Privacy Policy

CaseSignal LLC ("CaseSignal," "we," "us") provides an AI-powered client communication platform for attorneys practicing criminal defense, civil litigation, and family law. This Privacy Policy describes how we collect, use, and protect information when you use our service.

Who We Are

Information We Collect

Account information. Your name, email address, and firm details when you create an account. Authentication is handled by our identity provider; we never store your password.

Case and client information. The matters, client names, client email addresses, case events, and documents you add directly or import from a connected case management system. This is the information we use to draft client updates on your behalf.

Documents you upload. PDFs such as hearing notices, orders, and filings that you submit for analysis.

Billing information. Subscription status and billing history. Payment card details are collected and stored by Stripe. We never receive or store your full card number.

Usage information. Standard server logs and error reports used to operate and secure the service.

Client Confidentiality

We understand that information you place in CaseSignal may be subject to the attorney client privilege and to your professional duty of confidentiality. We do not sell your data, we do not share it with advertisers, and we do not use your case data, client data, or uploaded documents to train artificial intelligence models. Access to production data is limited to personnel who need it to operate or support the service.

You remain responsible for determining whether use of any cloud service, including this one, is consistent with your obligations under your state's rules of professional conduct.

Google Account Access

When you connect your Google account, we request a single permission, the ability to send mail on your behalf (the gmail.send scope). We do not read, store, index, or access your existing emails, contacts, calendar, or Drive files. We send mail only when you have reviewed a specific draft and clicked to approve it.

CaseSignal's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Case Management Integrations

If you connect a case management system such as Clio, we read the matters, contacts, calendar entries, and document metadata needed to keep your cases current and to draft updates when something changes. We request read access only. We do not write to, alter, or delete anything in your case management system. You can disconnect at any time, which revokes our access going forward.

How We Use Your Information

We use the information above to generate draft client updates for your review, to send the drafts you approve, to maintain the client-facing case tracker pages you choose to share, to process your subscription, and to provide support. We do not use it for any other purpose.

Service Providers

We rely on a small number of vendors to operate the service. Each receives only the information needed for its function, and each is bound by its own contractual and security obligations.

• Anthropic (Claude). Document text and case context are sent to generate drafts. Anthropic does not train its models on data submitted through its commercial API.
• Google. Delivery of the emails you approve.
• Clio. Case synchronization, only if you connect it.
• Stripe. Subscription billing and payment card handling.
• Clerk. Account authentication.
• Vercel. Application hosting.
• Upstash. Encrypted storage of your workspace data.

Data Security

All traffic is encrypted in transit using TLS. Stored data is encrypted at rest by our infrastructure providers. Each account's data is logically separated, so one firm's matters are never readable by another. Integration tokens are held server side and are never exposed to code running in the browser. Webhook deliveries from connected systems are cryptographically verified before they are processed.

Data Retention

We retain your account and case data for as long as your account is active. Integration tokens are retained only while the integration is connected and are deleted when you disconnect. If you close your account, you may request deletion of your data and we will delete it within 30 days, except where we are required to retain records to satisfy a legal or tax obligation.

Your Rights

You may request a copy of the personal information we hold about you, ask us to correct it, or ask us to delete it. Write to privacy@courtdatasolutions.com and we will respond within 30 days. Depending on where you live, you may have additional rights under laws such as the Virginia Consumer Data Protection Act.

Children

CaseSignal is a business tool and is not directed to anyone under 18. We do not knowingly collect information from children.

Changes to This Policy

If we make a material change to this policy, we will update the effective date above and notify account holders by email before the change takes effect.

Contact

Questions about privacy can be sent to privacy@courtdatasolutions.com or mailed to CaseSignal LLC, 245 S. Main Street, Rocky Mount, VA 24151.