled): website analytics and conversion measurement, as described in sections 09 and 10.

Our broader security and confidentiality stance for the product itself is described on the security page.

Account records are kept until you ask us to delete them or close your account. Unconfirmed signups may be deleted sooner. Firm workspace data is kept while the firm's account exists, so the firm can return to its matters; the firm owner can ask us to delete the workspace at any time. Billing records are kept as long as tax and accounting law requires. Server logs and analytics data are kept for short operational windows typical of those tools and then expire. Demo input is not stored, so there is nothing to retain.

You can ask us at any time what data we hold about you, ask us to correct it, or ask us to delete it (which also closes your account). Email [email protected] from the address in question and we'll handle it. Depending on where you live, laws such as the GDPR or CCPA may give you additional rights; we honor access and deletion requests regardless of jurisdiction.

The site sets a session cookie required for it to function (for example, protecting the signup form against cross-site request forgery). When analytics are enabled, the analytics service and the conversion tag set their own cookies or identifiers to distinguish sessions and record conversions. The advertising measurement described below sets one more first-party cookie.

We advertise on search engines. When you arrive from one of our ads, we keep the ad click identifier (such as gclid or msclkid), the campaign parameters and the page you landed on in a first-party cookie for up to 90 days, and store them with your signup, account and firm subscription, so we know which ads lead to signups and purchases. Public pages of this site load the conversion tags of those advertising platforms, which tell them when a signup or a purchase happens, with the plan price for a purchase. We send them no names, email addresses, matter data, documents or payment details, and we never load these tags in your private workspace or on pages whose address carries a private link or checkout reference. You can block these cookies in your browser settings.

This policy may change as we add features. It works together with our Terms of Service. We'll update the date at the top of this page whenever it does; material changes affecting account holders will be announced by email.

Questions about this policy or your data: [email protected]. More ways to reach us are on the contact page.