Privacy Policy
Last updated: May 1, 2026
How We Process Your Data
All document processing happens entirely within CaseDelta's own infrastructure. Your documents are never sent to any third-party AI provider for processing or training. Every AI model that analyzes your documents runs inside CaseDelta's secure environment.
Documents are encrypted both at rest and in transit. Delta processes your files solely to provide the service you've requested — building chronologies, identifying anomalies, generating case briefs, and learning your firm's preferences over time.
Every action Delta takes is logged with a timestamp, the document involved, the query, the response, and the sources cited. This audit trail is exportable for bar compliance and your own records.
Google Workspace API Data
CaseDelta integrates with Google Workspace APIs — Google Drive, Gmail, and Google Calendar — to act on behalf of attorneys within their own Google accounts. The agent reads case documents from Drive (read-only), reads and drafts client correspondence in Gmail, and reads and creates case-related events in Calendar.
CaseDelta's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Scopes We Request and Why
- Google Drive (
drive) — to read, search, organize, and write case documents (including Google Docs and Sheets, which reside in Drive) across the firm's Drive. Attorneys query the CaseDelta agent in natural language (e.g., “pull every filing in Smith v. Jones,” “file the deposition transcripts under Smith v. Jones / Discovery,” or “remove the duplicate intake forms”), and the agent must be able to (1) discover and retrieve relevant documents firm-wide for analysis, (2) save AI-generated work product (chronologies, demand letters, deposition outlines, exhibit indexes) back into the matter folder, (3) organize files into per-case folder structures, and (4) delete files at explicit attorney direction (duplicates, superseded drafts, completed-case archives). The narrower drive.file scope is incompatible with this use case because it only grants per-file access to files the user pre-selects, which defeats the agent's ability to discover or organize firm-wide. The narrower drive.readonly scope cannot satisfy use cases (2)–(4). Write and delete actions are always initiated from the attorney's natural-language instruction; CaseDelta does not autonomously modify or delete user files. - Gmail (
gmail.readonly+gmail.compose) — to read case-related correspondence for context and draft replies. CaseDelta never sends email without explicit user confirmation; outgoing messages are created as drafts for the attorney to review and send manually from Gmail. - Google Calendar (
calendar.readonly+calendar.events) — to read case events and create deadline reminders (filing dates, hearings, depositions).
How Google User Data Is Used
Data received from Google APIs is used solely to provide the services the attorney has requested: document retrieval, chronology generation, correspondence drafting, and calendaring. It is processed inside CaseDelta's secure infrastructure, segregated per firm, and returned to the attorney as answers, drafts, or generated documents.
How Google User Data Is Stored and Secured
- All Google user data is encrypted in transit (TLS 1.2+) and at rest (AES-256).
- Data is isolated per firm; no firm's data is ever commingled with or accessible to another firm.
- Access is restricted by OAuth tokens scoped to individual users; CaseDelta engineers cannot view firm data without explicit, time-bound authorization for a specific support request.
- All access is logged with timestamps, query, response, and source citations; logs are exportable by the firm.
How Google User Data Is Shared
CaseDelta does not share, sell, or transfer Google user data to any third party. We do not use Google user data for advertising, and we do not allow humans to read Google user data except (a) with the user's explicit consent for a specific support issue, (b) for security investigations, or (c) to comply with applicable law.
AI/ML Model Training
CaseDelta does not use Google Workspace data — including Gmail messages, Drive documents, or Calendar events — to train, retrain, or fine-tune any AI model. Your data is never fed back into any model's training pipeline.
When Delta answers a question, it reads the specific documents and firm context (such as your firm's preferred document formats, recurring client names, and prior instructions) needed to respond in that moment. This context stays inside your firm's private environment, is never visible to any other firm, and is permanently deleted when your subscription ends. The underlying AI models themselves are not modified by your data in any way.
Data Retention and Deletion of Google Data
Google user data is retained only as long as needed to provide the service. Attorneys and firms can request deletion of any or all Google-derived data at any time by contacting support@casedelta.com. When a subscription is canceled, all Google-derived data is permanently deleted 30 days after cancellation.
What We Never Do
These commitments are architectural, not policy. They are built into how CaseDelta works:
- We never use your data to train AI models. Your documents, queries, and Delta's responses are never fed back into any model's training pipeline.
- We never share client data across firms. Each firm's data is completely isolated. What Delta learns about your firm stays with your firm.
- We never sell your data to third parties. Not to advertisers, not to data brokers, not to anyone.
- We never access your data without authorization. CaseDelta engineers cannot view your documents or case data without explicit permission for a specific support request.
Data Retention
Documents are retained according to your firm's configured retention settings within CaseDelta. You control how long your data is kept.
Account data is retained while your account is active. If you cancel your subscription, you have 30 days to export all of your data. After that period, all data — documents, case information, and Delta's learned intelligence about your firm — is permanently deleted.
Your Rights
You have full control over your data at all times:
- Export — download all your data, including documents, case files, and audit logs, at any time.
- Delete — request deletion of any or all data at any time.
- Opt out — opt out of marketing communications at any time.
- Inquire — request a summary of what data we hold about you and your firm.
For any data request, contact support@casedelta.com.
By using CaseDelta, you acknowledge understanding and accepting this Privacy Policy.