Privacy Policy

1. Introduction

CaseWin AI ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform and services.

We comply with the Nigeria Data Protection Regulation (NDPR) 2019 and other applicable data protection laws. By using our Service, you consent to the data practices described in this policy.

2. Information We Collect

2.1 Personal Information

We collect information you provide directly, including:

• Account Information: Name, email address, phone number, password
• Profile Information: User type (client, lawyer, law firm), profile photo
• Lawyer Credentials: NBA enrollment number, specializations, years of experience, law firm affiliation
• Payment Information: Billing address, payment method details (processed securely by Korapay)
• Communication Data: Messages, consultations, and correspondence through our platform

2.2 Automatically Collected Information

• Device Information: IP address, browser type, operating system
• Usage Data: Pages visited, features used, time spent on platform
• Cookies: Session cookies, authentication tokens, preference cookies

2.3 Legal Documents

When you use our AI tools, we may process legal documents you upload for drafting, analysis, or review purposes. This content is processed securely and used solely to provide the requested services.

3. How We Use Your Information

We use the collected information to:

• Provide, maintain, and improve our services
• Process transactions and send related information
• Verify lawyer credentials and maintain marketplace integrity
• Send administrative notifications and updates
• Respond to inquiries and provide customer support
• Analyze usage patterns to improve user experience
• Detect, prevent, and address technical issues or fraud
• Comply with legal obligations

4. Data Sharing and Disclosure

We may share your information in the following circumstances:

4.1 Service Providers

We share data with trusted third-party service providers who assist us in operating our platform:

• Supabase: Database and authentication services
• Korapay: Payment processing
• xAI: AI-powered document analysis and generation
• Vercel: Hosting and infrastructure

4.2 Lawyer-Client Connections

When you book a consultation with a lawyer, relevant information is shared to facilitate the service. This includes contact details and case-related information you choose to share.

4.3 Legal Requirements

We may disclose your information if required by law, court order, or government request, or to protect our rights, privacy, safety, or property.

5. Data Security

We implement appropriate technical and organizational measures to protect your data, including:

• Encryption of data in transit (HTTPS/TLS)
• Encryption of sensitive data at rest
• Regular security assessments and updates
• Access controls and authentication requirements
• Secure data centers with physical security measures

However, no method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. We may retain certain information for longer periods as required by law or for legitimate business purposes, such as:

• Financial transaction records (7 years for tax purposes)
• Legal documents (as long as legally required)
• Account information (until deletion is requested)

7. Your Rights Under NDPR

Under the Nigeria Data Protection Regulation, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data (subject to legal obligations)
• Restriction: Request limitation of data processing
• Portability: Request transfer of your data to another service
• Objection: Object to certain types of data processing
• Withdraw Consent: Withdraw previously given consent at any time

To exercise these rights, please contact us at privacy@casewin.ai

8. Cookies Policy

We use cookies and similar technologies to:

• Keep you signed in to your account
• Remember your preferences and settings
• Understand how you use our platform
• Improve our services based on usage patterns

You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of our services.

9. Children's Privacy

Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

10. International Data Transfers

Your information may be transferred to and processed in countries other than Nigeria where our service providers operate. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable laws.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. Material changes will be communicated via email or platform notification.

12. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

You also have the right to lodge a complaint with the National Information Technology Development Agency (NITDA), the supervisory authority for data protection in Nigeria.