CaseDeskPrivacy Policy
Draft of July 21, 2026 · CaseDesk is published by [ENTITY NAME — confirm: Fulks, Inc. / Asaf Fulks] ("we," "us")
The short version
CaseDesk is a local-first desktop application. We do not operate servers that receive, store, or process your case data, and the app contains no analytics or telemetry that transmits your information to us. Your matters, documents, communications, and accounting live in an encrypted database on your own computer. The only data that leaves your machine goes to third-party services you choose to connect, under your own accounts, directly from your computer to that service.
1. Data the app stores — locally
CaseDesk stores the information you put into it: matters, parties, contacts, deadlines, documents, emails you sync, time and billing records, trust ledgers, notes, and settings. All of it resides on your computer in a database encrypted at rest with SQLCipher, keyed through your operating system's credential store. Optional additional field-level and file-level encryption is available in Settings. We have no copy and no access.
2. Services you may connect (your accounts, your choice)
Each integration is off until you connect it with your own credentials. When connected, data flows directly between your computer and that provider, governed by your agreement with them:
- Google (Gmail) — reads email so you can review and file messages to matters. See the Google disclosure below.
- Microsoft (Outlook / Microsoft 365) — reads email for the same review-based filing.
- AI providers (Anthropic, OpenAI, or a local model) — content you submit for drafting or analysis is sent to the provider under your own API key and their terms. With a local model, nothing leaves your machine.
- Stripe — creates payment links for your client invoices under your Stripe account.
- QuickBooks Online — syncs your invoices and payments under your Intuit account.
- Twilio — sends text messages you initiate under your Twilio account.
- Box — searches and links documents in your Box account.
- CourtListener / PACER RSS — retrieves public court data.
API credentials for these services are stored encrypted on your machine. We never receive them.
3. Google API disclosure (Limited Use)
CaseDesk's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically: Gmail data is used only to display messages to you and to let you file them to your matters on your own computer; it is not transferred to anyone (we have no servers to transfer it to), not used for advertising, and not read by any human other than you.
4. The client portal
If you enable the client portal, it is served from your computer. Documents are invisible to portal clients by default and appear only if you individually mark them visible. Portal access and activity are recorded locally.
5. What we collect ourselves
Through the app: nothing. Through this website: standard web-server logs kept by our hosting provider [HOSTING PROVIDER — confirm], and any email you send us. We do not use advertising trackers.
6. Retention and deletion
Because your data is on your machine, retention is under your control: export or delete it in the app, or remove the application and its data directory. There is no server-side copy to request deletion of.
7. Your privacy rights (CCPA/GDPR)
We do not sell personal information, and because we do not collect your case data, most access/deletion requests have nothing for us to act on — the data is already in your possession. For anything relating to website logs or correspondence, contact us below.
8. Children
CaseDesk is a professional tool for licensed attorneys and their staff. It is not directed to anyone under 18.
9. Changes
We will post any changes to this policy on this page with a new effective date.
10. Contact
[SUPPORT EMAIL — interim: asaf@asaffulkslaw.com]