Privacy Policy

Last updated: March 13, 2026

CaseFill ("we," "us," or "our") operates the CaseFill web application and website. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

Information We Collect

We collect information you provide directly to us when you create an account, use our service, or contact us. This includes:

  • Account information such as your name, email address, phone number, firm name, and bar number
  • Billing information processed securely through Stripe (we do not store credit card numbers)
  • Matter and case data you enter into CaseFill, including party names, addresses, case numbers, and court information
  • Documents and forms you generate through the service
  • Communications you send to us, including support requests and feedback

How We Use Your Information

We use the information we collect to provide, maintain, and improve CaseFill, process transactions and send related information, respond to your comments and questions, and send you technical notices and updates. We do not sell your personal information to third parties.

Data Security

We implement appropriate technical and organizational measures to protect your data. All data is encrypted in transit using TLS and at rest. Our infrastructure is hosted on industry-standard cloud platforms with SOC 2 compliance. Access to client data is restricted to authorized personnel only.

Attorney-Client Privilege

We understand that information entered into CaseFill may be subject to attorney-client privilege. We treat all matter data and generated documents as confidential. We do not access, review, or share your case data except as necessary to provide technical support at your request or as required by law.

Data Retention

We retain your account and matter data for as long as your account is active. If you cancel your subscription, we retain your data for 90 days to allow for reactivation, after which it is permanently deleted. You may request immediate deletion of your data at any time by contacting us.

Multi-Tenancy and Data Isolation

CaseFill uses row-level security to ensure that each firm's data is completely isolated. No firm can access another firm's matters, contacts, documents, or any other data — not through the application, not through direct database queries, and not through API calls.

Third-Party Services

We use the following third-party services to operate CaseFill:

  • Supabase for database hosting and authentication
  • Stripe for payment processing
  • Vercel for application hosting

Each of these providers maintains their own privacy policies and security certifications. We select providers that meet or exceed industry standards for data protection.

Cookies

We use essential cookies to maintain your session and keep you logged in. We do not use advertising cookies or sell data to advertisers. We may use analytics cookies to understand how our service is used, which you can opt out of in your account settings.

Your Rights

You have the right to access, correct, or delete your personal information at any time. You may export your data or request a complete copy by contacting us. California residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected and the right to request deletion.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Continued use of CaseFill after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us through our contact page.