This Privacy Policy for PathClerk, LLC ("PathClerk," "we," "us," or "our") governs the collection, use, and disclosure of personal and professional information through our CaseDaemon service and platform. It is designed to reflect the high standards of confidentiality required for immigration law practice and follows the structure and style of modern AI-legal technology policies.

PathClerk Privacy Policy

1. Introduction

PathClerk, LLC is committed to protecting the privacy and security of the data entrusted to us by immigration law professionals. As a provider of AI-driven productivity software, we recognize the sensitive nature of User Data, particularly as it pertains to attorney-client privilege and immigration practice. This Privacy Policy explains how we handle information in connection with the CaseDaemon platform.

2. Information We Collect

We collect categories of information necessary to provide and maintain the Service:

• Account Information: Name, email address, and professional credentials provided during registration.
• User Data (User Content): All text, prompts, files, and data uploaded to the platform, including "Inputs" (client data for intakes or forms) and "Outputs" (AI-generated summaries or draft documents).
• Usage Data: Aggregated, de-identified technical logs and analytics regarding platform interactions used solely to improve system performance.
• Payment Information: Payment details processed via industry-standard, secure third-party providers.

3. How We Use Information

We process information for the following limited purposes:

• Providing the Service: Operating the CaseDaemon platform, facilitating client intakes and communication, and automating USCIS form completion.
• AI Processing: Transmitting Inputs to Third-Party LLMs to generate requested document drafting or evaluation.
• Quality Assurance: Monitoring data to diagnose technical issues, correct output formatting, or evaluate output quality.
• Safety and Compliance: Investigating suspected violations of our Terms or complying with lawful legal requests.

4. AI and Data Processing Commitments

Our AI processing is governed by strict technical and contractual safeguards:

• Zero Data Retention (ZDR): We utilize Third-Party LLM providers that support ZDR, meaning your User Data is processed in real-time and deleted by the LLM provider immediately after output generation.
• No Training on Your Data: PathClerk does not use your Confidential Information or User Data to train generalized AI models. We will only use Third-Party LLMs if they guarantee your data will not be used for agent training.
• Encryption: All data transmitted to and retrieved from AI services is encrypted in transit and at rest using industry-standard protocols.

We encourage you to check out our Resources section to learn more about the legal ethical requirements in your jurisdiction relating to the use of AI processing.

5. Data Ownership and Confidentiality

• Ownership: You retain all intellectual property rights to your User Data, including AI-generated Outputs.
• Attorney-Client Privilege: Our internal handling of data is designed to be consistent with the requirements of immigration law practice, attorney-client privilege, and attorneys’ ethical obligations.
• Anonymization: Any Usage Data we publish or use for broad business purposes is fully anonymized and aggregated to prevent the re-identification of any Customer or client.

6. Security Measures

We implement industry-standard technical and physical safeguards, including:

• Encryption of User Data at rest and in transit.
• Strict internal access controls to prevent unauthorized access to account information.
• Prompt notification (within 72 hours) in the event of a discovered Security Breach.

7. Data Retention and Retrieval

• Internal Storage: We retain User Data as long as your account is active. Data stored as part of quality assurance or safety and compliance action is deleted once the issue or action is resolved. We will notify you if this process will take longer than 90 days.
• Data Retrieval on End of Service: Upon cancellation or termination of your account, you will have 30 days to retrieve your User Data before it is irrevocably deleted from our systems.

8. Legal Disclosures

We only disclose User Data to third parties when legally compelled to do so – like a court order or subpoena. In such instances, we will notify you (unless legally prohibited) to allow you to seek protective relief, and we will only disclose the minimum portion of data required by law.

9. Your Choices and Rights

You may manage your account settings, deactivate user access, or request data retrieval through your CaseDaemon Administrator account. We will continue to update our Privacy Policy and Terms of Service in order to uphold our commitments to confidentiality and privacy. By continuing to use our platform or services you acknowledge that you will be bound by the updated versions of these documents.

10. Contact Information

If you have questions regarding this Privacy Policy or our data practices, please contact our privacy team at: privacy@pathclerk.com.