Privacy policy

Last updated: July 2026

CaseFuze ("CaseFuze," "we," "us," or "our") provides legal practice management software to law firms. This Privacy Policy explains what information we collect, how we use and protect it, and the choices you have. It applies to our website and application (together, the "Service").

Law firms that use CaseFuze (our "Customers") control the client and matter information they store in the Service. For that information, the firm acts as the controller and CaseFuze acts as a processor on the firm's behalf.

Information we collect

We collect the following categories of information:

• Account and firm details. Names, work email addresses, phone numbers, firm name, role, and login credentials for the people your firm invites to the Service.
• Billing information. Your subscription plan, number of users, and payment details, which are handled by our payment provider.
• Customer data. The matters, contacts, documents, calendars, time entries, invoices, and trust-accounting records your firm enters or uploads. This content may include your clients' personal information and, for some firms, protected health information.
• Financial connection data. When you connect a trust or operating account, we receive read-only transaction data through Plaid to support reconciliation. We cannot move funds.
• Usage and device data. Log data such as IP address, browser type, the pages and features used, and timestamps, which help us secure and improve the Service.
• Cookies. We use cookies and similar technologies as described below.

How we use information

• To provide, operate, and maintain the Service, including trust-account reconciliation and the features your firm uses.
• To authenticate users, secure accounts, and detect and prevent fraud or abuse.
• To process payments and manage your subscription.
• To provide customer support and respond to your requests.
• To monitor, troubleshoot, and improve the Service.
• To comply with our legal obligations and enforce our agreements.

How we share information

We do not sell your personal information, and we do not share it with third parties for their own advertising or marketing. We share information only in these limited circumstances:

• Service providers. With vendors who host, secure, and support the Service, such as cloud hosting, payment processing, bank-data connectivity through Plaid, and email delivery. These providers may use the information only to perform services for us, under contractual confidentiality and security obligations.
• At your firm's direction. When you enable an integration or ask us to share data with another service you use.
• Legal and safety. When required by law, subpoena, or legal process, or to protect the rights, safety, and property of CaseFuze, our Customers, or others.
• Business transfers. In connection with a merger, acquisition, or sale of assets, subject to this Policy.

HIPAA and health information

Some firms use CaseFuze to store protected health information ("PHI") as part of their client matters. Where CaseFuze functions as a "business associate" under the U.S. Health Insurance Portability and Accountability Act ("HIPAA"), we handle PHI in accordance with a Business Associate Agreement ("BAA") with the firm and maintain administrative, physical, and technical safeguards designed to protect that information. If your firm handles PHI and needs a BAA in place, contact us.

How we protect your data

We use industry-standard safeguards to protect your information, including encryption in transit and at rest, role-based access controls, continuous backups, and activity logging. Our security program is independently audited to the SOC 2 Type II standard, and bank connections are read-only. No method of transmission or storage is completely secure, but we work to protect your information and to notify you of material incidents as required by law.

How long we keep information

We keep account and Customer data for as long as your firm's account is active and as needed to provide the Service. After an account closes, we retain information only as long as necessary to meet legal, regulatory, tax, and trust-accounting recordkeeping obligations, after which it is deleted or de-identified. Your firm can export or request deletion of its data at any time, subject to those obligations.

Your rights and choices

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information, and to object to or restrict certain processing. Because much of the information in the Service is controlled by the law firm that entered it, we may direct requests about that content to the firm. To exercise your rights or ask a question, use our Contact page. We will not discriminate against you for exercising these rights.

Cookies and tracking

We use cookies that are necessary for the Service to function, such as keeping you signed in, and a limited set of analytics cookies that help us understand how the Service is used. You can control cookies through your browser settings. We do not use cookies for cross-context behavioral advertising.

Third-party services

The Service integrates with third-party tools you choose to connect, currently Plaid for bank feeds and our payment processors, with further connections such as email, calendar and cloud storage providers planned. Those services handle your information under their own privacy policies, and we encourage you to review them.

Children's privacy

The Service is intended for law firms and their staff, not for children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us information, contact us and we will delete it.

Where your data is processed

CaseFuze is operated in the United States, and your information is processed and stored there. If you access the Service from outside the United States, you understand that your information will be transferred to and processed in the United States.

Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will post the updated policy here and revise the "Last updated" date above. Your continued use of the Service after an update means you accept the revised policy.

Contact us

If you have questions about this Privacy Policy or how we handle your information, reach us through the Contact page.