Privacy Policy

Last updated: February 2026

1. Introduction

CaseFill (“we”, “our”, or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our immigration case management platform.

2. Information We Collect

Personal Information

We may collect the following types of personal information:

  • Name, email address, and contact information
  • Immigration-related documents and data
  • Case information and legal documents
  • Payment and billing information
  • Usage data and analytics

3. How We Use Your Information

We use the collected information for:

  • Providing and maintaining our services
  • Processing immigration documents with AI assistance
  • Communicating with you about your cases
  • Improving our platform and services
  • Complying with legal obligations

4. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. This includes encryption, secure storage, and access controls.

5. Your Rights (GDPR)

Under GDPR, European Economic Area residents have the following rights:

  • Right to Access: Request a copy of your personal data
  • Right to Rectification: Request correction of inaccurate data
  • Right to Erasure: Request deletion of your data
  • Right to Data Portability: Receive your data in a portable format
  • Right to Object: Object to processing of your data
  • Right to Withdraw Consent: Withdraw consent at any time

To exercise these rights, visit your account settings or contact us at privacy@casefill.ai

6. California Privacy Rights (CCPA/CPRA)

California residents have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

  • Right to Know: Request information about the categories and specific pieces of personal information we have collected about you
  • Right to Delete: Request deletion of your personal information, subject to certain exceptions
  • Right to Correct: Request correction of inaccurate personal information
  • Right to Opt-Out: Opt out of the sale or sharing of your personal information (note: we do not sell personal information)
  • Right to Limit Use: Limit the use of sensitive personal information to purposes authorized by the CPRA
  • Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights

To exercise these rights, visit your account settings, email us at privacy@casefill.ai, or contact us at support@casefill.ai.

Categories of Personal Information Collected: We collect identifiers, professional information, commercial information, internet activity, and sensitive personal information as described in Section 2 above.

7. Data Retention

We retain your personal data for as long as necessary to provide our services and comply with legal obligations:

  • Account Data: Retained while your account is active and for 30 days after deletion request
  • Case Data: Retained for 7 years after case closure to comply with legal record-keeping requirements
  • Billing Records: Retained for 7 years for tax and accounting purposes
  • Audit Logs: Retained for 7 years per USCIS compliance requirements (8 CFR 103.2(b)(18))

You can request deletion of your account and associated data at any time through your account settings.

8. Third-Party Services (Sub-Processors)

We use third-party services to provide our platform. All sub-processors are bound by data processing agreements and maintain appropriate security measures:

ProviderPurposeLocation
SupabaseDatabase and storageUnited States
AnthropicAI document analysisUnited States
OpenAIAI document analysisUnited States
StripePayment processingUnited States
ResendEmail deliveryUnited States
VercelApplication hostingUnited States
SentryError monitoringUnited States

We will notify users of any material changes to our sub-processor list.

9. International Data Transfers

Your personal data may be transferred to and processed in countries outside your country of residence. For transfers outside the EEA, we rely on:

  • Standard Contractual Clauses approved by the European Commission
  • EU-US Data Privacy Framework certification (where applicable)
  • Binding Corporate Rules of our service providers

10. Contact Us

If you have any questions about this Privacy Policy, please contact us:

  • Email: privacy@casefill.ai
  • Address: CaseFill, Inc.