Privacy Policy

1. Who We Are

CauseAlert (“we”, “us”, “our”) operates the CauseAlert service. For privacy-related queries, contact us at founders@causealert.com.

2. What Data We Collect

2.1 Account Information

When you create an account, we collect:

• Full name
• Email address
• Password (stored hashed — we do not store plaintext passwords)
• Organisation/firm name (if you provide it)
• SRA ID (if you provide it)
• Phone number (if you provide it)

2.2 Case Monitoring Data

When you set up case alerts, we store:

• Case references and labels you choose to monitor
• Claimant and defendant names you enter
• Court selections
• Matter references (your internal notes)

2.3 Notification & Preference Data

• Your notification channel preferences (email, SMS, push)
• Alert email address (may differ from your login email)
• Daily digest preferences
• Records of notifications sent to you (timestamps, delivery status)

2.4 Third-Party Integration Data

If you connect third-party services, we store:

• Google Calendar: OAuth tokens and calendar event IDs for hearings we sync.
• Google Contacts: Contact names, emails, and phone numbers you choose to import.

OAuth tokens are used to maintain the integration. You may revoke access at any time through your account settings or Google's own settings.

2.5 Technical & Analytics Data

Our authentication system records:

• IP address
• Browser user agent string
• Session tokens

If you consent to analytics cookies, Google Analytics and Vercel Analytics may also collect:

• Pages viewed and interactions
• Device type, screen resolution, and browser version
• Approximate geographic location (from IP address)
• Referral source
• Web performance metrics (page load times, Core Web Vitals)

2.6 Payment Data

Payments are processed entirely by Stripe. We do not receive or store your full card number or CVV. Stripe may share with us the last four digits of your card, card brand, and billing address.

2.7 Client Invitation Data

If you invite clients to cases, we store the name, email, phone number, and case reference you provide until the invitation is accepted, declined, or withdrawn.

3. How We Use Your Data

We use your data to:

• Provide and operate your account and the Service.
• Send you case alert notifications via the channels you have enabled (email, SMS, push).
• Send you service communications including account updates, system notices, and product announcements.
• Sync hearing events to your calendar when you enable this feature.
• Process payments for paid features.
• Respond to your support requests.

4. Consent to Communications

By providing your email address, phone number, or enabling push notifications, you expressly consent to receive communications from us through those channels. This includes case alerts, service notifications, account updates, system messages, product announcements, and any other communications related to the Service.

You may update your notification preferences at any time in your account settings. Essential service communications (account security, Terms changes, critical notices) will continue for as long as your account is active.

5. Legal Basis for Processing

Under UK data protection law, we process your data on the following bases:

• Contract: Processing necessary to provide the Service you signed up for (account, alerts, integrations).
• Consent: You consent to communications when you provide your contact details and enable notification channels. You may withdraw consent at any time via your account settings.
• Legitimate interests: Preventing abuse and maintaining security of the Service.
• Legal obligation: Where we must process data to comply with applicable law.

6. Who We Share Data With

We do not sell your personal data. We use the following third-party services to operate CauseAlert:

• Convex:Hosts our database and backend infrastructure. Your data is stored on Convex's servers.
• Resend: Delivers email notifications. Receives your email address and alert content.
• Twilio: Delivers SMS notifications. Receives your phone number and alert content.
• Stripe: Processes payments. Receives your payment details directly.
• Google: Provides calendar sync and contact import when you connect your Google account. If you consent to analytics cookies, Google Analytics receives usage data.
• Vercel: Hosts the Service and, if you consent to analytics cookies, collects anonymous performance and usage data via Vercel Analytics.
• Expo: Delivers push notifications to your devices.

Each of these services has its own privacy policy and terms. We may also disclose data where required by law or court order.

7. International Data Transfers

Several of our third-party service providers (Convex, Stripe, Twilio, Google, Vercel, Expo) are based in the United States. By using the Service, your data may be transferred to and processed in the United States or other countries where these providers operate. These countries may have different data protection laws than the UK.

8. Data Retention

We retain your data for as long as your account is active. If you request account deletion, we will delete your personal data, except where we are required to retain it by law (for example, payment records for tax purposes).

9. Your Rights

Under UK data protection law, you have the right to:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Ask us to correct inaccurate or incomplete data.
• Erasure: Ask us to delete your personal data, subject to legal retention requirements.
• Restriction: Ask us to restrict processing in certain circumstances.
• Data portability: Receive your data in a structured, machine-readable format.
• Object: Object to processing based on legitimate interests.
• Withdraw consent: Where processing is based on consent, withdraw it at any time.

To exercise any of these rights, email founders@causealert.com. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

10. Cookies & Analytics

We use the following cookies:

• Strictly necessary cookies: Authentication session tokens and consent preferences. These are required for the Service to function and cannot be disabled.
• Preference storage:Your theme choice (light/dark mode), stored in your browser's local storage.
• Analytics & advertising cookies: We use Google Analytics, Google Ads, Facebook Pixel, Vercel Analytics, and Statsig to understand how the Service is used, measure the effectiveness of our advertising, and improve your experience.

Consent for registered users

By creating an account, you consent to the use of analytics and advertising cookies as described above. This consent is given as part of accepting our Terms of Service during registration. You will not be shown a separate cookie consent banner while signed in.

Consent for visitors

If you are not signed in, you will be shown a cookie consent banner on your first visit. You can accept or decline non-essential cookies. You can change your preference at any time via the cookie banner.

Analytics data is used to improve the Service. We do not sell your personal data to advertisers. Advertising cookies are used solely to measure the performance of our own ads.

11. Data Security

We use third-party infrastructure providers (primarily Convex) to store and process data. We rely on the security measures implemented by these providers. We hash passwords and transmit data over encrypted connections (TLS).

No system is completely secure. We cannot and do not guarantee the absolute security of your data.

12. Children

The Service is not directed at anyone under 18. We do not knowingly collect data from children. If you believe a child has provided us with personal data, contact founders@causealert.com.

13. Court Data & Personal Information in Listings

Court listings sourced from HMCTS contain personal data (names of defendants, parties, and judges) as part of the public court record. This data is Crown copyright. We display this data in support of the principle of open justice. Where court listings relate to criminal proceedings, defendant names alongside charges may constitute criminal offence data under section 11(2) of the Data Protection Act 2018.

If you are named in a court listing and believe there are grounds for removal — including an active reporting restriction under the Children and Young Persons Act 1933, the Sexual Offences (Amendment) Act 1992, the Contempt of Court Act 1981, or any other statutory provision or court order — contact us at founders@causealert.com or contact the relevant court directly. We will remove or redact data promptly upon receipt of a valid court order or confirmation of an applicable restriction.

14. Changes to This Policy

We may update this Privacy Policy at any time by posting the revised version on this page. The “last updated” date at the top indicates when it was last revised. Your continued use of the Service after changes are posted constitutes acceptance.

15. Contact

For privacy-related queries or data subject requests, email founders@causealert.com.