1. What CaseMCP does
CaseMCP connects an AI assistant selected by a customer to that customer’s case management system. When an authorized user asks the assistant a question or approves an available action, CaseMCP retrieves or sends the requested information through the connected system’s API.
The customer controls which case management connection is available, who receives a license, and whether write access is enabled. Write access is off by default.
2. Information we collect
Account and firm information
We collect information needed to create and administer an account, such as names, work email addresses, firm name, membership and license assignments, sign-in records, and account settings.
Connection information
We process credentials, access tokens, refresh tokens, account identifiers, and similar information needed to connect to a customer’s case management system. We encrypt stored connection secrets and use them only to provide and maintain the connection.
Case management data
CaseMCP processes case, matter, contact, note, document, and related information only when needed to answer an authorized request or perform an authorized action. We do not maintain a copy of case files or document contents as a CaseMCP database. We may cache the connected firm’s field names, layouts, and schema so the AI assistant can accurately understand that firm’s system.
Usage and technical information
We collect limited operational information such as the user and connection involved in a tool call, daily call counts, dates and times, IP address, browser or device information, and error and security logs. We use this information to operate, secure, support, and bill for the service. Our daily usage counter does not record the substance of a firm’s question.
Billing and communications
We collect billing status, purchased license quantity, and related subscription records. Our payment processor handles payment card details. If you contact us or book a call, we collect the information you provide in that communication.
3. How we use information
We use information to:
- provide, authenticate, and maintain CaseMCP;
- connect authorized AI assistants and case management systems;
- apply account, license, trial, and write-access settings;
- process payments and administer subscriptions;
- provide support and service notices;
- detect abuse, investigate errors, and protect the service;
- comply with law and enforce our agreements; and
- improve reliability and the user experience.
We do not sell personal information. We do not use personal information for cross-context behavioral advertising.
4. AI assistants and connected services
CaseMCP works at a customer’s direction with third-party services, including ChatGPT, Claude, Gemini, Filevine, Neos, Clio, MyCase, and FileMaker. The services actually available depend on the customer’s configuration. Information sent to or received from a third-party service is also governed by that service’s terms and privacy practices.
A customer should connect only AI products and case management accounts it is authorized to use. CaseMCP does not control whether an AI provider retains conversations, uses submitted content, or makes the content available to workspace administrators. Customers should select and configure their AI provider appropriately for their legal, confidentiality, and regulatory obligations.
5. How we share information
We may disclose information:
- to the AI assistant and case management system selected by the customer, as needed to carry out the user’s request;
- to infrastructure, authentication, email, payment, document processing, monitoring, and support providers that process data for us under contractual restrictions;
- to the customer account’s administrators and authorized users;
- when reasonably necessary to comply with law, protect rights or safety, investigate fraud or abuse, or enforce an agreement; or
- as part of a merger, financing, acquisition, reorganization, or sale of assets, subject to appropriate confidentiality protections.
We do not share mobile opt-in information or consent with third parties for their marketing purposes.
6. Customer responsibility and legal data
The customer determines the purposes and means of processing the data in its case management system. For that data, the customer is the controller or business and CaseMCP acts as its service provider or processor. The customer is responsible for notices, permissions, and a lawful basis for using CaseMCP with client and case information.
If applicable law requires a data processing addendum or business associate agreement, it applies only when separately executed by the parties. Nothing in this policy by itself creates such an agreement.
7. Cookies
We use cookies and similar storage needed for sign-in, security, and core site operation. We do not use third-party advertising cookies on CaseMCP. Blocking essential cookies may prevent account features from working.
8. Retention
We keep account, connection, billing, schema, usage, and security information for as long as reasonably needed to provide CaseMCP, comply with law, resolve disputes, and enforce agreements. Connection credentials are removed or made unusable when a connection is deleted or rotated, subject to limited backup retention. Transient case and document content is retained only as needed to complete the request, diagnose an active failure, or meet a legal obligation.
9. Security
We use administrative, technical, and organizational safeguards designed to protect information, including encryption of stored connection secrets, access controls, and revocable credentials. No system is completely secure, and we cannot guarantee that information will never be accessed, disclosed, altered, or lost.
A URL containing a CaseMCP connection token is a bearer credential. Customers should protect it like a password and rotate or delete it promptly if it may have been disclosed.
10. Your choices and rights
Depending on where you live, you may have rights to access, correct, delete, restrict, or receive a copy of personal information, or to object to certain processing. A customer’s account administrator can manage members, licenses, and connections. You may also contact us using the details below.
If your information was provided to us by a law firm or other customer, we may direct your request to that customer because it controls the underlying case information. We will not discriminate against you for exercising an applicable privacy right.
11. Children and international use
CaseMCP is a business service and is not directed to children. We do not knowingly collect personal information directly from children under 13. Information may be processed in the United States and other locations where our service providers operate. When required, we use appropriate safeguards for international transfers.
12. Changes to this policy
We may update this policy as CaseMCP or applicable law changes. We will post the revised policy here and update the date above. If a change materially affects how we handle information, we will provide additional notice when required.
13. Contact us
Privacy questions and requests may be sent to hello@casemcp.com or:
Record System, Inc.
817 S Main St
Las Vegas, NV 89101
United States
+1 702-337-3127