Privacy Policy

Last updated: June 12, 2026

1. Information We Collect

We collect information you provide when you:

• Create an account (name, email address)
• Set up your firm profile (firm name, contact information)
• Enter matter, client, or case data into the Service
• Contact us for support

We also collect usage data such as log files, IP addresses, and browser information to operate and improve the Service.

2. How We Use Your Information

We use your information to:

• Provide, operate, and maintain the Service
• Process billing and subscriptions via our payment processor (Stripe)
• Send transactional emails (account notifications, invoices)
• Respond to support requests
• Monitor and improve performance and security

3. Data Sharing

We do not sell, trade, or rent your personal information to third parties. We may share data with trusted service providers who assist us in operating the Service, subject to confidentiality obligations. These include:

• Stripe — payment processing
• WorkOS — authentication and SSO
• AWS S3 — file storage
• Resend — transactional email delivery

4. Attorney-Client Privilege

We understand that data stored in CaseLumen may include privileged attorney-client communications. We treat all such data as strictly confidential and do not access it except to provide technical support when expressly authorized by you.

5. Data Security

We implement industry-standard security measures including encryption in transit (TLS), access controls, and audit logging. However, no method of transmission over the Internet is 100% secure.

6. Data Retention

We retain your data as long as your account is active. Upon account cancellation, data is retained for 90 days to allow for export. After that period, data may be permanently deleted.

7. Your Rights

You may request to:

• Access a copy of your data
• Correct inaccurate data
• Delete your account and associated data
• Export your firm's data in a portable format

To exercise these rights, contact us at privacy@caselumen.com.

8. Cookies

We use session cookies required for authentication and application functionality. We do not use tracking or advertising cookies.

9. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes by email or via a notice in the application.

10. Contact

Privacy-related questions should be directed to privacy@caselumen.com.