Privacy

CaseMap is operated from 55 Hallcrown Place, North York, Toronto, Ontario, M2J 4R1, Canada. For anything about your data — a copy of it, a correction, or deletion — write to mail@casemap.app.

Only what the product needs to work. In practice that is:

• Your account. Your email address, and a password we never see in readable form. If you sign in with Google we receive your email address and name from Google, and nothing else.
• Your community profile. The handle you choose, an optional display name and short bio, and your notification settings. This is what other people in the community see.
• What you write in the community. Your topics, replies, likes and direct messages.
• Your case, if you start one. What you write in the story sections, the documents you upload, the dates and events built from them, and the notes the app makes about where something is unclear.
• Appointments. Who you booked, when, the short subject line you wrote, and the name you chose to show the professional.
• A record of what happened. When you signed in, what you shared and with whom, and when a share was withdrawn — including the browser you used. This exists so you can see who reached your file, and so can we if you ask.
• If you are a legal professional. Your licence number, jurisdiction, and any document you upload to prove you hold that licence.

• We do not sell your data, and we do not share it for advertising.
• We run no analytics, no tracking pixels and no third-party scripts. Nobody is measuring what you read here.
• We set one cookie, which remembers whether the menu is open. Your sign-in is kept in your browser's own storage, not in a cookie that follows you around.
• We do not build a profile of you, and we do not use your case to train anyone's AI model.
• We never send anything about your case to anyone unless you have chosen to share it.

• In Canada. The database and your uploaded documents are stored with Supabase in the AWS Canada (Central) region, in Montreal.
• The website itself is served by Vercel, which has servers in many countries. Pages are delivered from wherever is nearest to you; your data is not stored there.
• Email is sent through Resend. They handle the message on its way to your inbox. We tell them your email address and the text of the message, which never contains anything about your case.
• AI processing happens at Anthropic, in the United States, and only if you have given permission. See the next section.

Some parts of CaseMap send text to an AI service run by Anthropic — for example to pull dates out of a document, or to notice where a document and your account do not line up.

None of this happens unless you have turned it on. You are asked separately, you can withdraw permission at any time on the Consent screen, and every one of these features checks your permission each time it runs. If permission is off, the feature stops and tells you why rather than proceeding.

What is sent is the text of the material being examined. Your name, your email address and your account identifier are not sent with it. Anthropic processes the request and returns a result; under their terms for business customers, they do not use it to train their models.

Machine translation is a separate permission, asked for separately, and works the same way.

• You, always.
• A legal professional you have chosen to share with — and only the parts you chose, and only until the share expires or you withdraw it.
• Nobody else. Not other people in the community, not other professionals at the same firm, and not other CaseMap users under any circumstances.

Every share is written down: what was shared, with whom, when it started and when it ended. You can read that list yourself on the Activity screen. Booking an appointment with a lawyer does not share your case — that is a separate decision you make separately.

You post under a handle you choose. Nobody in the community can see anything about your case, and nothing you write in the community is attached to it. Before you post publicly, CaseMap checks your draft for things that could identify you — a phone number, an address, a full date of birth — and warns you. It warns; it does not stop you.

Direct messages are readable by the two people in the conversation and by nobody else. If you report a conversation, only the specific messages you tick are shown to a moderator.

• Everything travels over an encrypted connection, and is encrypted where it is stored.
• Access rules are enforced by the database itself, not only by the app, so a fault in the website cannot hand your case to someone else.
• Your documents cannot be altered or deleted once uploaded, including by you — a new version is added instead. This protects the record; see the next section for how to have it removed entirely.
• Only the people who operate CaseMap can reach the underlying systems, and what they do is logged.

While your account is open, we keep what you have written so that it is there when you come back. Your story is kept as a series of versions rather than overwritten, so you can see what you said before and when you changed it.

You can ask for your case to be deleted from the Privacy and Sharing screen. The request is recorded with a date thirty days ahead, so you have time to change your mind, and you can cancel it during that period.

On that date a scheduled job removes the case: everything you wrote, every document you uploaded and every file behind it, and everything the app worked out from them. The record that you asked for a deletion and that it was carried out is kept — it is the only proof the deletion happened, and it no longer refers to anything.

Your account and anything you wrote in the community are not deleted by this. The community was built to be separate from your case, and other people may be mid-conversation with you. If you want your account removed as well, write to mail@casemap.app and we will do it by hand.

Canadian privacy law gives you the right to see what we hold about you, to have mistakes corrected, and to withdraw a permission you gave earlier. Write to mail@casemap.app and we will answer within thirty days.

If you are not satisfied with how we have handled it, you may complain to the Office of the Privacy Commissioner of Canada. Using CaseMap has nothing to do with your immigration or asylum claim, and complaining to us or about us cannot affect it.

CaseMap is not built for children and you must be 16 or older to create an account. If you believe a child has an account, write to mail@casemap.app and we will remove it.

If we change what we collect or who we send it to, we will change this page and update the date at the top. While CaseMap is in testing, expect this page to change as the product does.