Privacy Policy

1. Introduction

LegalCase ("we," "our," or "us") operates the website at getlegalcase.com and the LegalCase mobile application (collectively, the "Service"). This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you use our Service.

We understand that you may upload highly sensitive legal materials — including documents, photographs, videos, and audio recordings — in connection with legal proceedings. We take the privacy and security of this information seriously.

By using the Service, you agree to the collection and use of information as described in this Privacy Policy. If you do not agree, please do not use the Service.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Full name
• Email address
• Password (stored in hashed form)
• Account type (client or attorney)

2.2 Case Materials You Upload

Through the Service, you may upload:

• Documents (PDF, Word, and other file formats)
• Photographs and images
• Video recordings
• Audio recordings
• Descriptions, dates, and other metadata you provide for each upload

These materials are uploaded voluntarily by you for the purpose of organizing legal evidence and creating exhibit timelines.

2.3 Case and Timeline Data

We collect information you provide when organizing your case, including:

• Event dates, titles, and descriptions
• Categories and tags you assign to uploads
• Notes and annotations
• Attorney-client sharing relationships

2.4 Technical Information

When you access the Service, we automatically collect:

• Device type and operating system
• Browser type (for web access)
• IP address
• General location derived from IP address
• App version
• Date and time of access
• Crash logs and performance data

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service
• Create and manage your account
• Store and organize your uploaded case materials
• Enable shared access between clients and their attorneys
• Generate exhibit timelines and PDF exports
• Send transactional emails (account verification, password resets, important service updates)
• Monitor and improve the security and performance of the Service
• Respond to support requests
• Comply with legal obligations

We do not use your uploaded case materials for any purpose other than providing the Service to you. We do not use your data to train machine learning or artificial intelligence models. We do not use your data for advertising or marketing purposes.

4. How We Store and Protect Your Information

4.1 Infrastructure

All data is stored using Supabase, which runs on Amazon Web Services (AWS) infrastructure. Data is stored in the United States.

4.2 Security Measures

We implement the following safeguards to protect your information:

• All data is encrypted in transit using TLS/SSL encryption
• All data is encrypted at rest via Supabase's storage encryption (AES-256)
• Passwords are hashed and never stored in plain text
• Access to production systems is restricted to authorized personnel only
• Row-level security policies are enforced at the database level to ensure users can only access their own data and data explicitly shared with them

4.3 Shared Access Between Clients and Attorneys

When a client and attorney are linked on the Service, both parties can view case materials uploaded by either party within that shared case. This shared access is a core feature of the Service and is established only when both parties consent to the relationship. Attorneys can view, organize, and export materials uploaded by their clients, and vice versa.

5. How We Share Your Information

We do not sell, rent, or trade your personal information or uploaded materials to any third party.

We may share information only in the following limited circumstances:

• Service Providers: We use Supabase for database hosting and file storage. Supabase processes data on our behalf and is contractually obligated to protect it.
• Legal Requirements: We may disclose information if required to do so by law, court order, subpoena, or other legal process, or if we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.
• Business Transfers: If LegalCase is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

6. Data Retention

We retain your account information and uploaded materials for as long as your account is active.

6.1 Deletion of Individual Files and Events

When you delete an uploaded file, event, or other case material, it is immediately hidden from view and no longer accessible to you or your linked attorney. The underlying data is retained in a recoverable state for 30 days in case of accidental deletion. After 30 days, the data is permanently and irreversibly deleted from our storage systems. You may contact us to request immediate permanent deletion at any time during this 30-day window.

6.2 Account Deletion

If you choose to delete your account, your account will be deactivated immediately and your data will no longer be accessible. We retain your data for a 30-day grace period to allow you to recover your account if the deletion was unintentional. After the 30-day grace period, all personal information, uploaded materials, case data, and associated files are permanently deleted from our active systems.

6.3 Backup Retention

Our database is backed up daily for disaster recovery purposes. Database backup copies (which contain account information and case metadata, but not uploaded files such as documents, photos, videos, or audio) may persist for up to 7 days after permanent deletion. Uploaded files stored in our file storage system are not included in database backups and are permanently removed at the end of the applicable retention period described above.

6.4 Legal Holds

In limited circumstances, we may be required by law, regulation, or legal process to retain certain data beyond the periods described above. We will only do so when legally compelled and will notify you where permitted.

7. Your Rights and Choices

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Access: You may request a copy of the personal information we hold about you.
• Correction: You may request that we correct inaccurate information.
• Deletion: You may request that we delete your account and associated data.
• Data Portability: You may request an export of your data in a commonly used format.
• Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, please contact us at the email address listed in Section 12.

7.1 California Residents (CCPA/CPRA)

If you are a California resident, you have the right to:

• Know what personal information we collect, use, and disclose
• Request deletion of your personal information
• Opt out of the sale of personal information (we do not sell your information)
• Not be discriminated against for exercising your privacy rights

7.2 European Economic Area, United Kingdom, and Switzerland (GDPR)

If you are located in the EEA, UK, or Switzerland, our legal bases for processing your information are:

• Contract: Processing necessary to provide the Service you requested
• Legitimate Interests: Processing necessary for our legitimate business interests, such as improving security and preventing fraud
• Consent: Where you have given us specific consent

You have the additional right to lodge a complaint with your local data protection authority.

8. Children's Privacy

The Service is not intended for use by anyone under the age of 13 (or 16 in the EEA/UK). We do not knowingly collect personal information from children. If we become aware that we have collected information from a child under these ages, we will take steps to delete it promptly. If you believe a child has provided us with personal information, please contact us immediately.

9. Third-Party Links

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing any information.

10. Mobile Application

When you use the LegalCase mobile application, we may collect additional technical information specific to mobile devices, including device identifiers and push notification tokens (if you opt in to notifications). The app requests access to your device's camera, microphone, photo library, and file storage only when you choose to upload materials. You can manage these permissions through your device settings at any time.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by updating the "Last updated" date at the top of this policy and, where appropriate, by sending you a notification through the Service or via email.

Your continued use of the Service after any changes indicates your acceptance of the updated Privacy Policy.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Email: hello@getlegalcase.com

Website: https://www.getlegalcase.com