Privacy Policy

1. Information We Collect

We collect the following types of information when you use Caselegis:

• Account information: name, email address, password (hashed), and optional professional details (bar state, practice area, role, organization) that you provide during registration.
• Usage data: search queries, search history, bookmarked cases, and feature usage patterns to improve the Service.
• Technical data: IP address, browser type, device information, and access timestamps for security and performance purposes.

2. How We Use Your Information

We use the information we collect to:

• Provide and maintain the Service, including search functionality and research tools
• Personalize your experience, such as showing your search history and bookmarks
• Process subscription payments and manage your account
• Send service-related communications (account verification, password resets, important updates)
• Analyze usage patterns to improve the Service and develop new features
• Detect and prevent fraud, abuse, and security incidents

3. What We Do Not Do

We are committed to respecting your privacy. We do not:

• Sell, rent, or share your personal information with third parties for advertising
• Use your search queries or research activity to train AI models
• Display targeted advertising based on your search behavior
• Share your data with other users without your explicit consent

4. Data Storage and Security

Your data is stored on secure servers with encryption in transit (TLS 1.2+) and at rest (AES-256). Passwords are hashed using bcrypt and are never stored in plain text. We implement access controls, regular security assessments, and monitoring to protect your information. For more details, see our Security page.

5. Data Retention

We retain your account information for as long as your account is active. Search history and usage data are retained to provide the Service features you expect (such as search history and bookmarks). If you delete your account, we will remove your personal data within 30 days, except where retention is required by law.

6. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate information
• Request deletion of your account and personal data
• Export your data (bookmarks, search history, account information)
• Opt out of non-essential communications

To exercise any of these rights, contact us at hello@caselegis.com.

7. Cookies and Tracking

Caselegis uses essential cookies for authentication and session management. We do not use third-party tracking cookies or advertising pixels. We may use basic analytics to understand aggregate usage patterns, but this data is not tied to individual users or shared with third parties.

8. Third-Party Services

We use the following third-party services to operate Caselegis:

• Google OAuth: if you choose to sign in with Google, we receive your name and email address from Google. We do not access any other Google account data.
• AI services: when you use AI-powered features (case summaries, brief generation), the relevant case text is sent to our AI provider for processing. This data is not retained by the AI provider for training purposes.

9. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to request deletion, and the right to opt out of the sale of personal information. We do not sell personal information. To exercise your CCPA rights, contact us at hello@caselegis.com.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on the Service or by sending you an email. Your continued use of the Service after changes are posted constitutes your acceptance of the updated policy.

11. Contact

If you have questions about this Privacy Policy or how we handle your data, please contact us at hello@caselegis.com.