Privacy Policy

1. Who we are

CaseDiver ("we," "our," or "us") operates casediver.com and related services. We are the controller/operator of personal information described in this policy for the CaseDiver service. Contact us at [email protected].

2. Scope

This policy describes how we collect, use, disclose, and retain personal information when you visit casediver.com, browse the free caselaw database, create an account, upload documents, or otherwise interact with the service. It does not apply to information that is not personal information, to third-party sites you reach via links, or to data governed by a separate written agreement with your firm.

3. Information we collect

We collect the following categories of information:

• Account and contact information — name, email address, password (hashed), firm/organization, and messages you send to [email protected] or through in-product support.
• Content you provide — documents, uploads, matter metadata, prompts, and other material you submit for processing, indexing, or storage.
• Usage and device information — IP address, browser and device identifiers, pages viewed, search queries, timestamps, and similar telemetry.
• Cookies and similar technologies — strictly necessary cookies for sign-in and security, and, only with your consent, optional analytics and marketing cookies. See Section 9 and your cookie settings.
• Payment information — billing details processed by our payment provider. We do not store full payment card numbers on our servers.

We do not intentionally collect sensitive personal information and ask that you not upload it unless necessary to your matter and permitted by your professional obligations.

4. How we use information

We use personal information to:

• Provide, operate, and improve casediver.com, including the caselaw database and account features;
• Process, index, and analyze documents and queries you submit;
• Authenticate users, secure the service, and prevent fraud and abuse;
• Communicate with you about the service, support, and administrative notices;
• Comply with law, enforce our terms, and protect rights, safety, and property;
• With your consent where required, measure usage and improve the product via optional analytics and marketing cookies.

5. How we share information

We do not sell personal information and do not share personal information for cross-context behavioral advertising. We disclose personal information only as follows:

• Service providers — hosting, infrastructure, analytics (only with consent), payment processing, and communications providers bound by contract to use the information only on our behalf.
• Legal and safety — where we believe disclosure is necessary to comply with law, legal process, or to protect rights, safety, or the integrity of the service.
• Business transfers — in connection with a merger, acquisition, or sale of assets, subject to continuity of this policy.
• With your direction — when you instruct us to share with your firm, co-counsel, or other designees.

6. No sale or sharing

Under California law "sale" and "share" have specific meanings. We do not sell personal information, do not share it for cross-context behavioral advertising, and do not knowingly sell or share the personal information of persons under 16.

7. California privacy rights (CCPA/CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act as amended by the California Privacy Rights Act, subject to applicable exceptions:

• Right to know/access — the categories and specific pieces of personal information we have collected about you, sources, purposes, and categories of recipients.
• Right to delete — to request deletion of personal information we hold about you.
• Right to correct — to request correction of inaccurate personal information.
• Right to opt-out of sale/share — we do not sell or share personal information as defined by the CCPA/CPRA, so there is no opt-out to exercise. If this changes we will provide a "Do Not Sell or Share My Personal Information" link.
• Right to limit sensitive data use — we do not use or disclose sensitive personal information for inferring characteristics or other restricted purposes.
• Right to non-discrimination — you will not be discriminated against for exercising these rights.

Categories collected (last 12 months): identifiers (e.g. email, IP address), internet/network activity, account and commercial information, and user-provided content. Sources: you and your device/browser. Purposes: as described in Section 4. Retention: as described in Section 11.

How to exercise: email [email protected] with the subject "California Privacy Request." We will verify your identity (typically via your account email) and respond as required by law, generally within 45 days. You may use an authorized agent with written permission and verification; we may require direct confirmation from you.

Shine the Light: California residents may also request how we share personal information with third parties for their direct marketing purposes, if any. Contact us at the same address.

California signals: see Section 10 for Global Privacy Control (GPC) and Do Not Track.

8. International users; GDPR

The service is not offered to, directed at, or intended for persons in the EEA, United Kingdom, or Switzerland. We do not target, monitor the behavior of, or knowingly collect personal data from persons in those regions for purposes of the EU General Data Protection Regulation (GDPR) or the UK GDPR. If you are located outside the United States, do not provide personal data through the service.

Where GDPR or UK GDPR is nonetheless determined to apply to processing, our legal bases for processing are: performance of a contract (providing the service you request), legitimate interests (operating, securing, and improving the service), compliance with legal obligations, and consent where requested (in particular for optional analytics/marketing cookies, which you may grant or withdraw at any time via cookie settings). You may have rights to access, correct, delete, restrict, object to, or port your personal data, and to lodge a complaint with your supervisory authority. To exercise such rights where applicable, contact [email protected]. International transfers, if any, would be handled under appropriate safeguards (such as Standard Contractual Clauses), but because the service is US-only we do not solicit or expect such transfers.

9. Cookies and similar technologies

We use cookies and similar technologies in three categories:

• Strictly necessary — required for sign-in, security, and core functionality. Always active and not consent-dependent.
• Analytics — only with your consent; helps us understand how the service is used so we can improve it.
• Marketing — only with your consent; used to measure effectiveness of communications where applicable.

Nothing non-essential runs until you opt in. You can accept all, reject all optional cookies, or choose per category in the consent banner, and you can change or withdraw your choice at any time via the Cookie settings link in the footer. You can also control cookies through your browser settings, though blocking necessary cookies will prevent the service from working.

10. Do Not Track and Global Privacy Control

Some browsers transmit "Do Not Track" (DNT) signals. There is no uniform standard for DNT, and we do not alter behavior when a DNT signal is detected beyond the controls already described. For the legally recognized Global Privacy Control (GPC) signal, where required by applicable law (including California), we treat an enabled GPC as a valid opt-out of sale/share to the extent we engaged in any such activity — which, as noted above, we do not.

11. Data retention

We retain personal information only as long as necessary for the purposes described in this policy or as required by law. Account and matter data are retained while your account is active and for a reasonable period afterward for backup, audit, and legal purposes. When you request deletion of your account, we delete or de-identify associated personal information within a reasonable period (target 30 days) unless retention is required by law, needed to resolve disputes, or necessary for security and integrity.

12. Data security

We implement reasonable technical and organizational measures to protect personal information against unauthorized access, loss, alteration, or disclosure, including encryption in transit and at rest, access controls, and regular assessments. No system is perfectly secure, and we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your credentials and for ensuring that any content you upload may lawfully be shared with our service.

13. Children's privacy

The service is not directed to children under 13, and we do not knowingly collect personal information from children. If you believe a child has provided personal information, contact us at [email protected] and we will take appropriate steps to delete it.

14. Third-party links

The service may contain links to third-party sites (for example, official court PDFs). Those sites are governed by their own privacy policies, not this one. We are not responsible for their practices.

15. Changes to this policy

We may update this policy from time to time. If we make material changes, we will update the "Last updated" date above and, where appropriate, provide notice through the service. Your continued use after the effective date constitutes acceptance of the updated policy.

16. Contact

For privacy questions or to exercise rights described above, email [email protected]. If you already have a CaseDiver account, you may also contact your firm administrator or in-product support. We will respond as required by applicable law.