Privacy Policy

CaseSync ("we," "our," or "us") is committed to protecting the privacy and security of information entrusted to us by our customers, particularly legal professionals whose work demands the highest standards of confidentiality. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you use the CaseSync file synchronization platform and related services (collectively, the "Service").

By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this policy, please do not access or use the Service.

1. Information We Collect

1.1 Account Information

When you register for the Service or contact us, we may collect:

• Name and professional title
• Work email address and phone number
• Law firm name, size, and practice area
• Billing and payment information

1.2 Integration Credentials

To provide the file synchronization service, we securely store authentication tokens (OAuth tokens) that allow CaseSync to connect to your Filevine account and your chosen cloud storage provider (e.g., Dropbox, Google Drive, Amazon S3, Box, or OneDrive). We do not store your passwords for these third-party services.

1.3 Synchronization Metadata

During the synchronization process, we collect and store metadata necessary to maintain accurate file mappings between Filevine and your cloud storage provider. This includes:

• File and folder names, paths, and identifiers
• File size, type, and modification timestamps
• Synchronization status and event logs
• Case and project identifiers from Filevine

1.4 Document Contents

When synchronizing files between Filevine and your cloud storage provider, document contents pass through our system in transit. No document contents are permanently stored on our servers. Files are processed in memory during the synchronization operation and are not retained after the transfer is complete.

1.5 Usage and Analytics Data

We automatically collect certain information when you use the Service, including:

• Browser type, device information, and IP address
• Pages visited and features used within the Service
• Synchronization volume and performance metrics
• Error logs and diagnostic data

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the file synchronization service
• Authenticate your accounts with Filevine and cloud storage providers
• Monitor synchronization health and resolve errors
• Process billing and manage your subscription
• Communicate with you about your account, service updates, and support requests
• Improve the Service through aggregated, de-identified usage analytics
• Detect, prevent, and address technical issues or security threats
• Comply with legal obligations

3. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information. We may share information only in the following circumstances:

3.1 Third-Party Service Providers

We share information with trusted service providers who assist us in operating the Service, including cloud infrastructure providers (Amazon Web Services), payment processors, and analytics services. These providers are contractually obligated to protect your information and use it only as directed by us.

3.2 Integration Partners

By connecting your Filevine and cloud storage accounts, you authorize CaseSync to transmit data between these services on your behalf. Each integration partner's use of your data is governed by their own privacy policies.

3.3 Legal Requirements

We may disclose your information if required to do so by law or in response to valid legal process, such as a court order or subpoena. We will make reasonable efforts to notify you of such a request unless prohibited by law.

3.4 Business Transfers

In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal information.

4. Data Security

We implement industry-standard security measures to protect your information, including:

• Encryption of data in transit using TLS 1.2 or higher
• Encryption of stored credentials and authentication tokens at rest
• Role-based access controls for internal systems
• Regular security assessments and monitoring
• Isolated, per-customer synchronization environments

While we strive to protect your information, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security but are committed to promptly addressing any security incidents.

5. Confidentiality of Legal Materials

We understand that our customers handle privileged and confidential legal materials. CaseSync is designed to facilitate file synchronization without accessing, analyzing, or retaining the contents of your documents. Our system processes files solely for the purpose of transferring them between your connected services.

We do not review, index, or mine the content of synchronized files. Our personnel do not access customer files except when explicitly authorized by you for troubleshooting purposes.

6. Data Retention

We retain your account information and synchronization metadata for the duration of your active subscription and for a reasonable period thereafter to fulfill legal, accounting, or reporting requirements.

Upon account termination, we will delete or anonymize your data within 90 days, except where retention is required by law. You may request earlier deletion of your data by contacting us.

Synchronization logs and error records are retained for up to 12 months for troubleshooting and service improvement purposes, after which they are automatically purged.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate or incomplete information
• Request deletion of your personal information
• Object to or restrict the processing of your information
• Request a portable copy of your data
• Withdraw consent at any time (where processing is based on consent)

To exercise any of these rights, please contact us using the information provided below. We will respond to your request within 30 days or as required by applicable law.

8. Cookies and Tracking Technologies

Our website and Service may use cookies and similar tracking technologies to maintain session state, remember preferences, and analyze usage patterns. You can control cookie settings through your browser preferences. Disabling cookies may limit certain features of the Service.

9. Children's Privacy

The Service is designed for use by legal professionals and is not directed at individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child, we will take steps to delete that information promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will notify you of material changes by posting the updated policy on our website and updating the "Last updated" date above. Your continued use of the Service after any changes constitutes your acceptance of the revised policy.

11. Contact Us

If you have questions or concerns about this Privacy Policy, our data practices, or your rights, please contact us: