Privacy Policy

1. Who we are

CaseParity is operated by Caseparity LLC, a Colorado limited liability company. References to "CaseParity," "we," "us," and "our" in this policy mean Caseparity LLC.

Our data-protection contact is privacy@CaseParity.com.

2. What information we collect

Information you give us

When you create an account or purchase a report, we collect:

• Identity & contact: first name, last name, email address. Sign-in is by email and password; your password is stored hashed using a modern adaptive algorithm by our auth provider (Clerk) — CaseParity itself never sees or stores the password.
• Authentication factors: if you enroll a second factor (TOTP or Passkey), the secret material is stored by Clerk, not by us. We hold only the fact that you have a second factor enrolled and when it was enrolled. We do not support SMS-based authentication.
• Jurisdiction: the state and/or county you select when ordering a report. We use this to deliver the correct jurisdiction's report and to filter the per-state legal disclaimer/attorney-finder strip.
• Pro Standard (attorney accounts only): state of bar admission, bar number, optional firm name. We verify the bar number with the issuing state bar's public licensee directory within one business day of signup. We retain this record for the duration of your subscription and for one (1) year after cancellation to handle any post-termination billing or disputes.
• Payment information: processed exclusively by Stripe. We never see, store, or have access to your full credit card number, CVV, or bank account number. Stripe returns to us only a transaction id, the last four digits of the card, and the card brand for receipt/dispute purposes.
• Optional information: a referral code you enter at checkout, language preference, communication preferences.

Information collected automatically

• Account telemetry (logged-in users only): login timestamp, IP address, browser user-agent, operating system, screen size. This is collected for security, fraud detection, abuse prevention, and compliance with the per-state data-access logging requirements that several state public-records statutes impose on bulk-data redistributors. See §6 below for retention.
• Usage analytics: pages viewed, reports downloaded, search queries within your account dashboard, time on page. We use this only for product improvement and capacity planning.
• Cookies and similar technologies: we use a session cookie to keep you logged in, a CSRF cookie for form security, and a preferences cookie to remember your language and dashboard settings. We do not use third-party advertising cookies.

Information we do NOT collect

• Any facts about your specific case. CaseParity's reports are pre-rendered statistical aggregates per (charge × jurisdiction). We do not ask for — and have no way to receive — your case number, your charging document, your priors, your scoresheet, your attorney's name, your court dates, or any other case-specific facts.
• Defendant identities from public records. Most agencies anonymize the court records that feed our statistics before release; where a source instead transmits identifying fields — as Harris County, Texas does — our ingest pipeline strips them before any downstream use, and we do not retain them. The published report never contains defendant names, addresses, dates of birth, or other directly-identifying details. If we ever discover that an upstream agency has included unexpected identifying information in a feed, we remove it before it enters any report.
• Sensitive personal information as defined by U.S. state privacy laws (Social Security numbers, government IDs, financial account numbers, precise geolocation, biometric identifiers, health/medical information, racial/ethnic origin, religion, sexual orientation, immigration status). We do not need any of this to deliver our service and we do not collect it.
• Children's information. Our service is not directed to children under 13 (or 16 in some jurisdictions). See §9.

3. How we use information

We use the information described above for these purposes only:

• To deliver the service: render and serve the report you purchased, send the receipt, give you access to your account dashboard.
• To process payments: via Stripe, including subscription renewals, refunds, and dispute handling.
• To verify attorney eligibility for Pro Standard accounts (bar number lookup at signup; periodic re-verification annually).
• To communicate with you about your account: order confirmations, subscription renewal notices, customer-support replies, and material changes to these policies. These are transactional emails. You can not opt out of transactional emails while you have an active account.
• For optional marketing email (newsletters, new-state launches, product updates): only with your explicit opt-in, separately from account creation. Opt out anytime via the unsubscribe link or by emailing privacy@CaseParity.com.
• For security, fraud detection, and abuse prevention: account-telemetry data per §2.
• To comply with legal obligations: tax records, subpoenas, court orders, and the data-access logging that several state public-records statutes impose on bulk-data redistributors.
• To improve the product: aggregated usage analytics, never tied to individual identity in any output.

4. How we share information — and who we don't share it with

Service providers we share with

We share the minimum information necessary, under written data-processing agreements, with the service providers that operate the product — principally our payment processor (Stripe, which takes your card details directly; we never relay them), our authentication provider (Clerk, which holds only authentication material such as your password hash), and our cloud hosting and email infrastructure provider (Amazon Web Services), where the account data we hold is stored encrypted in transit and at rest. Each provider receives only what it needs to perform its function; none receives case-specific or report-specific data, and none receives your information to use for its own purposes. For the current list of our sub-processors, email privacy@CaseParity.com.

Legal disclosures

We will disclose information when legally compelled by a valid subpoena, court order, or other legal process. Where permitted by law, we will notify you before disclosing your information so you have an opportunity to challenge the request. If a request is overbroad or facially invalid, we will challenge it.

Business transfers

If CaseParity is acquired, merged, or sells substantially all of its assets, your account information may transfer to the acquiring entity as part of the transaction. We will notify you by email at least 30 days before any such transfer becomes effective so you have the opportunity to delete your account first if you prefer.

We do NOT

• Sell your personal information. Not to advertisers, not to data brokers, not to anyone, not ever.
• Share your personal information for cross-context behavioral advertising.
• Use your information to train any AI model.
• Share your account-telemetry data (login IPs, etc.) with anyone except as required to comply with state public-records statutes or a valid legal process.

5. Cookies and tracking

We use the minimum cookies necessary to operate the service:

Cookie	Purpose	Lifespan
session	Keeps you logged in	Session (cleared on logout or 30-day inactivity)
csrf	Form security (anti-CSRF token)	Session
prefs	Remembers your language and dashboard settings	1 year

We do not use third-party advertising cookies, retargeting pixels, Facebook Pixel, Google Analytics, or any cross-site tracking. If your browser sends a Global Privacy Control (GPC) signal, we treat that as an opt-out of any future analytics that might process sale/share definitions under state privacy law.

6. Data retention

We keep your account information (name, email, jurisdiction, preferences) while your account is active and for a limited period afterward to handle any post-closure billing or disputes, after which it is deleted. Payment and billing records are kept for as long as U.S. tax law requires. Authentication material and payment data held by our providers (Clerk, Stripe) are retained under their policies. You can request earlier deletion under §7. Records subject to an active legal hold (subpoena or litigation hold) are preserved until the hold is released, even if you request deletion; we notify you where permitted by law. For the retention period that applies to a specific category of your data, email privacy@CaseParity.com.

7. Your privacy rights

Regardless of where you live, you have the following rights as a CaseParity customer:

• Access: request a copy of the personal information we hold about you. We'll respond within 30 days.
• Correction: ask us to fix inaccurate information.
• Deletion: ask us to delete your account and the personal data tied to it. We'll honor this request within 30 days, except for billing records we're required to retain under tax law (which we'll segregate and only access if legally required).
• Portability: request a machine-readable export of your account data.
• Opt-out of marketing email: use the unsubscribe link or email us.
• Non-discrimination: we won't deny service, charge a different price, or degrade service quality because you exercised a privacy right.

State-specific rights

If you are a resident of a state with a comprehensive consumer privacy law — including but not limited to California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Iowa, Delaware, New Hampshire, New Jersey, Tennessee, and Indiana — you have additional rights under that state's law. CaseParity does not sell or share personal information for cross-context behavioral advertising (so the most-asked-about CCPA/CPRA rights don't apply because there's nothing to opt out of). For other rights specific to your state, email privacy@CaseParity.com with the subject line "Privacy Rights Request [state]" and we'll route appropriately.

To submit a request, email privacy@CaseParity.com from the email address on your account, or use the in-dashboard "Privacy" section. We verify your identity using your account email and, if needed, a one-time code sent to that email. We do not require additional government ID to verify a request from your own account.

8. Security

We use industry-standard administrative, technical, and physical safeguards to protect your information, including encryption in transit (TLS 1.2+), encryption at rest, password hashing with a modern adaptive algorithm, network-level access controls, and least-privilege role-based access for our team. We never store full payment card numbers or CVVs — those are handled exclusively by Stripe.

No system is perfectly secure. If a breach occurs that affects your data, we will notify you and the relevant authorities as required by applicable state and federal law, without undue delay and consistent with applicable state breach-notification deadlines.

9. Children's privacy

CaseParity is intended for use by adults (18+). We do not knowingly collect personal information from children under 13, or from children under 16 in jurisdictions where that is the applicable age. If you believe we have inadvertently collected such information, email privacy@CaseParity.com and we will delete it.

10. International users

CaseParity is a U.S.-only service. Our infrastructure, our team, and our data are located in the United States. We do not intentionally market the service to users outside the U.S. If you access the service from outside the U.S., you understand that your information will be processed in the U.S., which may have different privacy protections than your home jurisdiction. We do not offer GDPR-specific rights at this time; we will reassess if the service expands internationally.

11. Communications about your account

We will email you for these reasons regardless of marketing preferences:

• Order confirmation and receipt
• Subscription renewal notice (for Pro Standard accounts — sent 7 days before each renewal)
• Important security notifications (login from a new device, password change, suspected compromise)
• Material changes to this Privacy Policy or the Terms of Service (sent at least 30 days before they take effect)

12. Changes to this policy

If we materially change this Privacy Policy — meaning a change that expands what we collect, what we use it for, or who we share it with — we will email all active account holders at least 30 days before the change takes effect, post a notice on the homepage, and update the "Effective date" at the top of this page. Non-material changes (typos, clarifications, formatting) will be made silently with the version number incremented.

13. Contact

For any privacy question or to exercise any right described above:

• Email: privacy@CaseParity.com