Privacy Policy

This policy explains what information Merchant Casefile collects and how we use it. We aim to collect as little as possible and to use it only to deliver the products and support you ask for.

• Contact details you submit through our forms, such as your name and email address.
• Account information for the customer portal — your email address, used to sign you in via a one-time link.
• Case details you enter in the intake form (for example order numbers, amounts, deadlines, carrier and tracking information, and notes).
• Files you upload as part of a case, stored in private cloud storage.
• Purchase information processed by our payment provider (we do not see or store full card details).
• Basic, aggregated technical data needed to operate and secure the website.

• To send the free checklist or resources you request.
• To respond to contact and service inquiries.
• To deliver and support the products and services you purchase.
• To create and organize your case files and let you track them in the portal.
• To maintain the security and reliability of the site.

We do not sell your personal information and we do not use it for third-party advertising.

The customer portal uses passwordless sign-in: you enter your email and we send a one-time link. We store a signed, http-only session cookie to keep you signed in. We never store a password for your portal account.

When you use the kits or the Done-for-You service, you may share records that contain personal data about your own customers (such as names, addresses, or messages). You are responsible for having the right to share these records. We process them only to organize them into a structured case file on your behalf — we do not use them for any other purpose, and we never sell or repurpose them.

Uploaded files are kept in a private storage bucket and are accessed only through short-lived, signed links.

We use a small number of essential cookies only — to keep you signed in to the portal or operator dashboard, and to remember whether you are signed in. We do not use advertising or third-party tracking cookies.

We rely on a few trusted providers to operate the business: a payment processor for purchases, an email provider for transactional messages, cloud storage for case files, and a hosting and database provider. Each processes information only as needed to provide its service.

We protect information with measures appropriate to its sensitivity: private file storage with signed, time-limited access; encrypted transport (HTTPS); http-only, signed session cookies; and access controls on operator tools. No method of transmission or storage is completely secure, but we take reasonable steps to safeguard your data.

We keep information only as long as necessary to provide our products and support, meet legal obligations, and resolve disputes. Uploaded case files are deleted after our stated retention period (by default, 90 days after delivery) unless you ask us to delete them sooner. You may request deletion of the information you have shared, subject to those limits.

• You can unsubscribe from emails at any time using the link in our messages.
• You can request access to, correction of, or deletion of your information.

For privacy questions or requests, email [email protected].