Privacy Policy

1. Introduction

CaseFill (“we”, “our”, or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our immigration case management platform.

2. Information We Collect

Personal Information

We may collect the following types of personal information:

• Name, email address, and contact information
• Immigration-related documents and data
• Case information and legal documents
• Payment and billing information
• Usage data and analytics

3. How We Use Your Information

We use the collected information for:

• Providing and maintaining our services
• Processing immigration documents with AI assistance
• Communicating with you about your cases
• Improving our platform and services
• Complying with legal obligations

4. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. This includes encryption, secure storage, and access controls.

5. Your Rights (GDPR)

Under GDPR, European Economic Area residents have the following rights:

• Right to Access: Request a copy of your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your data
• Right to Data Portability: Receive your data in a portable format
• Right to Object: Object to processing of your data
• Right to Withdraw Consent: Withdraw consent at any time

To exercise these rights, visit your account settings or contact us at privacy@casefill.ai

6. California Privacy Rights (CCPA/CPRA)

California residents have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• Right to Know: Request information about the categories and specific pieces of personal information we have collected about you
• Right to Delete: Request deletion of your personal information, subject to certain exceptions
• Right to Correct: Request correction of inaccurate personal information
• Right to Opt-Out: Opt out of the sale or sharing of your personal information (note: we do not sell personal information)
• Right to Limit Use: Limit the use of sensitive personal information to purposes authorized by the CPRA
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights

To exercise these rights, visit your account settings, email us at privacy@casefill.ai, or contact us at support@casefill.ai.

Categories of Personal Information Collected: We collect identifiers, professional information, commercial information, internet activity, and sensitive personal information as described in Section 2 above.

7. Data Retention

We retain your personal data for as long as necessary to provide our services and comply with legal obligations:

• Account Data: Retained while your account is active and for 30 days after deletion request
• Case Data: Retained for 7 years after case closure to comply with legal record-keeping requirements
• Billing Records: Retained for 7 years for tax and accounting purposes
• Audit Logs: Retained for 7 years to support attorney record-keeping obligations and regulatory compliance

You can request deletion of your account and associated data at any time through your account settings.

8. Third-Party Services (Sub-Processors)

We use third-party services to provide our platform. All sub-processors are engaged under their published API terms and data-protection commitments, and maintain appropriate security measures. CaseFill is progressively executing formal Data Processing Agreements with each sub-processor; current status is available on request:

We will notify users of any material changes to our sub-processor list.

9. International Data Transfers

Your personal data may be transferred to and processed in countries outside your country of residence. All our sub-processors listed above are based in the United States. We take reasonable steps to ensure your data is treated securely and in accordance with this Privacy Policy, including:

• Using sub-processors that maintain industry-standard security certifications
• Ensuring data is encrypted in transit and at rest
• Limiting data access to authorized personnel only

If you are located in the EEA and have concerns about international data transfers, please contact us at privacy@casefill.ai.

10. Contact Us

If you have any questions about this Privacy Policy, please contact us:

• Email: support@casefill.ai
• CaseFill, Inc.