Privacy Policy

Account information: When you register, we collect your name, email address, firm name, and other information you provide during sign-up.

Client and case data: When you use the Service, you may upload documents, medical records, case information, party details, communications, and other data related to your legal matters ("Client Data"). This may include personal, sensitive, or protected health information belonging to your clients. You are responsible for ensuring you have the right to upload and process such data through the Service.

Usage data: We collect information about how you interact with the Service, including log data, device information, IP address, browser type, and feature usage, to operate and improve the platform.

Billing information: We collect payment information through our payment processor (Stripe) to process subscription fees. We do not store full card numbers on our servers.

We use the information we collect to:

• Provide, operate, and maintain the Service;
• Process your subscription payments and manage your account;
• Generate AI-assisted summaries, analyses, and documents based on the Client Data you provide;
• Send you service-related communications, including deadline reminders, appointment notifications, and account alerts;
• Provide customer support and respond to your inquiries;
• Detect, prevent, and address fraud, security issues, and violations of our Terms;
• Improve and develop new features and functionality; and
• Comply with applicable legal obligations.

We do not sell your Client Data to third parties. We do not use your Client Data to train AI models for general use or for the benefit of third parties.

We may share your information in the following circumstances:

• Service providers: We engage trusted third-party vendors (such as cloud hosting, email delivery, SMS, payment processing, and AI processing providers) to help us deliver the Service. These providers are bound by contractual obligations to protect your information and are limited to the access necessary to perform their functions.
• Legal compliance: We may disclose information when required by law, court order, or government request, or when we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.
• Business transfers: If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction, subject to the confidentiality protections described in this policy.

We implement industry-standard technical, organizational, and physical safeguards designed to protect your information. These include encryption in transit and at rest, role-based access controls, tenant-level data isolation, and regular security reviews. However, no system is completely secure, and we cannot guarantee the absolute security of your data.

In the event of a data breach affecting your information, we will notify you and the appropriate regulators as required by applicable law.

We retain your Client Data for as long as your account is active or as needed to provide the Service. After account termination, we will delete or render inaccessible your Client Data within a reasonable period, unless retention is required by law or to resolve disputes.

You may export your data at any time through the Service. We recommend exporting your data before cancelling your subscription.

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including the right to:

• Know what personal information we collect and how it is used;
• Request access to or a copy of your personal information;
• Request deletion of your personal information;
• Correct inaccurate personal information; and
• Opt out of the sale or sharing of your personal information.

To exercise these rights, contact us at support@briefcasebliss.com. We will respond to verified requests within the timeframes required by law.

Note that certain Client Data may be exempt from CCPA/CPRA requirements because it is collected, used, and disclosed in the context of providing professional services to your clients.

We use cookies and similar tracking technologies (such as web beacons and analytics tags) to operate and improve the Service, remember your preferences, and understand how the Service is used. You can control cookies through your browser settings, but disabling cookies may affect the functionality of the Service.

The Service is not directed to children under eighteen (18) years of age, and we do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us so we can delete it.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and, if appropriate, by email or in-app notice. We encourage you to review this page periodically.

If you have questions about this Privacy Policy or our data practices, contact us at support@briefcasebliss.com.