Privacy policy

Your case is private. This policy explains what we keep, why, who can see it, who helps us process it, and how you remove it.

What we keep

• Account details: your name and email, your password (stored only as a hash), your two-step sign-in settings, and the short-lived codes we send to confirm your email or reset your password. If you sign in with Google, we keep the name, email and picture Google shares with us, and the sign-in tokens Google issues with them; those tokens give us access to nothing else in your Google account. For each signed-in session we keep the browser and the IP address it came from.
• Your case: what you write in the chat and in the story editor, and earlier versions of your story; the voice notes you record and their transcripts; the files you upload and the emails you forward to your case’s address, with their attachments; the text we read from them and a search index of it; the timeline, people, questions and briefs built from all of this; and your answers to the screening questions the assistant asks, with the zip code where it happens.
• If you send your case to attorneys: the mobile phone number you verify by text message, each time you send your case (with whether you chose to share your contact details, how soon you need help and your income range, if you gave it), and which firms your case was sent to and when.
• Credits: purchases and how credits were used. Card details are handled by Stripe; we never see them.
• Sharing records: your share links and their settings, and the preview card made for them; each view of a link (a signed-in viewer by their account, anyone else by a code made from their IP address that changes every day; we never store the IP address itself); which firms have access to your case, and when their lawyers opened it or downloaded a file; and what you agreed to and when, each time you share your case, approve a request, remove a firm or turn matching on or off.
• If you apply as a lawyer: your name, bar number and bar state, your firm and its website, your practice areas and the states and counties you work in, when you accepted the lawyer terms, and our verification decision. We also keep your firm’s members, the colleagues your firm invites, your firm’s leads with the stage, owner and notes your firm adds, the offers your firm sends and your firm’s default offer. If your firm connects its own software, we keep the CRM connections your firm sets up (their keys encrypted) and a log of the leads sent to them: 90 days of it, and a note that each lead was sent for as long as the lead and the connection are kept.
• Technical records: when jobs ran, how many pages and AI tokens they used, errors, and changes our staff make to an account, such as adding credits. These records hold ids and counts, never the content of your story or files. Public pages are counted per day by page, referring site and type of device, with no cookies and no IP address.

How we use it

We use it only to run TellYourCase:

• to organize your case, answer your questions about it, write your brief, and keep your account and credits working;
• to show your case to the people you choose to share it with;
• to verify lawyers who apply;
• to email you about your account and your case, for example when a lawyer opens it or asks you a question (these emails never contain your story or files);
• to keep the service safe, for example by limiting how many requests one browser or account can send.

We don't sell your data, don't use it for advertising, and don't use it to train AI models.

Sharing

Nothing in your case leaves your account unless you choose to share it.

• Exports: a case pack or data export you download is yours to share. Its download link expires after 10 minutes.
• Share links: anyone with a link sees a preview card with the kind of case, the state, rough dates, counts, a rounded amount and a short overview, written without names, contact details or file names. You choose how long a link works (7, 30 or 90 days) and can add a passcode.
• Lawyers: a lawyer we have verified who opens your link can read your case, read-only and within what you chose to include: the timeline, people, story, files and brief. Sensitive files are left out, and messages and emails are included, unless you change that. Access belongs to the lawyer’s firm, so every verified lawyer at that firm can read the case until the link expires, you revoke the link or you remove the firm. Lawyers with access can send you questions; you decide whether to answer.
• Matching: if you turn on matching, verified lawyers who handle your kind of case in your state can see your preview card. A lawyer who wants to see more asks you first, and nothing else is shared unless you approve; you choose what an approval includes. You can turn matching off at any time.
• Firms’ own software: a firm that has your case as a lead can send its preview card (the kind of case, the place, rough dates, counts, a rounded amount, the issues, the first timeline rows and the short overview, without names, contact details or files), when the firm received it, and the firm’s own stage, owner, source and notes to the software it manages its clients in. If you chose to share your contact details when you sent your case to attorneys, a firm with access also sends your name, email and phone there. What happens to it there is up to the firm.
• Sending to attorneys: when you send your case, we email a link to the attorney you name, and, if you choose, send it to up to 4 verified attorneys near you who handle your kind of case and hold an Attorney Vault Pass. They see the preview card and the answers you confirmed until they open the case. If you choose to share your contact details, attorneys with access to your case see your name, email and phone. We keep the offers attorneys send you and whether you accepted or declined each one; when you accept an offer, that firm gets your name, email and phone.
• What you see: each link’s views, which firms have access and when their lawyers last opened your case. We also tell you when a firm first opens it.
• Ending access: revoking a link or removing a firm ends that access at once. Files a lawyer downloaded before then stay with them; we can’t take them back.

Who processes it for us

• Cloudflare runs the service and stores your data: the database, file storage, the search index, email delivery, and the bot check on sign-up, password resets and a guest's first message. Its Workers AI models read the text of your documents, transcribe your voice notes and build the search index.
• Anthropic's Claude models read your text and files to organize them and write your brief. Anthropic doesn't train on it and, with the zero data retention setting we use, doesn't keep it.
• We may reach these models through OpenRouter instead. It passes each request to a company that runs the model: Anthropic, a cloud provider that hosts Claude, or the maker of another model we choose for a step. OpenRouter and that company handle it under their own data terms.
• Mistral reads scanned pages of PDFs (OCR) when a page has no text.
• Stripe processes payments.
• Twilio texts the code that verifies your phone number when you send your case to attorneys. It never sees your case.
• Google confirms who you are if you choose to sign in with Google. It never sees your case.

Sensitive records

Medical, school and police records, and documents about minors, are flagged as sensitive. Only their dates, issuer, document type and amounts are used to organize your case. They are left out of case packs, share links and lawyer access unless you include them, and the preview card never describes them.

Keeping and deleting

• Guest cases are deleted 24 hours after they are created unless you sign up.
• Deleting a file removes it, the text read from it and the suggestions made only from it; what you already confirmed stays, and a suggestion attached to it waits for your review. A file that came attached to an email is also inside that email until you delete the email.
• Voice recordings stay with the case until you delete the case.
• A deleted case can be restored for 7 days. Then it is removed with its files, voice notes, the text read from them, its search index, its share links and their views, and its access records.
• Exports are removed after 30 days.
• Deleting your account removes your cases, files and credits history; backups roll over within 30 days.
• If we remove illegal content from a case, we keep a copy only as long as the law requires, for reporting.
• You can export everything at any time from a case's menu.

Your rights

You can access, correct, export and delete your data in the app, or ask us at support@tellyourcase.com. We answer within 30 days.

Security

Files are never public: every download goes through a signed-in session and a link that expires. In the app, a case opens only for its owner and for the verified lawyers of firms it is shared with, as described under Sharing. Share link passcodes are stored only as a hash.

Changes

We will tell you about important changes to this policy before they apply.