CaseSnack Privacy Policy

1. Scope and controller

This Privacy Policy explains how CaseSnack LLC ("CaseSnack," "we," "us," or "our") collects, uses, discloses, retains, and protects personal information when you access or use CaseSnack, including our website, applications, content, practice drills, AI feedback, subscriptions, newsletters, and related services (collectively, the "Service").

For purposes of applicable privacy laws, CaseSnack is generally the controller or business responsible for personal information collected through the Service. If you do not agree with this Privacy Policy, do not use the Service.

2. Personal information we collect

Information you provide to us

• Account information, such as email address, username, name, password or hashed password, profile details, and account preferences.
• Onboarding information, such as daily goals, target firms, areas of focus, skill levels, preparation stage, and product preferences.
• Practice content, such as written answers, voice transcripts, prompts, notes, drill responses, capstone submissions, and other materials you submit through the Service.
• Communications, such as emails, support requests, feedback, survey responses, or other messages you send to us.
• Payment-related information, such as billing details and transaction metadata. Payment card details are processed by our payment processor, and we do not store full card numbers.

Information collected automatically

• Usage information, such as pages viewed, drills started or completed, exhibits opened, lesson progress, XP, streaks, scores, time-on-question, clicks, feature usage, session activity, and referral sources.
• Device and technical information, such as browser type, operating system, device type, screen size, language, approximate location at city or regional level, IP address, identifiers, logs, and error data.
• Performance information, such as page-load times, Core Web Vitals, crashes, bugs, latency, and diagnostic data.
• Cookies, local storage, and similar technologies used for login, security, analytics, preferences, and product functionality.

Information from third parties

• Authentication providers, such as Google or other sign-in providers, may provide basic profile information such as email, name, and avatar URL if you choose to use them.
• Payment processors may provide transaction metadata such as payment status, plan, amount, currency, billing region, card brand, last four digits, expiration month/year, and customer identifier.
• Service providers may provide analytics, deliverability, security, fraud-prevention, or support-related information.

3. How we use personal information

We use personal information to:

• Provide, operate, maintain, secure, and improve the Service.
• Create and manage accounts, authenticate users, save progress, and deliver content.
• Grade practice answers, generate feedback, produce explanations, recommend lessons, and personalize the learning experience.
• Calculate scores, XP, streaks, progress, usage metrics, and peer benchmarks.
• Improve prompts, rubrics, scoring logic, explanations, recommendations, educational content, product features, and platform performance.
• Process subscriptions, payments, invoices, taxes, renewals, cancellations, failed payments, refunds where applicable, and account upgrades or downgrades.
• Send transactional messages, administrative notices, security alerts, product updates, newsletters if you opted in, and support responses.
• Analyze usage, diagnose bugs, monitor performance, test features, prevent fraud, enforce our Terms, and protect the Service.
• Comply with legal obligations, respond to lawful requests, establish or defend legal claims, and complete business transactions such as mergers, acquisitions, financings, or asset sales.

We may use aggregated, de-identified, or anonymized information for analytics, benchmarking, research, product development, business planning, and other lawful purposes.

4. AI providers and automated features

Some features use third-party AI providers and automated systems to grade answers, generate coaching feedback, create practice content, summarize responses, recommend lessons, compute benchmarks, or personalize the Service.

When you submit an answer for grading, the text of your answer, a voice transcript if applicable, and relevant question context or rubric may be sent to third-party AI providers for processing. Newsletter, article, or practice-content generation may also use third-party AI providers.

Voice input may be transcribed by browser or device speech-recognition services. Depending on your browser or device, audio may be processed by the browser or operating-system provider, such as Google, Microsoft, Apple, or another vendor. We do not intend to store raw voice audio unless we expressly tell you otherwise.

We configure third-party AI providers, where available, to limit their use of submitted data for model training. Third-party AI providers process data according to their applicable terms, policies, and data-processing commitments. We do not use your identifiable practice answers, transcripts, or account information to train third-party foundation models unless you expressly consent.

We may use your submissions and performance data to operate, personalize, debug, secure, and improve CaseSnack, including improving prompts, rubrics, scoring logic, explanations, recommendations, benchmarks, educational content, and product functionality. We may also use aggregated or de-identified data to create benchmarks and improve the Service.

5. Cookies, analytics, and similar technologies

We use cookies, local storage, pixels, SDKs, and similar technologies to keep you logged in, remember preferences, secure the Service, analyze product usage, diagnose issues, and improve performance. Examples may include:

• Session cookies and local storage required for login, authentication, account security, and core Service functionality.
• Vercel Analytics or similar hosting analytics to measure page views and basic site usage, generally without cross-site advertising tracking.
• Vercel Speed Insights or similar performance tools to measure page speed, load times, and interaction latency.
• PostHog or similar product analytics tools, if enabled, to understand feature usage, funnels, retention, and product behavior. If enabled, product analytics events may be associated with your account identifier so we can improve the Service and support users.
• Error-monitoring or logging tools to detect bugs, crashes, and platform issues.

We do not use third-party advertising trackers, retargeting pixels, or behavioral ad networks unless we update this Privacy Policy and provide any required notices or choices.

6. How we disclose personal information

We may disclose personal information to:

• Service providers and processors that help us operate CaseSnack, including hosting, database infrastructure, authentication, AI processing, analytics, payment processing, email delivery, customer support, error monitoring, security, and fraud prevention.
• Professional advisors, such as attorneys, accountants, auditors, insurers, and consultants, where reasonably necessary for business operations, compliance, or legal protection.
• Legal authorities, regulators, courts, law enforcement, or other parties when we believe disclosure is required by law, subpoena, court order, legal process, or to protect the rights, safety, property, or security of CaseSnack, users, third parties, or the public.
• Transaction parties in connection with a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar corporate transaction. We will provide notice if required by law.
• Other parties with your consent or at your direction.

We do not sell personal information. We do not share personal information with advertisers for cross-context behavioral advertising. We do not publish or sell individual identifiable practice answers without your consent.

7. Payment processing

Payments are processed by third-party payment processors. We may receive payment metadata such as customer identifier, transaction amount, subscription plan, payment status, billing region, card brand, last four digits, and expiration month/year. We do not store full payment card numbers.

Your payment processor may collect and process payment information according to its own terms and privacy policy. We use payment information to process subscriptions, renewals, cancellations, invoices, taxes, failed payments, refunds where applicable, fraud prevention, and accounting records.

8. Data retention

We retain personal information for as long as reasonably necessary to provide the Service, maintain your account, comply with legal obligations, resolve disputes, enforce agreements, prevent fraud, maintain security, and support legitimate business purposes.

Account information is generally retained while your account is active. Practice answers, transcripts, progress, scores, and usage history may be retained so you can view your history, receive personalized recommendations, and so we can improve the Service.

If you delete your account or request deletion, we will delete or anonymize personal information associated with your account within a reasonable period, generally within 30 days, unless we need to retain it for legal, tax, accounting, security, fraud-prevention, dispute-resolution, or legitimate business purposes.

Transaction records may be retained for tax, accounting, audit, and compliance purposes. Support communications may be retained as needed to address your request and maintain business records. Security logs and diagnostic logs may be retained for a limited period. Residual copies may remain in encrypted backups until overwritten according to our backup schedule.

Aggregated, de-identified, or anonymized information may be retained indefinitely if it is not reasonably linked to you.

9. Security

We use reasonable administrative, technical, and organizational measures designed to protect personal information, including HTTPS, password hashing, access controls, least-privilege practices, encrypted storage at rest where supported by our database provider, vendor security practices where appropriate, and limited internal access.

No method of transmission, storage, or processing is completely secure. We cannot guarantee absolute security. If you believe your account or data has been compromised, contact us promptly at hello@casesnack.com.

10. Your choices and privacy rights

Depending on where you live, you may have rights to access, correct, delete, export, restrict, object to, or withdraw consent for certain processing of your personal information. You may also have the right to opt out of certain uses of personal information, including sale, sharing, targeted advertising, or certain profiling activities. CaseSnack does not sell personal information or share it for cross-context behavioral advertising.

You may exercise rights by contacting us at privacy@casesnack.com. We may need to verify your identity before fulfilling a request. Authorized agents may submit requests where permitted by law, but we may require proof of authorization and verification of identity.

We will respond within the time required by applicable law. If we deny your request, you may have the right to appeal our decision depending on where you live. We will not discriminate against you for exercising your privacy rights.

11. California and U.S. state privacy notice

This section applies to the extent a U.S. state privacy law applies to CaseSnack. The categories of personal information we may collect include identifiers, account information, commercial information, internet or electronic network activity, approximate geolocation, audio-derived transcripts if you use voice features, education or professional-preference information you provide, inferences drawn from usage or performance data, and other information you provide.

We collect and use these categories for the purposes described in this Privacy Policy, including providing the Service, subscriptions, AI feedback, personalization, analytics, security, fraud prevention, support, compliance, and product improvement.

We may disclose these categories to service providers and processors, professional advisors, legal authorities, transaction parties, and other parties with your consent or direction. We do not sell personal information or share it for cross-context behavioral advertising.

We do not knowingly collect sensitive personal information for the purpose of inferring characteristics about you. Please do not submit sensitive personal information, such as medical, financial-account, government-ID, precise geolocation, or highly personal information, in practice answers or prompts unless necessary.

12. EU/UK and international users

CaseSnack is operated from the United States. If you access the Service from outside the United States, your personal information may be transferred to, stored in, and processed in the United States and other countries that may not provide the same level of data protection as your jurisdiction.

For users in the European Economic Area, United Kingdom, or Switzerland, our legal bases for processing may include: performance of a contract to provide the Service; legitimate interests, such as improving the Service, preventing fraud, securing the platform, and communicating with users; consent, such as for optional newsletters or certain cookies where required; and compliance with legal obligations.

Where required, we rely on appropriate transfer mechanisms for international transfers, such as standard contractual clauses or other lawful safeguards. You may have the right to lodge a complaint with your local data-protection authority.

If CaseSnack becomes subject to requirements to appoint an EU or UK representative or data-protection officer, we will update this Privacy Policy with the relevant information.

13. Children and minors

CaseSnack is intended for users 16 years and older. We do not knowingly collect personal information from children under 16. If you are under the age of majority where you live, you may use the Service only with consent of a parent or legal guardian.

If you believe a child has provided personal information to us in violation of this Privacy Policy, contact us at privacy@casesnack.com, and we will take appropriate steps to delete the information.

14. Communications and marketing

We may send transactional or administrative communications, such as account notices, security alerts, subscription notices, billing notices, product updates, and support messages. These are necessary for the Service and you may not be able to opt out of them while maintaining an account.

If you subscribe to optional newsletters or marketing communications, you may unsubscribe using the link in the email or by contacting us. Unsubscribing from marketing communications does not stop transactional or administrative messages.

15. Automated decision-making and profiling

CaseSnack may use automated systems to generate scores, feedback, benchmarks, lesson recommendations, progress insights, or other educational outputs. These outputs are for educational and practice purposes only and do not produce legal, employment, admissions, credit, housing, insurance, or similarly significant effects.

You should not rely on automated outputs as definitive assessments of your ability, employability, admissions prospects, or professional qualifications.

16. Third-party links and services

The Service may contain links to third-party websites, services, resources, or content. We are not responsible for the privacy practices, security, content, or policies of third parties. Your interactions with third parties are governed by their own terms and privacy policies.

17. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide notice by email, in-product notice, or another reasonable method where required by law. The updated Privacy Policy will be effective as of the date stated in the updated version.

Your continued use of the Service after the updated Privacy Policy becomes effective means you acknowledge the updated practices.

18. Contact

Questions, concerns, or privacy requests may be sent to: privacy@casesnack.com.

Legal notices may be sent to: CaseSnack LLC, Austin, TX. Attn: Privacy. Email: privacy@casesnack.com.

See also our Terms of Service.