Privacy Policy

Who we are

Casey (“we”, “us”) is practice-management software for law firms: it keeps track of clients, cases and court dates, reads court correspondence, and prepares court documents. This policy explains what data the service handles and how. Questions or requests: desaiparth059@gmail.com.

Information we collect

• Account information — when you sign in with Google we receive your name, email address and profile picture.
• Firm and client records — information your firm enters or scans into the service: client details, case and ticket information, notes, documents, invoices and payments. This data belongs to your firm.
• Usage records — an audit history of actions taken in the service, kept so your firm can see who did what.

Google user data

If you connect your Google account, we access the following Google user data, in each case only to provide features you can see and use:

• Google Calendar (calendar events) — we list your calendars so you can choose one, read events to display your calendar inside the service, and create, update or delete events on the calendar you selected when court dates are scheduled, moved or removed.
• Gmail — reading (gmail.readonly)— we read messages in your connected mailbox to identify correspondence from courts and from your firm’s clients. For those messages we store the sender, subject, dates, message identifiers, and the details extracted from them (for example a hearing date in a court notice) together with a plain-language summary, so they can be shown to you on your mail board. We do not store full copies of your mailbox.
• Gmail — sending (gmail.send) — when you choose to email a court document, we send that email from your own address through your Gmail account. We only send what you composed and confirmed.

AI processing.The content of court and client emails and documents you scan is processed by Google’s Gemini API solely to produce the summaries, extracted dates and drafts shown to you in the service. We do not use Google user data to develop, improve or train generalized artificial-intelligence or machine-learning models.

Limited Use.Casey’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We do not use Google user data for advertising, do not sell it, and do not allow humans to read it except (a) with your affirmative agreement, (b) as necessary for security purposes such as investigating abuse, (c) to comply with applicable law, or (d) when the data has been aggregated and anonymized for internal operations.

How data is stored and secured

Data is encrypted in transit (TLS) and at rest. The service runs on Vercel with a Neon-hosted Postgres database in the United States. Google OAuth tokens are stored server-side only and are never exposed to the browser. Access within a firm is controlled by per-member permissions, and every change is recorded in the firm’s audit history.

Sharing

We share data only with the service providers that run the product (Vercel for hosting, Neon for the database, Google for the APIs described above), when your firm deliberately shares it (for example a time-limited, revocable share link your firm creates for outside counsel), or when required by law. We do not sell personal information.

Retention, disconnection and deletion

• Firm and client records are kept for as long as your firm uses the service.
• You can disconnect your Google account at any time in Settings — this deletes our stored tokens for your account. You can also revoke Casey’s access from your Google Account permissions page, which invalidates our access immediately.
• To request deletion of your account or your firm’s data, use the deletion controls in Settings or email desaiparth059@gmail.com; we will act on verified requests within 30 days.

Changes and contact

If this policy changes materially we will update this page and its effective date. Contact: desaiparth059@gmail.com.