CaseDocket

Privacy Policy

Version 1.0 · Effective 27 April 2026

1. Who we are

This privacy policy is issued by WildCam PTY LTD trading as CaseDocket(“CaseDocket”, “we”, “us”), the responsible party under the Protection of Personal Information Act 4 of 2013 (“POPIA”).

  • Physical address: P114 Beach Lane, Knysna 6570, South Africa
  • Domain: CaseDocket.com
  • Privacy contact: russell@wildcam.tv
  • Information Officer (POPIA s.56): Russell Belter

2. What personal information we collect

  • Account information: your name, email address, and a hashed password.
  • Documents you upload: the files you choose to upload to a matter. These may contain special personal information as defined in POPIA s.26 — including health, criminal behaviour, religious beliefs, biometric data, or racial/ethnic origin — to the extent it is contained in the legal documents you upload.
  • Chat messages, drafts, and research queries you generate inside the service.
  • Technical data: IP address, browser type, device, and usage logs.

3. How we collect it

We collect personal information directly from you when you sign up, upload documents, send chat messages, generate drafts, or run research queries.

4. Why we process it (legal bases)

  • Performance of contract (POPIA s.11(1)(b)): to provide the service you have signed up for.
  • Legitimate interests (POPIA s.11(1)(f)): securing the platform, preventing abuse, improving the product.
  • Explicit consent for special personal information (POPIA s.27(1)(a)):captured at signup so we can process the contents of legal documents you upload.

5. Sub-processors and international transfers

To deliver the service we use the sub-processors listed below. Personal information may be transferred outside South Africa. The basis for these cross-border transfers is your consent and the contractual necessity exceptions in POPIA s.72(1)(b) and (c). Each sub-processor is bound by its own privacy commitments and our processing agreements.

  • Supabase Inc. (USA / EU hosting region) — database, file storage, authentication.
  • Anthropic, PBC (USA) — AI document analysis and chat responses.
  • Voyage AI (USA) — embedding generation for document search.
  • Tavily (USA) — South African legal source web search.
  • LlamaIndex Inc. (USA) — PDF parsing.
  • Vercel Inc. (USA / global edge) — application hosting and content delivery.

6. How we secure your data

We use encryption at rest, encryption in transit (TLS), per-user row-level security in the database, strict access controls, and audit logging. No system is perfectly secure, but we apply industry-standard safeguards appropriate to the sensitivity of legal data.

7. How long we retain data

  • Documents and drafts: until you delete them or close your account.
  • Account data: 12 months after closure for legal and accounting reasons.
  • Audit logs: 24 months.

8. Your POPIA rights

  • Access (s.23): request a copy of your personal information.
  • Correction or deletion (s.24): ask us to fix or delete your data.
  • Object to processing (s.11(3)): object on reasonable grounds.
  • Withdraw consent at any time.
  • Lodge a complaint with the Information Regulator:
    enquiries@inforegulator.org.za · complaints@inforegulator.org.za · www.inforegulator.org.za

To exercise any of these rights, email russell@wildcam.tv.

9. Cookies and tracking

We use a Supabase authentication cookie and a session cookie that are strictly necessary for the service to work. We do not use third-party advertising or marketing trackers.

10. Children

CaseDocket is intended for users 18 years and older. We do not knowingly collect data from minors. If you believe a minor has used the service, contact us so we can remove their information.

11. Data breaches

If a security compromise occurs that affects your personal information, we will notify the Information Regulator and affected users as soon as reasonably possible, in line with POPIA s.22.

12. Changes to this policy

If we update this policy, we will notify you by email and display a banner on your next login. Continued use after notice constitutes acceptance of the updated policy.

13. Effective date and version

This Privacy Policy is version 1.0 and is effective from 27 April 2026.