Privacy # Privacy policy for the Case AI app. This page says what Case AI collects, what it does not, who handles it and how long it is kept. It covers the Case AI app at app.caseailegal.com and this website, caseailegal.com. S2Reason LLC runs both. Last updated November 2, 2026 [Start free](https://caseailegal.com/signup) ## Which policy covers what. This policy covers your account information, your use of the app and this website. The files and chats your firm puts in a case are your firm's: how we protect them is on our [Security page](https://caseailegal.com/security), and, if your firm signs one, in our [BAA](https://caseailegal.com/security/baa). The s2reason.com website has its own [privacy policy](https://s2reason.com/privacy). ## What we collect. - **Account information.** Your firm's name, the state it works in, and each user's name, work email and role. We also keep sign-in records, and a random id for each browser you sign in from, so we can warn you about a sign-in from a new browser. - **Billing.** Stripe takes card payments. Stripe sees your firm's billing details, plan and amounts. It never sees case files. - **Your firm's files and chats.** The files you upload, the text we read from them, your questions, the AI's answers and the documents you make. They are stored for your firm, in S2Reason's own AWS account in the United States, and used only to run Case AI for your firm. - **How the app is used.** Counts, timings, error codes, plan and usage figures. They carry ids and codes, never file names, question text or record text. We keep them for up to 2 years. - **Notes on answers.** When you rate an answer, you can add a note about what was wrong. Do not put client details in it, because our staff can read it (see below). - **This website and email.** This website asks for no information. Cloudflare, which serves it, sees your IP address and browser type to deliver pages and block attacks. If you email us, we keep your message and address to answer you. Please do not email client records. ## What we do not do. - **No training.** Your files, questions and answers are never used to train AI. - **No tracking vendors.** We use no analytics or advertising service and no session recording. App usage is recorded in our own database. This website's pages contain no analytics or advertising code. - **No selling.** We never sell personal information or your firm's files, and never use them for advertising. - **No case details in logs.** Our system logs and emails never carry file names, questions or record text. ## Who can see your questions. S2Reason staff can read the questions your firm asks, and any note you type when rating an answer, on one staff-only page inside our own AWS account, to support and improve Case AI. In the ordinary course they do not open your files or read the AI's answers. They open specific content only when your firm asks, or to look into a security problem or misuse. They never use any of it to train AI and never send it by email. Our AI Data Protection Addendum, which any firm can ask for, states this in writing. [About the BAA and the Addendum](https://caseailegal.com/security/baa). ## Cookies. The app sets only the cookies it needs to work: one keeps you signed in, one recognizes a browser you have used before so we can warn you about a sign-in from a new one, and one remembers whether the side panel is open. None track you on other sites. Our code sets no cookies on this website. Cloudflare, which serves it, may set a short-lived security cookie to block automated traffic. Because we do not track you across sites, the app and this site work the same whether or not your browser sends a Do Not Track signal. ## Who handles your information. | Company | What it does | | --- | --- | | Amazon Web Services | Stores files and data, runs the AI (Amazon Bedrock), reads scanned pages (Amazon Textract) and sends account emails, under the AWS Business Associate Addendum. | | Anthropic | Makes Claude, the AI model. It has no access to your questions or answers. | | Stripe | Takes card payments. | | Google Workspace | Runs our support email (support@s2reason.com) and sends BAAs for electronic signature. | | Cloudflare | Serves this website and its domain name. | When web search is on, the AI is instructed to write short search phrases with no client, patient or party names, and they go to AWS's web search tool. Your files are never sent to it. AWS has not confirmed in writing that this tool is covered by its Business Associate Addendum, so web search is off for any firm that has signed our BAA unless the firm asks us in writing to turn it on. ## Legal demands. We disclose information only when the law requires it. If a subpoena or court order demands your firm's content, we send your firm a copy within 5 business days, before we disclose anything, unless the law forbids it, so your firm can object. ## How long we keep it. Your firm's files, chats and documents stay until your firm deletes them. Nothing is deleted because of its age. - **You delete a file, chat or case.** It is deleted in the app right away. Encrypted database backups and scanned-page results can last up to 7 days. - **Your plan ends.** Your files, their text and your chats are deleted 104 days later: 14 days of full access, then 90 days to read and download. We email your firm's account owners once, 30 days before. - **Your firm closes its account.** Everything is deleted 30 days later, including the upload lists and your users' account information. We keep billing records (firm name, plan, amounts and payment references) as tax law requires. - **Usage records.** Kept for up to 2 years. The upload list for each case (file name, page count, who uploaded it and when, and when it was deleted) stays after a file is deleted, so your firm can still show what went in. It is deleted 30 days after the account is closed. If a subpoena, court order or lawsuit requires us to preserve your firm's content, we pause its permanent deletion, including deletes your firm asks for, until the matter ends, and we tell your firm within 5 business days unless the law forbids it; the waiting deletions finish within 2 days after the hold ends. ## Your choices. Your firm can delete any file, chat or case in the app at any time, and can close its account in the app or by email. If your firm asks in writing, we delete any case, or all of its data, within 5 business days. To see, correct or delete your own account information, or with any privacy question, email [support@s2reason.com](mailto:support@s2reason.com). We answer within 30 days. Information about a client or patient in your firm's files belongs to your firm, so we pass any such request to your firm. ## Children. Case AI is for law firms. It is not meant for anyone under 18, and we do not knowingly collect information from children. ## Changes. If we change this policy, we post the new version here with a new date, and we email your firm's account owner before a change that affects how we handle your firm's information. ## Contact. S2Reason LLC P.O. Box 10 Somerville, NJ 08876 United States Email: [support@s2reason.com](mailto:support@s2reason.com) ## Try Case AI free. No card. [Start free](https://caseailegal.com/signup)