CaseWiki

CaseWiki Inc. ("CaseWiki," "we," "us," or "our") is committed to protecting the privacy of all users of our platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use the CaseWiki website and services (the "Service").

We comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation. By using the Service, you consent to the practices described in this policy.

1. Information We Collect

1.1 Information you provide

Account information: Name, email address, password, and province/territory when you create an account
Legal intake data: Province, practice area, and situation description you provide when using our AI assistant
Profile information: For lawyers — bar number, practice areas, firm name, and professional details
Communications: Messages you send through the contact form, in-platform messaging, or customer support
Payment information: Billing details are collected and processed by our third-party payment processor; we do not store full payment card numbers

1.2 Information collected automatically

Usage data: Pages visited, features used, time spent on pages, and navigation patterns
Device information: Browser type, operating system, device type, and screen resolution
IP address: Used for security, fraud prevention, and approximate geographic location
Cookies and similar technologies: Used for session management, authentication, and analytics (see Section 5)

2. How We Use Your Information

We use personal information to:

Provide and maintain the Service, including AI-generated legal reports
Create and manage your account
Verify lawyer credentials against provincial bar registries
Process payments and manage subscriptions
Respond to your inquiries and provide customer support
Send service-related notifications (account updates, security alerts)
Improve and develop the Service based on usage patterns
Detect and prevent fraud, abuse, and security threats
Comply with legal obligations

We do not use your legal intake data to train AI models. Your situation descriptions are processed in real-time to generate your report and are stored only for your personal reference in your case history.

3. How We Share Your Information

We do not sell your personal information. We may share information with:

Service providers: Third-party vendors who help us operate the platform (hosting, payment processing, analytics, email delivery). These providers are contractually obligated to protect your information.
Lawyers on the platform: If you initiate contact with a lawyer through CaseWiki, relevant case information you choose to share will be visible to that lawyer.
Legal requirements: When required by law, court order, or governmental request, or to protect the rights, property, or safety of CaseWiki, our users, or the public.
Business transfers: In connection with a merger, acquisition, or sale of assets, with notice to affected users.

4. Data Storage and Security

Your data is stored on servers located in Canada, hosted by Supabase and Vercel. We implement industry-standard security measures including:

Encryption in transit (TLS/SSL) and at rest
Row-level security on all database tables
Secure authentication with password hashing and session management
Regular security audits and monitoring
Access controls limiting employee access to personal information

No method of transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

5. Cookies

We use the following types of cookies:

Essential cookies: Required for authentication, session management, and basic platform functionality. Cannot be disabled.
Analytics cookies: Help us understand how users interact with the platform. Can be disabled in your browser settings.

We do not use advertising or tracking cookies. We do not engage in cross-site tracking.

6. Your Rights

Under PIPEDA and applicable provincial legislation, you have the right to:

Access your personal information held by CaseWiki
Correct inaccurate or incomplete personal information
Delete your account and associated personal information
Withdraw consent for optional data processing (marketing communications, analytics)
Request information about how your personal information is used and disclosed

To exercise these rights, contact us at privacy@casewiki.ca. We will respond within 30 days.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. Specifically:

Account data: Retained until you delete your account
Case history: Retained until you delete individual cases or your account
Payment records: Retained for 7 years for tax and accounting purposes
Usage logs: Retained for 90 days, then anonymized

When you delete your account, we delete or anonymize your personal information within 30 days, except where retention is required by law.

8. Children's Privacy

CaseWiki is not intended for individuals under 18 years of age. We do not knowingly collect personal information from minors. If we learn that we have collected information from a child under 18, we will delete it promptly.

9. International Users

CaseWiki is a Canadian service designed for Canadian users. If you access the Service from outside Canada, be aware that your information may be transferred to and processed in Canada, which may have different data protection laws than your jurisdiction.

10. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated via email or prominent notice on the platform at least 30 days before taking effect. The "Last updated" date at the top of this page indicates the most recent revision.

11. Contact Us

For questions about this Privacy Policy or your personal information, contact our Privacy Officer:

Email: privacy@casewiki.ca
General inquiries: Contact page

If you are not satisfied with our response, you may file a complaint with the Office of the Privacy Commissioner of Canada.