Privacy Policy

Effective August 12, 2026 (previous version: August 11, 2026) · CaseDesk is published by Fulks, Inc. ("we," "us")

The short version

CaseDesk is a local-first desktop application. Unless you turn on the optional Cloud Sync described below, we do not operate servers that receive, store, or process your case data, and the app contains no analytics or telemetry that transmits your information to us. Your matters, documents, communications, and accounting live in an encrypted database on your own computer. The only data that leaves your machine goes to third-party services you choose to connect, under your own accounts, directly from your computer to that service.

1. Data the app stores — locally

CaseDesk stores the information you put into it: matters, parties, contacts, deadlines, documents, emails you sync, time and billing records, trust ledgers, notes, and settings. All of it resides on your computer in a database encrypted at rest with SQLCipher, keyed through your operating system's credential store. Optional additional field-level and file-level encryption is available in Settings. CaseDesk also writes ordinary diagnostic log files on your machine; these are not encrypted and can contain things like a connected mailbox address or an email subject line, so treat them as you would any other working file on your computer. With Cloud Sync off — the default — we have no copy of any of it and no access. If you turn Cloud Sync on, we hold ciphertext we cannot read, plus the limited account details itemised in the next section.

2. Services you may connect (your accounts, your choice)

Evidence anchoring (OpenTimestamps / Bitcoin) works differently and deserves its own note: when you anchor a document, CaseDesk sends only its SHA-256 fingerprint — never the document, its name, or its contents — to public OpenTimestamps calendar servers, which commit that fingerprint to the Bitcoin blockchain. That is what makes the timestamp independently verifiable, and it is permanent and public: once anchored, a fingerprint cannot be deleted or recalled by you or by us. A fingerprint reveals nothing about the document's contents, but it does prove that a file in exactly that form existed at that time. Anchoring happens per document when you ask for it, unless you switch on automatic anchoring in Settings (off by default).

Each integration is off until you connect it with your own credentials. When connected, data flows directly between your computer and that provider, governed by your agreement with them:

• Google (Gmail and Calendar) — reads email so you can review and file messages to matters, sends messages you compose and choose to send, and, if you turn on calendar sync, writes your deadlines to your Google Calendar (which stores the matter name and deadline title in your Google account). See the Google disclosure below.
• Microsoft (Outlook / Microsoft 365) — reads email for the same review-based filing, sends messages you compose and choose to send, reads your contacts, and, if you turn on calendar sync, writes your deadlines to your Outlook calendar (which stores the matter name and deadline title in your Microsoft account).
• Cloud Sync (optional, off by default) — if you enable it, your CaseDesk data is encrypted on your computer with a key derived from a passphrase only you know, and the resulting ciphertext is stored on infrastructure we operate at Amazon Web Services, Inc. so your other computers can retrieve it. We cannot decrypt it. To run the service we store, in readable form: your license email address (it identifies the account and receives verification codes), a name for each connected computer (taken from the computer's own hostname — rename the computer first if that name is sensitive), your passphrase-wrapped and recovery-code-wrapped encryption keys (which we cannot unwrap), and routing metadata (account and device identifiers, timestamps, sizes, and integrity hashes of the ciphertext). Enrollment sends a one-time verification code to the license email via Amazon SES. Alongside your passphrase you receive a one-time recovery code: if you lose the passphrase, the recovery code, and every connected computer, the synced copy is permanently unreadable — by us as much as by anyone. Document records sync; the document files themselves currently stay on your computers. From within the app you can revoke a lost device's access, sign a device out, or permanently delete all synced data; deletion removes the ciphertext and the stored account records from our databases and storage. Short-lived operational logs for the service (which never contain your case data) are deleted automatically within 30 days.
• AI providers (Anthropic, OpenAI, a custom OpenAI-compatible endpoint you configure, or a local model) — content you submit for drafting or analysis is sent to the provider under your own API key and their terms. With a local model, nothing leaves your machine.
• Stripe — creates payment links for your client invoices under your Stripe account.
• QuickBooks Online — syncs your invoices and payments under your Intuit account.
• Twilio — sends text messages you initiate under your Twilio account.
• Box — searches and links documents in your Box account.
• Cloud storage (OneDrive, Google Drive, Dropbox) — optional document sync between your machine and your own storage account; off by default.
• CourtListener / PACER RSS — retrieves public court data.

API credentials for these services are stored encrypted on your machine. We never receive them.

3. Google API disclosure (Limited Use)

CaseDesk's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically: Gmail data is used only to display messages to you, to let you file them to your matters on your own computer, and to send messages you have composed and chosen to send; it is not transferred to anyone — by default it never touches a server of ours, and if you enable optional end-to-end-encrypted Cloud Sync, what reaches our infrastructure is ciphertext we cannot read — not used for advertising, and not read by any human other than you.

4. The client portal

If you enable the client portal, it is served from your computer. Documents are invisible to portal clients by default and appear only if you individually mark them visible. Portal access and activity are recorded locally on your machine.

5. What we collect ourselves

Through the app: essentially nothing. CaseDesk checks our download host (downloads.casedesk.law) for a new version shortly after launch and periodically while it runs, so we can offer you updates; that request carries no case data and no usage data, and it is the only connection CaseDesk makes on its own. Everything else in Section 2 happens only if you turn it on. Through this website (casedesk.law), our hosting provider, Cloudflare Pages (Cloudflare, Inc.), keeps standard server logs — IP address, browser and device information, and the pages requested — for security and reliability. We also use Cloudflare Web Analytics on this website to count page views and see which pages people actually read. It is a privacy-preserving measurement tool: it sets no cookies, stores nothing on your device, does not fingerprint you, and cannot follow you to other sites — and it runs only on this marketing website, never in the CaseDesk application. We also keep any email you send us; outbound email we send (for example, replies to your inquiries) is delivered through Amazon Web Services, Inc. (Amazon SES), which processes only the recipient address and message content needed to send it. If you use the optional beta-list signup form on this site, the name and email address you enter — along with basic request metadata: your browser's user-agent string, which button on the site you used, and an approximate country our CDN infers from your IP address — are transmitted through an Amazon Web Services endpoint (API Gateway and Lambda) solely to deliver your signup to our inbox; we keep it to send the updates you asked for, and you can ask us to remove it at any time. We do not use advertising trackers, and we do not sell or share this information.

If you're contacting us from outside the United States: we're a U.S. company, and the limited information described above is processed in and transferred to the United States, including through Cloudflare, Inc. and Amazon Web Services, Inc. We process it on the basis of our legitimate interest in operating and securing this site, your consent where you join the update list, and the correspondence you start with us. If you're in the EEA, UK, or Switzerland you may also complain to your local data protection authority.

6. Retention and deletion

Because your case data is on your machine, retention is under your control: export or delete it in the app, or remove the application and its data directory. Unless you use Cloud Sync there is no server-side copy for us to retain or delete; if you do use it, the server-side ciphertext persists until you delete it from within the app (or ask us to), as described in Section 2. Website server logs and correspondence are kept only as long as needed for the purposes above.

7. Security incidents

We use reasonable safeguards to protect the limited information described in Section 5. Because CaseDesk stores your case data only on your own machine and we never receive a copy, a compromise of our website, email, or vendor accounts could not expose your case files. If a security incident does compromise personal information we hold — website logs, the update list, or correspondence — we will notify affected people without undue delay, and any regulator that applicable law requires us to notify.

8. Your privacy rights (CCPA and similar laws)

We're a small company and don't believe we currently meet the CCPA's own thresholds for a covered “business” — we're nowhere near $25 million in annual revenue, we don't buy, sell, or share the personal information of 100,000 or more consumers or households, and none of our revenue comes from selling or sharing personal information. We describe the rights below anyway, as a matter of policy, whether or not the statute formally reaches us. We do not sell or share personal information. The only personal information we hold is the limited website-log and correspondence data described in Section 5. Because we do not collect your case data, most requests to access or delete have nothing for us to act on — that data is already in your sole possession. For requests relating to website logs or correspondence — including the right to know, correct, delete, or opt out — contact us below, and we will respond within 45 days, and tell you if we need a one-time extension for a more involved request. We will not discriminate against you for exercising these rights.

9. Children

CaseDesk is a professional tool for licensed attorneys and their staff. It is not directed to, and we do not knowingly collect information from, anyone under 18.

10. Changes

We will post any changes to this policy on this page with a new effective date.

11. Contact

Fulks, Inc. — admin@casedesk.law