Privacy Policy

Core Privacy Commitments

Caseway provides multiple products, including Casey (legal research) and CaseForm (form automation). Across products, we follow a minimum-data approach: we process only what is required to provide the service you request.

• We do not sell personal data.
• We do not track, profile, or use the content of your prompts, uploaded documents, or legal work for advertising or model training.
• We do not use your legal content to build advertising profiles.

If there is no operational need to collect or retain a category of data, we do not keep it.

Casey Privacy Notes

Casey handles uploaded and conversational content using short-lived processing workflows.

• Uploaded documents and contextual files are temporarily cached for processing and automatically deleted within 24 hours.
• We do not permanently store uploaded documents on our servers.
• Chat histories are saved only when users opt in and can be deleted at any time.
• We do not use Casey legal content for model training or advertising.

CaseForm Privacy Notes

CaseForm is designed to process matter and form context for workflow completion without retaining that sensitive payload on our server.

• We do not retain any users' sensitive information, case or matter data, or contextual documents on our server.
• CaseForm data is processed only to complete the requested automation task and return output to authorized users.

What We May Collect

To operate and secure the platform, we may process limited data categories such as:

• Account and authentication data
• Billing and transaction records (where applicable)
• Support and communication records
• Limited operational and security metadata used for reliability, abuse prevention, and service integrity

How We Use Data

We use data only for legitimate service purposes, including to:

• Provide and secure Casey and CaseForm
• Authenticate users and manage accounts
• Process subscriptions and billing
• Respond to support requests
• Comply with applicable law and legal obligations

Data Sharing and Disclosure

We do not sell personal data. We disclose data only when necessary to operate the service, comply with legal obligations, or protect platform security.

• Contracted service providers acting on our instructions
• Legal and regulatory authorities where disclosure is required by law
• Security and fraud-prevention workflows needed to protect users and our systems

Retention and Deletion

Our retention approach is product-specific and purpose-limited:

• Casey uploaded documents/context files: temporary cache with automatic deletion within 24 hours
• Casey chat histories: saved only when users opt in and can be deleted at any time
• CaseForm sensitive/case/context data: not retained on our server
• Administrative, billing, and legal-compliance records may be retained as required by law

Security

We use technical and organizational safeguards designed to protect data in transit and at rest, restrict unauthorized access, and maintain system integrity.

• Encryption controls for data transfer and protected data stores
• Access controls and permission boundaries
• Service hardening, monitoring, and abuse protections

California Privacy Rights (CCPA/CPRA)

We do not sell personal data. California residents may submit requests to access or delete eligible personal information we maintain, subject to legal exceptions.

Policy Updates

We may update this Privacy Policy from time to time. Material updates will be reflected on this page with a revised effective date.

Questions? Feedback? Let's Talk.

Privacy is something we take personally. If anything here is unclear, you want more technical details, or you wish to verify something before using Casey or CaseForm for serious work, send us a message. We respond quickly and transparently.

We want to make sure you feel confident not just in the answers we provide, but in how we protect your information while doing it.