Privacy Policy

This Privacy Policy explains what Casezy (“Casezy,” “we,” “us,” or “our”) collects when you use the Casezy website, AI chat, text messaging (including iMessage and SMS/MMS where supported), reports, and attorney group-text introductions (the “Service”), why we collect it, who processes it, and the choices you have. It is written to match how the Service actually works today.

Casezy remains a participant in attorney group chats after sending the introduction. Later group messages are stored by Casezy and can be viewed by our team, even though the bot no longer replies. See Attorney introductions and group chats below before sharing sensitive information.

It should be read together with our Terms of Service. This Policy is a notice about our data practices, not blanket consent to every use of your information. Where the law requires consent, we will request it separately.

1. Who is responsible

Casezy is the controller of personal information collected through the Service. Third-party sites and services you use may be independently responsible for their own data practices. Attorneys you contact are independently responsible for their own use and retention of the information they receive; this Policy describes Casezy’s handling of that information.

Privacy requests: privacy@casezys.com

2. Information we collect

Account information

We and our account service providers collect the details needed to create and secure your account, such as your name, email address, phone number, profile image, account identifier, and registration and sign-in records. Passwords and sign-in credentials are handled by our authentication provider. If you use a third-party sign-in, that provider shares the account information you authorize.

When you accept the texting onboarding message, we use your sending phone number or Apple ID email address to find or create your Casezy account and associate your text conversations with it. Those conversations can be available on the website when you sign in with the same identifier.

Attorney applications

If you apply as an attorney, we collect your contact and practice details, licensing state or jurisdiction, bar number (including a Michigan P number where applicable), and any photo you submit. We use licensing details to check your licensure against the relevant state bar directory and review your application. We retain those details with an approved profile for administration; the bar number is not displayed in public lawyer recommendations.

Your name and area

On the website, we use your account name when available. Over text, we ask for your name and area. We save your automatically located or selected county and state with your account or guest profile and match it to the service areas on attorney profiles. You can update these details or skip location sharing; without an area, local lawyer matches are unavailable. You can ask legal questions on the website without providing either detail.

When you open web chat without a saved area, we request browser location automatically. Your browser may ask for permission. If allowed, we send the coordinates to the US Census Bureau’s geocoder to identify your county. ZIP lookups use Zippopotam.us and the Census geocoder. We do not save browser coordinates in your profile or conversation. A ZIP code you send over text remains part of the messaging record. Location permission is optional; declining does not interrupt chat. You can also select your county manually or retry “Use my location.”

Conversations

When you use Ask Casezy on the website or over text, we collect and store:

• The text of your questions and of the model’s replies
• A chat title derived from your first message, plus created and updated timestamps
• Whether a message finished successfully or ended in an error
• Citation metadata we attach to a reply (title, publisher, and link), when citations are present
• An account or guest identifier that associates the conversation with you

You choose what to type. The Service is built for legal questions, so you may include details about a dispute, housing, a business, or other sensitive facts. We do not require a government ID, payment card, or Social Security number to ask questions, and you should not submit those in a chat. If you pay for an attorney introduction, your card details go to Stripe, not to Casezy. We keep the amount, the attorney, the practice area, and Stripe’s payment references so we can make the introduction, pay the attorney their share, and handle refunds. Your case details and introduction note are not sent to Stripe.

Text messages and messaging records

In addition to your saved case conversations, we collect your phone number or Apple ID email address, incoming and outgoing message text, participant addresses, message and conversation identifiers, timestamps, reply relationships, and records used to process and deliver messages. We record your opt-out status and messages such as AGREE, STOP, START, and HELP. For website and texting acceptance, we keep the Terms and Privacy Policy versions presented, the acceptance notice, when and how you agreed, and the account, browser guest identifier, or text thread associated with that action. Text acceptance records also identify the message containing your agreement.

Your initial message and sender details are received and stored before you accept the onboarding message. We hold your first question so it can be answered after you agree; it is not sent to the answer model before that agreement. Messages you send after opting out may still be received and logged, even while automated conversational replies are disabled.

Reports we generate may be sent as PDF attachments. Messages and files may remain in the messaging history on Casezy’s systems and on participants’ devices. Sending a file does not guarantee the AI can read it or that it will become part of your saved web conversation.

Attorney introductions and group chats

When you request an introduction, we share your name if available, phone number or messaging address, and an introduction note with the selected attorney and the group participants. The note may be generated from facts in your case conversation, or reviewed and edited by you on the website. It can include sensitive details about your legal matter. Requesting an introduction authorizes that specific sharing; it does not subscribe you to attorney marketing.

We store the introduction note, selected attorney, requesting account, group identifiers, participant addresses, timestamps, and associated introduction status and billing records. We also receive and store subsequent messages sent by you, the attorney, or other participants while Casezy remains in the group. Our team can view those transcripts to administer introductions, provide support, and operate the Service. The bot’s silence after the introduction does not stop this collection or access.

Group messages are not routed to the Casezy assistant for automated legal answers. We do not promise that our team will read or respond to a particular message. A group including Casezy is not a private channel solely between you and your attorney, and our participation may affect confidentiality or attorney-client privilege. Arrange a separate channel directly with your attorney before sharing confidential information. Participants may save, copy, or forward messages, and their copies are outside Casezy’s control.

Guest identifiers

If you use the Service without an account, we set a random guest identifier so we can attach your one free conversation to that browser and enforce the guest limit. If you later sign in on the same browser, we may associate that guest conversation with your account.

Device storage

Your browser may keep a local copy of a guest conversation so you can return to it. That copy stays on your device until you clear site data.

Information collected automatically

Our hosting and authentication providers receive standard request data when you use the Service, such as IP address, browser and device information, pages requested, timestamps, and diagnostic logs.

We use Vercel Web Analytics to measure aggregate website traffic, including page views, referring sites, and browser and device categories. We group conversation pages under a general page name and remove query strings and conversation identifiers from tracked page URLs. We do not send your questions, answers, name, email, phone number, or account identifier as analytics event data. This measurement does not use advertising cookies or session recordings. We skip traffic measurement when your browser sends a Global Privacy Control or Do Not Track signal.

Internally, we also count account activity reported by our authentication provider and existing records of questions, assessments, and attorney introductions to understand use of the Service. These reports are available only to administrators.

3. Cookies we set

We set first-party cookies that are required to operate the Service. We do not set advertising or cross-site tracking cookies.

• Guest cookies — identify your browser and keep track of guest conversations, with a 30-day lifetime.
• Sign-in cookies — keep you signed in and protect your account. Our account provider manages these cookies.

You can block cookies in your browser. If you do, guest chat and sign-in may not work. Clearing cookies can start a new guest id; an older guest conversation may remain in our database but we may no longer be able to show it to you.

4. How we use information

We use the information above to:

• Provide the chat, keep history, and restore a session
• Create and maintain your account profile in our database
• Deliver texts and reports, associate messages with the right case, and use summaries of your other Casezy matters as context when continuing a conversation over text
• Send your conversation to model and retrieval providers so we can generate a reply
• Enforce the one-conversation guest limit
• Make the attorney introductions you request, maintain group-chat transcripts, and let our team administer introductions and review related communications for support and service operations
• Record messaging consent and preferences and honor requests to stop or resume automated messages
• Secure the Service, debug failures, and prevent abuse
• Respond to your requests and meet legal obligations

We do not use your conversations to train a Casezy-owned model. We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

The statement about a Casezy-owned model does not mean that information never leaves Casezy or that every provider immediately deletes it. AI, search, and hosting providers process information to provide their services and may retain it for security, abuse prevention, or other purposes under the terms and settings applicable to our use of them. We do not promise zero retention or that all provider training uses are disabled. Avoid sharing information that is unnecessary to your question.

Mobile information and messaging consent

We do not sell, rent, or share your mobile number, messaging address, text-message opt-in data, or consent records with third parties or affiliates for their marketing or promotional purposes. We do not transfer your messaging consent to attorneys. These restrictions apply to the disclosures described in this Policy.

We use service providers to deliver and support messaging, accounts, storage, and AI features as described below. We also share your contact details and introduction note with an attorney when you ask us to make that introduction. Those disclosures support the service you request and do not authorize unrelated promotional messages.

5. Who we share information with

We use the following service providers to operate Casezy. The information they process depends on the features you use and their role in providing the Service:

• Clerk — account registration, sign-in, and authentication using your account and contact information.
• MongoDB — storage of account information, conversations, messaging preferences, and introduction records, including group-chat transcripts.
• Vercel — application hosting and access to AI services, processing requests, relevant conversation content, and operational logs.
• Google and xAI — AI processing of questions, relevant conversation history, case summaries, reports, and source materials to support responses and introductions.
• Pinecone — information retrieval using data derived from your question to find relevant legal sources.
• Exa — web search and retrieval through Vercel’s AI services. Search queries can contain details derived from your question so we can find relevant sources.
• Apple and applicable mobile carriers — delivery of direct texts, group messages, and attachments, including contact and delivery information.
• Cloudflare — network and security services that process traffic supporting message delivery, and R2 storage of attorney profile photos. Approved profile photos can be publicly displayed.
• Stripe — payment, customer, and transaction information for client introduction payments, attorney memberships, and attorney payout accounts. Stripe receives the attorney and practice area for an introduction, not your case details.

When you request an attorney introduction, we share information with the selected attorney and group participants as described in Section 2. Attorneys are responsible for their own handling of the information they receive.

Providers may change as the Service evolves. We may disclose information when required by law, to protect the Service or users, or in connection with a merger, acquisition, or sale of assets, subject to applicable law and the protections in this Policy, including the restrictions on mobile information and messaging consent.

6. How long we keep information

Retention depends on the purpose of the record, whether you still use the Service, deletion requests, and applicable legal requirements. We consider whether information is needed for an active conversation, introduction, payment, support request, security investigation, or dispute. A need to retain a payment or consent record does not by itself require keeping an entire conversation.

Account profile copies, stored chats, text-message events, group-chat transcripts, and introduction records do not currently have an automatic expiry in our database. They remain until we act on a deletion request or remove them in the ordinary course of operating or closing the Service. Messaging systems and providers may retain separate copies and attachments.

Sending STOP, starting a new case, leaving a group, or deleting a message from your own device does not erase Casezy’s existing records. We may retain limited records needed to honor an opt-out, establish consent, meet legal obligations, prevent abuse, or resolve disputes, subject to applicable law. We cannot delete copies kept by an attorney, another participant, or their messaging provider on your behalf.

Guest cookies expire after 30 days. A guest conversation may still exist in the database after the cookie expires. Hosting and authentication logs are kept for the period those providers retain them.

You can delete a saved chat through the website’s chat-history controls. That removes the chat and its messages from our chat database. It does not erase separate text-message events, reports, attorney group transcripts, payment records, or copies on other devices. Contact us for a broader deletion request. Deletion from active systems may not immediately remove copies in provider backups, which follow the provider’s retention and deletion processes.

Deleting your account through the account settings stops sign-in with that account. It does not by itself erase chats stored in our database. Email privacy@casezys.com if you want that history deleted.

7. Your choices and rights

You can decline to create an account and use only the website’s guest conversation, or stop using the Service. Texting requires the account onboarding described above. You can clear cookies and local storage in your browser. You can manage your profile details in the account menu when you are signed in.

Reply STOP in your direct Casezy conversation to stop automated conversational messages; reply START there to resume or HELP for assistance. You can also email legal@casezys.com for messaging help or an opt-out request. STOP is a convenient option; you may use other reasonable means to clearly ask us to stop, including a direct message such as “please stop texting me.” Commands inside attorney groups do not control the assistant. STOP does not stop other participants’ messages or Casezy’s receipt and storage of messages in an existing group. To continue without Casezy receiving new messages, arrange a separate conversation with the attorney that does not include Casezy.

Depending on where you live, you may have the right to request access, correction, deletion, or a copy of personal information we hold, to appeal a denial, and to lodge a complaint with a supervisory authority. We will not discriminate against you for exercising those rights. To make a request, email privacy@casezys.com from the address associated with your account when possible. For a texting-only account, identify the phone number or Apple ID email address you used and whether your request includes direct texts, reports, or attorney group chats. Do not send a password or sign-in code. We may need to verify your identity before acting. We will explain any applicable limits on deletion or retention when we respond; requests about an attorney’s separate records should also be directed to that attorney.

If you are in the European Economic Area, United Kingdom, or a similar jurisdiction, we process information as needed to provide the Service you request (contract), to operate and secure the Service (legitimate interests), and where required by law. Because we do not use non-essential tracking cookies, we do not currently seek cookie consent for analytics or ads.

If you are a California resident, the categories of personal information we collect are identifiers (such as phone number, email, messaging address, account or guest identifier, and IP address), internet and electronic activity (pages and API calls, conversation content, messaging metadata, and consent records), and information you choose to include in a question or group message. We collect them from you, your device, group participants, our account and messaging providers, and our hosting logs. We use them for the purposes in Section 4. We do not sell personal information or share it for cross-context behavioral advertising. You may request access, deletion, or correction as described above. You may use an authorized agent if the request includes proof of authorization and we can verify you.

8. Children

The Service is for users 18 and older. We do not knowingly collect personal information from children. If you believe a child has used the Service, contact privacy@casezys.com and we will delete the information we can identify.

9. Security

We use safeguards designed to protect your information, including access controls and secure connections where supported. No method of transmission or storage is completely secure. You should avoid putting highly sensitive identifiers into a chat.

Encryption provided by a messaging service does not prevent Casezy from accessing messages delivered to its account or device. Texts, reports, and group messages can also appear in notifications, on linked devices, or in device backups. A message becoming readable by Casezy or another group participant is part of delivering it, not a promise that it stays private between you and an attorney.

10. International users

The Service is operated from the United States. If you use it from another country, you understand that your information will be processed in the United States and in other locations where our providers run, which may have different data-protection rules than your home country.

11. Changes

We may update this Policy when the Service or the law changes. The “Effective” date at the top will change when we do. For material changes, we will provide a prominent notice in the Service or contact you using available account details before the change takes effect where required by law. We will obtain consent when required, including before using previously collected information in a materially different way that requires consent. Posting a revised Policy or your continued use alone does not supply that consent or waive your privacy rights.

12. Contact

Privacy: privacy@casezys.com
Terms and other legal: legal@casezys.com