Privacy Policy & Terms of Use

Effective Date: January 1, 2025

1. Introduction

Welcome to Dockase ("we," "our," or "us"). We are committed to protecting the privacy and security of your data. This Privacy Policy explains how we collect, use, store, and protect your information when you use our legal practice management software and AI services ("Amicus 1.0").

By using Dockase, you agree to the collection and use of information in accordance with this policy. We adhere strictly to the Nigeria Data Protection Act (NDPA) 2023, maintain compliance with the General Data Protection Regulation (GDPR), and follow international security standards including ISO 27001 and soc 2 Type 2.

2. Data Collection & Usage

We collect the following types of information to provide our services:

  • Personal Information: Name, email address, phone number, and professional credentials required for account creation.
  • Client Data: Case files, evidence documents, and legal briefs uploaded by you ("Client Data"). You retain full ownership of all Client Data.
  • Usage Data: Information on how the service is accessed and used, including device information and access logs, for security auditing.

3. AI Processing & Google User Data

Dockase's Amicus Agent integrates with Google services to enhance your legal workflow. In compliance with the Google API Services User Data Policy, we explicitly disclose the following regarding your Google User Data:

Google Data We Access

  • Google Drive Files: We access only the specific files you select or explicitly ask Amicus Agent to search for (e.g., retrieving a case document). We do not scan your entire Drive without initiation.
  • Gmail Messages: We access email threads only when you request a summary, analysis, or draft reply for a specific conversation.
  • User Profile: We access your basic profile information (email address) to authenticate your identity and link your account.

How We Use Your Google Data

  • Processing for User Features: Google user data is used solely to provide or improve user-facing features (e.g., "Summarize this contract from Drive," "Draft a reply to this email").
  • AI Analysis: Selected data is temporarily processed by our AI models (Amicus Agent) to generate the requested output.
  • Zero-Training Policy: We DO NOT use your Google Workspace data (Drive files, Emails) to train our AI models. Your data remains yours.

Data Sharing & Storage

  • No Third-Party Sharing: We do not transfer or sell your Google User Data to third parties (advertising platforms, data brokers, etc.).
  • Storage: We generally do not persist Google User Data (file contents, email bodies) in our database. Data is fetched on-demand, processed ephemerally, and discarded after the session or task is complete.
  • Security: All data transfers occur over encrypted HTTPS connections (TLS 1.3).

4. Data Security & Compliance

We implement defense-in-depth security measures to protect your data:

SOC 2 Type 2

Our infrastructure aligns with SOC 2 Type 2 criteria for Security, Availability, and Confidentiality.

ISO 27001

We follow ISO 27001 information security management standards.

HIPAA

Relevant health data is handled in compliance with HIPAA privacy and security rules.

PCI-DSS

Payment processing is handled by PCI-DSS compliant providers (Paystack/Stripe). We do not store card details.

5. Your Rights

Under the NDPA and GDPR, you have the right to:

  • Access your personal data.
  • Rectify inaccurate data.
  • Request deletion of your data ("Right to be Forgotten").
  • Restrict processing of your data.
  • Data portability.

To exercise these rights, please contact our Data Protection Officer at privacy@dockase.com.

Disclaimer: Dockase provides software for legal professionals. We are not a law firm and do not provide legal advice. The content generated by Amicus 1.0 is for assistance purposes and should be reviewed by a qualified attorney.