Draft for legal review. This page is a structured draft, not a binding document, and is not in effect. Items marked TBD need confirmed company and legal details.
Who this notice covers
This notice covers visitors to this website, people who contact us, and staff of subscribing firms.
If you are a client of a consultancy that uses Casevoya, your consultancy decides how your information is used and is your first point of contact. Casevoya processes that information on the consultancy's behalf.
Who is responsible
Casevoya, address TBD. Privacy officer: name and contact TBD.
What we collect
- Contact and demo forms: your name, email, firm name, team size, topic and message.
- Website analytics: TBD: tools and whether cookies are used.
- Firm accounts: staff names, work emails, roles, and sign-in and security records.
- Client records held by firms: processed for the firm, as instructed by the firm.
How we use it
- To answer your message or arrange a demo or trial.
- To provide, secure and support the service for subscribing firms.
- Core processing, optional AI, optional channels and marketing are separate purposes, each with its own notice and consent or other documented authority.
Optional AI features
AI features are optional and can be switched off by each firm and by sensitive document category. A non-AI workflow is always available. Client records are not used to train models by default. AI vendors' data use, retention, processing region and deletion are evaluated contractually.
Who we share it with
Service providers that help us run Casevoya, listed on the subprocessors page. We do not sell personal information.
Where information is stored
Storage and processing locations: TBD, subject to vendor verification.
How long we keep it
Website enquiries: TBD. Client records follow each firm's retention policy. At closure, records are read-only and deletion requires eligibility checks and approval.
Your rights
You can ask for access to, or correction of, your personal information. Requests are verified, searched, reviewed and delivered with a record of what was provided. Information about other adults is redacted.
For records held by a consultancy, the request goes to that consultancy; each firm handles requests independently.
Security
Encryption in transit and at rest, two-step sign-in for staff, role-based access, audit records and time-limited, firm-approved support access. See Security.
If something goes wrong
We keep records of security incidents and support firms with notifications and reporting. Legal reporting obligations: TBD.
Applicable law
TBD
Contact
Privacy questions: privacy contact TBD, or the contact form (choose "A privacy request").