Legal
Privacy Policy
Last updated: April 16, 2026
This policy describes how Caseflow handles data for investigators, lawyers, and professional teams using the platform.
On This Page
1. Scope of This Policy
This Privacy Policy explains how Caseflow collects, uses, stores, and shares information when you access or use the Caseflow web application, installable app experience, related collaboration features, and support channels.
This policy applies to account holders, workspace members, invited collaborators, assignees, and other authorized users of Caseflow.
2. Information We Collect
We may collect the following categories of data:
- Account Data: name, email address, organization details, profile details, authentication identifiers, and account settings.
- Workspace Content: case records, tasks, task reports, contacts, invoices, vendor bills, inheritance records, generated documents, uploaded files, notes, workflow metadata, and documents processed through AI co-pilot and document intelligence features.
- Collaboration and Sharing Data: case invitations, access grants, assigned tasks, shared document scopes, shared task scopes, audit history, and related permission metadata.
- Community and Communication Data: community profile details, connection requests, posts, comments, direct messages, support tickets, support replies, and support attachments.
- Billing and Subscription Data: plan selection, billing cycle, storage add-ons, customer and subscription identifiers, invoice metadata, and payment workflow status needed to operate billing features.
- Operational and Technical Data: activity logs, timestamps, usage patterns, reminder settings, browser and device technical information, and app-state data such as local preferences, install state, and cached assets used to operate the service.
3. How We Use Information
We use data to:
- Provide and maintain Caseflow services.
- Authenticate users and protect account security.
- Process case, document, inheritance, reporting, reminder, billing, and workflow operations, including AI indexing and document intelligence processing.
- Enable collaboration, case sharing, task assignments, community interactions, and support workflows.
- Operate subscription billing, storage management, and payment-related account controls.
- Support product reliability, troubleshooting, and abuse prevention.
- Communicate service updates, policy notices, and account messages.
- Comply with legal, regulatory, and contractual obligations.
4. Legal Bases for Processing
Depending on your location, our legal bases may include performance of a contract, legitimate interests, compliance with legal obligations, and consent where required by law.
6. Billing and Payment Processing
Paid subscriptions, billing-cycle changes, extra-storage add-ons, and billing portal functions may be provided through third-party payment infrastructure.
Caseflow may store subscription, customer, checkout, invoice, and payment-status metadata needed to manage your account. Payment card details are generally processed by the payment provider rather than stored directly by Caseflow.
7. International Data Transfers
If data is transferred across borders, we use appropriate safeguards required under applicable law, which may include contractual protections and operational security controls.
8. Security Measures
We apply reasonable technical, organizational, and administrative safeguards to protect data against unauthorized access, misuse, loss, or alteration, including role-based workspace access and permission-controlled sharing workflows.
No system is completely secure; users should also maintain strong account credentials, review collaboration permissions carefully, and secure devices used to access installed or browser-based versions of the service.
9. Data Retention
We retain information while accounts remain active and for additional periods as needed for legal, compliance, audit, security, backup, billing, support, and dispute-resolution purposes.
You may request deletion through support, subject to lawful retention obligations.
10. Your Privacy Rights
Depending on applicable law, you may have rights to:
- Access and receive a copy of your personal data.
- Correct inaccurate personal data.
- Request deletion of personal data.
- Object to or restrict certain processing activities.
- Request data portability where available.
Requests may require identity verification and may be limited by legal requirements.
11. Children and Minors
Caseflow is intended for professional users and is not directed to children. If you believe a minor has provided personal data, contact us so we can review and take appropriate action.
12. Policy Updates
We may update this Privacy Policy from time to time. Material updates will be reflected by revising the Last updated date and, where appropriate, providing additional notice.
13. Contact
For privacy questions or rights requests, contact Caseflow via the in-app Support Center or the workspace support page.