Legal
Privacy Policy
Last updated: January 2025
1. What We Collect
When you create an account, we collect your email address, name, and authentication credentials. During onboarding, we collect information about your preparation stage, target firms, and professional background to personalize your experience. We also collect usage data such as case practice sessions, drill results, and performance scores to provide analytics and recommendations.
2. How We Use Your Information
We use your information to provide and improve the CaseSights platform, including personalized case recommendations, performance analytics, and preparation plans. We may send you transactional emails related to your account and, with your consent, marketing communications about new features and content. We do not sell your personal information to third parties.
3. Data Storage and Security
Your data is stored securely using industry-standard encryption and hosted on Supabase infrastructure. We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.
4. Data Retention
We retain your personal data for as long as your account is active or as needed to provide you services. If you delete your account, we will remove your personal information within 30 days, except where we are required to retain it for legal or regulatory purposes.
5. Cookies and Analytics
We use essential cookies to maintain your session and preferences. We may use analytics services to understand how users interact with the platform. You can control cookie preferences through your browser settings.
6. Your Rights
You have the right to access, correct, or delete your personal data at any time. You may export your data or request a copy of the information we hold about you. To exercise these rights, contact us at hello@casesights.net. If you are in the EU/EEA, you have additional rights under GDPR including the right to data portability and the right to lodge a complaint with a supervisory authority.
7. Third-Party Services
We use third-party services including Supabase (database and authentication), Stripe (payment processing), and OpenAI (AI-powered features). Each of these services has their own privacy policies governing how they process data.
8. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through a notice on the platform. Your continued use of CaseSights after changes are posted constitutes acceptance of the updated policy.
9. Contact Us
If you have questions about this Privacy Policy, please contact us at hello@casesights.net.