CaseBuilderAI, LLC ("CaseBuilder", "we") provides software that personal-injury law firms use to read case files and prepare work product. This policy explains what information we collect, how we use it, who we share it with, how long we keep it and the choices you have. It applies to casebuilder.ai and to the CaseBuilder application at app.casebuilder.ai. How the information is protected is described in our Data Security Policy.
CaseBuilder is used by attorneys and their staff. The case files a firm reads in CaseBuilder belong to that firm and its clients: we process them on the firm's behalf and only to provide the service.
1. Information we collect
Account information
When you sign in with Google or Microsoft, we receive your name, email address and, if you have one, your profile picture. When you create a password, we keep only a salted scrypt hash of it, never the password itself. When you sign up with a firm email, we read the public website at your email's domain to confirm it is a law firm, and keep the result. If you request access or write to us, we keep your name, email and the message you send us.
Firm information
Your firm's name, address and contact details, the model letter (stationery) it uploads, its attorneys, its contingency fee and the people it invites.
Case material
The documents you upload or choose from a repository you connect (Google Drive, OneDrive or SharePoint, Dropbox, ShareFile or Clio), such as collision reports, medical records, bills, photographs and correspondence. These often contain personal and health information about your clients and others.
- What we keep: the text CaseBuilder reads from each page, the facts, analysis and positions drawn from it, the terms you approve and the work product you prepare (chronologies, exhibit plans, demand letters), each version recorded with who made it and when.
- What we do not keep: a copy of the files you upload from your computer. They are read and discarded; to build an exhibits package you choose them again. Files read from Google Drive, OneDrive or SharePoint, Dropbox, ShareFile or Clio stay there and are fetched again, through your own connection, when the exhibits are built.
Connected repositories
When you connect Google Drive, OneDrive or SharePoint, Dropbox, ShareFile or Clio, the provider gives us an access token for your account. We store it encrypted and use it only to list and read the files you choose. CaseBuilder never changes anything in your repository.
Payment information
Plans are paid through Stripe. Stripe collects your card details; we receive only the plan, its status and billing dates, never card numbers.
Usage and audit information
We record how the service is used, such as the number of pages read, the model tokens a task used and errors, and an audit trail of who opened, exported or deleted a case. These records never include the text of your documents, your questions or the answers.
2. How we use information
- To provide the service: read your case files, keep your cases and prepare the work product you request.
- To run your account and your firm's plan, including billing.
- To keep the service secure and reliable: detect misuse, investigate incidents and fix errors.
- To communicate with you about your account, your cases (for example, a notice before a case is deleted) and changes to the service. With your permission, we may send product news; you can opt out at any time.
- To meet legal obligations and enforce our terms.
We do not use your case material to train AI models, and we do not sell personal information.
3. How documents are read
CaseBuilder reads documents with Anthropic's Claude models through Anthropic's commercial API. Under Anthropic's commercial terms, data sent through the API is not used to train its models. Each page is sent only to read it and to prepare the work you ask for.
4. Who we share information with
Your firm. A case belongs to its firm: the people the firm invites can open it; people of other firms cannot.
Service providers that run CaseBuilder for us, under contracts that limit their use of the information to providing their service:
- Google Cloud: hosting, database, backups and secret storage, in the United States.
- Anthropic: the AI models that read documents and draft work product.
- Stripe: subscriptions and payments.
- Zoho Mail: account and case notices by email.
- Google and Microsoft: signing in.
- Free Law Project (CourtListener): checking the case citations in a demand; it receives only the citation.
Repositories you connect. Google Drive, Dropbox and Clio receive our requests for the files you choose, made with your own connection.
Legal reasons. We may disclose information when the law requires it, such as a valid subpoena or court order, and only as much as required. Where the law allows, we will tell the affected firm first so it can object.
Business transfers. If CaseBuilder is merged or sold, information may pass to the successor, which will remain bound by this policy.
5. Google user data
CaseBuilder's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
- What we access. When you sign in with Google: your name, email address and profile picture. When you connect Google Drive: the files you choose to add to a case, and their names and fingerprints. CaseBuilder does not browse, list or read any other file in your Drive.
- How we use it. Your Google account information signs you in. The Drive files you choose are read to build that case's work product: their text is read, partly with Anthropic's Claude models through Anthropic's commercial API, which does not use the data to train models. When you build an exhibits package, the chosen files are fetched again from your Drive.
- What we store. The text read from each page and the work prepared from it, with your case. We keep no copy of the original files. The authorization Google gives us is stored encrypted, and is used only to read the files you chose.
- Sharing. We do not sell Google user data, use it for advertising, or use it to train AI models. It is shared only with the service providers listed in section 4, to run CaseBuilder. Humans do not read it except with your permission, for security purposes, or to comply with the law.
- Your control. You can disconnect Google Drive in CaseBuilder at any time, which revokes our access, or remove CaseBuilder from your Google Account's third-party access page. Deleting a case removes what was read from its files.
6. How long we keep information
- Cases: kept while your firm works on them. A case marked closed is deleted 60 days after closing, and any case is deleted after 12 months without activity; we email a notice 30 days before either deletion. A firm can delete a case permanently at any time.
- Backups: kept for 7 days, after which deleted data no longer exists in them.
- Accounts: kept while active. You can ask us to delete your account; the cases your firm keeps stay with the firm.
- Audit and billing records: kept as long as needed for security, accounting and legal purposes. They contain no case content.
7. Your choices and rights
- You can disconnect any repository from the application at any time. To see, correct or delete your account information, write to us.
- Requests about a client's information in a case should go to the firm that holds the case; we will help the firm respond.
- You can unsubscribe from product emails with the link in each message.
California residents. You have the right to know what personal information we collect, use and disclose, to ask us to delete or correct it, and not to be discriminated against for exercising these rights. We do not sell personal information or share it for cross-context behavioral advertising. To make a request, write to [email protected]; we will verify your identity before acting on it.
8. Health information
Case files often include protected health information. CaseBuilder's infrastructure on Google Cloud is covered by Google's HIPAA Business Associate Addendum. Firms that need a business associate agreement for their use of CaseBuilder can contact us.
9. Children
CaseBuilder is a professional service for law firms and is not directed to children. We do not knowingly collect personal information from anyone under 18 except as it appears in the case files a firm reads.
10. Changes to this policy
We will post changes here and update the date above. When a change materially affects how we handle your information, we will tell you by email or in the application before it takes effect.
Contact Information
- Email: [email protected]
- Phone: +1 (973) 665-4394
- Address: 131 Continental Drive, Suite 305, Newark, Delaware 19713