Case X Portal Privacy Policy
Effective: July 11, 2025

NOTICE OF BINDING ARBITRATION; JURY AND CLASS ACTION WAIVERS

OUR PORTAL TERMS OF SERVICE, INCORPORATED HEREIN BY REFERENCE,  INCLUDES A BINDING ARBITRATION AGREEMENT AND JURY AND CLASS ACTION WAIVERS, WHICH AFFECT YOUR RIGHTS ABOUT RESOLVING ANY DISPUTE WITH CASE X.

1.    General; Acceptance of These Terms of Service; Additional Terms.

A.    This Portal Privacy Policy and our Portal Terms of Service, incorporated herein by reference, form a legally binding agreement between Case-X LLC (“Case X”, the “Company”, “we”, “us” or “our”) and the individual or entity (“you”). Law Firm Users and Healthcare End Users (defined below) are collectively referred to as “Users”.

B.    This Portal Privacy Policy applies to the access and use of (i) the digital or online services, the Healthcare End User Services, or Law Firm End User Services (as applicable and as defined herein) (collectively, “Services”); and (ii) websites (including https://www.mycasex.com, or such other URLs or web addresses as may be made available by Case X from time to time) made available by Case X, including but not limited to all associated protocols (e.g., https and https), subdomains and paths associated with the relevant domains as well as certain promotional sites, landing pages or other websites that make reference to this Agreement (collectively, “Sites”).Without limiting anything herein, any reference to our Services shall include our Sites. 
A.    Services may be subject to additional terms and conditions in the Case X Sign Up Agreement or specified by us from time to time. Use of our Services are subject to such additional terms and conditions (“Additional Terms”), which are incorporated into this Portal Privacy Policy and our Portal Terms of Service by this reference. To the extent any provision of any Additional Terms conflict with any provision of this Portal Privacy Policy or our Portal Terms of Service, such Additional Terms shall control, but only for the purposes of the specific Service(s) to which they pertain.  For the avoidance of doubt, our website general terms of use and website general privacy policy does not constitute Additional Terms and shall not either control or supplement this Portal Privacy Policy, our Portal Terms of Service, or any Additional Terms. 
B.    Users are required to comply with all operating rules, policies and procedures that may be published from time to time or otherwise transmitted by Case X, each of which is incorporated by reference and each of which may be updated from time to time.
C.    BY ACCESSING OR USING OUR SERVICES AND/OR SITES OR CLICKING “ACCEPT” WHEN SUCH OPTION IS MADE AVAILABLE TO YOU, YOU ACKNOWLEDGE THAT YOU HAVE, AMONG OTHER THINGS, READ THIS PORTAL PRIVACY POLICY AND AGREE TO BE BOUND BY THEM.
D.    IF YOU DO NOT AGREE TO THIS PORTAL PRIVACY POLICY AND ANY APPLICABLE ADDITIONAL TERMS THAT MAY APPLY, YOU MUST NOT ACCESS OR USE OUR SERVICES OR SITES.

2.    Changes To This Policy.

A.    We may revise and update our Portal Privacy Policy from, time to time, in our sole discretion. To the extent permitted by law, all changes are effective immediately when we post them and apply to all access to and use of our Services and Sites thereafter.

B.    Your continued use of our Services and Sites following the posting of revised Portal Privacy Policy means that you accept and agree to the changes. To the extent required by law, we may require your consent to such changes. Nevertheless, you are expected to check this Portal Privacy Policy each time you access or use our Services or Sites so you are aware of any changes, as they are binding on you.

C.    In certain cases, we may also provide email notification of our revised Portal Privacy Policy.

D.    You are responsible for ensuring we have an up-to-date active and deliverable email address for you. If you have any questions about this Portal Privacy Policy, please contact us.

3.    Business to Business; Limitation of Storage of Personal Information.

A.    We offer our Services and Sites only to law firms, attorneys, healthcare organizations, healthcare providers, and their authorized Users for the purposes outlined in this Agreement and with written consents required under applicable federal and state laws and regulations and privacy rules and policies. Our Services and Sites are not intended for use by consumers or for public consumption.

B.    When you provide contact information to the Company, we request that it be business contact information. If you provide non-business personal contact information instead, this does not make this a consumer transaction.

C.    While we use reasonable measures to secure Personal Information disclosed to us, privacy rights associated with a consumer transaction, as a general matter, do not apply to our Services and Sites.

D.    Please note that you must limit the amount of Personal Information uploaded to, transmitted to, stored on, or otherwise disclosed to the Sites to the extent required in connection with your appropriate and permitted use of the Sites.

4.    Geographic Restrictions.

A.    The Company, including its digital infrastructure, is located in the United States of America. Information, including User Content and Case Content (as such terms are defined in our Portal Terms of Service), is processed at Case X’s operating offices and in any other places where the parties involved in the processing are located.

B.    Your information will be collected on our servers in the United States, and processed by our service providers, contractors, or third parties where they are located. This means that this information may be transferred to—and maintained on—computers located outside of your territory where the data protection laws may differ than those from your territory.

C.    By accessing or using our Services, or otherwise providing information to use, you understand and agree that

i.    you consent to the collection, processing, transfer, and storage of information about you in and to the United States and other applicable territories in which laws may not be as comprehensive as or equivalent to the law in your country of residence;

ii.    we make no claims that our Services, Sites, or any of its content is accessible or appropriate outside of the United States;

iii.    access to our Services or Sites may not be legal by certain persons or in certain countries; and

iv.    if you access our Services or Sites from outside the United States, you do so on your own initiative and are responsible for compliance with all applicable laws.

5.    Children's Privacy.
A.    The Site is not intended for persons under the age of 18 (or the age of majority in your state).  the Company does not knowingly receive or solicit data from children under 18 years of age (or the age of majority in your jurisdiction).

B.    By using our Services and Sites, you represent to the Company, intending for the Company to rely thereon, that you are at least 18 (or the age of majority in your jurisdiction).

C.    If the Company learns that information is collected from a User who is less than 18 years, the Company will take reasonable measures to promptly delete such data from its records.

D.    If you become aware of any data the Company may have collected from children under age 18 (or the age of majority) that is not pertinent to our Services, please contact the Company.

6.    Scope.

A.    We have adopted this Portal Privacy Policy to inform you of our information gathering practices and the ways in which we may use the limited Personal Information we receive from you.

B.    This Portal Privacy Policy describes how we collect, use, process, and disclose the limited (if any) Personal Information when you access or use our Services.

C.    To the extent permitted by law, this Portal Privacy Policy does not, apply to the Personal Information of third parties or grant rights to third parties that do not access or use our Services or Sites. Your use of a third party’s Personal Information in connection with our Services and Sites is governed by your respective organization’s contractual engagement documents and privacy rules, policies, and procedures.

D.    Your use of our Services and Sites is governed by our Portal Terms of Service and this Portal Privacy Policy.  

E.    This Portal Privacy Policy is incorporated into our Portal Terms of Services, only as to Users of our Services, and therefore governs your use of our Services.

7.    Types of Information and Data the Company Collects.

A.    As used in this Portal Privacy Policy, “Personal Information” means information that relates, and is capable of being linked, to a particular person.

B.    The Personal Information we collect and process depends on several factors, including:

i.    the type of interaction we have with you;

ii.    which Service you purchase or use; and

iii.    what information you choose to share with us.

C.    We do not, through the Site, collect sensitive Personal Information about you, such as your social security number or birthdate.

D.    As stated above, we are a business-to-business service provider.  While we use reasonable efforts to protect the information you provide to us, as discussed further below, we cannot guarantee your privacy.

E.    Accordingly, we ask that you not share with us your Personal Information, and instead limit the information you share with us to your business contact information.  

8.    Law Firm End User Services; Attorney-Client Information.

A.    With respect to attorneys and law firms (each, a “Law Firm End User”), Law Firm End Users may use of our Services and Sites to receive, review, and coordinate information, including Personal Information, relating to Law Firm End User clients (each, a “Case Subject(s)”).

B.    Our Services also enable Law Firm End Users to access Case Subjects’ personal health information and medical records for purposes of the Case Subjects’ litigation.

C.    In connection with such use of our Services and each Case Subject, each Law Firm End User acknowledges and agrees that it shall

i.    obtain and maintain all necessary licenses and written consents required under applicable federal and state laws and regulations and privacy rules and policies (effectively, “Consents”) in relation to the Services before the date on which the Services are to start;

ii.    be solely responsible for any Consents, approvals, authorizations, or decisions that are reasonably necessary for the Company to perform Services; and

iii.    provide information as the Company may request to perform or deliver Services in a timely manner and ensure that such information is accurate, current, and complete in all material respects.

D.    To the extent applicable, in your capacity as a Law Firm End User, you certify that you will use our Services and Sites to receive, review, and coordinate information, including Personal Information, relating to a Case Subject only when you

i.    are duly authorized, by documented requisite written Consent, by such Case  Subject or the legal representative of such Case Subject; and

ii.    intend to use such information in accordance with applicable rules of ethics and professional responsibility and federal and state laws and regulations.

9.    Healthcare End User Services; Patient Information.

A.    With respect to healthcare providers use of our Services (each, a “Healthcare End User”), our Services may consist of
i.    information transmission Services that allow Healthcare End Users to share Case Subjects’ health information with Law Firm End Users for purposes of the Case Subjects’ litigation (“Information Transmission Services”); and
ii.    Services to coordinate and schedule Case Subjects’ appointments with Healthcare End Users (“Appointment Coordination Services”).  Information Transmission Services and Appointment Coordination Services are collectively referred to as the “Healthcare End User Services.”
B.    Depending on the delivery of our Services, we may be considered a business associate and may be required to enter into business associate agreements (“BAAs). BAAs are required by the Health Information Portability and Accountability Act of 1996 (“HIPAA”), and the Health Information Technology for Economic and Clinical Health Act of 2009 (“HITECH”), as well as the enacting rules and guidelines of the U.S. Department of Health and Human Services (“HHS”), including the Office for Civil Rights (“OCR”) and other competent regulatory bodies (the foregoing together as the “HIPAA Rules”).
C.    Personal information that is “Protected Health Information” or “PHI” as defined by the HIPAA Rules must and will be governed by the applicable BAAs and HIPAA Rules. 
D.    Healthcare End Users are required to obtain Case Subjects’ authorization to disclose their PHI to Law Firm End Users via a signed HIPAA-compliant authorization (the “HIPAA Authorization”).  Accordingly, Healthcare End Users must obtain a Case Subjects’ signed HIPAA Authorization prior to uploading Case Subjects’ PHI to any Sites.
E.    Accordingly, Healthcare End Users must obtain a Case Subjects’ signed HIPAA Authorization prior to uploading Case Subjects’ PHI to any Sites.
F.    For more information about the requirements of HIPAA Authorizations and BAAs, please contact us.
10.    How the Company Collects Your Information.

A.    In this section of the Portal Privacy Policy, we explain where and how we collect data from you as a User. When you provide information upon request or submission, please provide business points of contact, rather than personal (home) points of contact.

i.    Requests for Support. When you submit your Personal Information to request support, you may be required to provide some or all of the following Personal Information:
1.    Name;
2.    Company email address;
3.    Company name and location;
4.    Title; and
5.    Telephone contact information.

ii.    Automatic Collection via the Site. We may receive and store certain types of information automatically, such as whenever you interact with our Sites. Information automatically collected, along with examples, includes but is not limited to the following:

1.    Online Identifiers, such as geo location/tracking details, browser fingerprint operating system, browser name and version, and IP addresses for the device from which you access the Site;

2.    Usage Data, such authentication data, security questions, and click-stream data;

3.    Information Captured via Server Logs, such how you visited to the Sites and how you interact online,  your device type and unique device identification numbers, your device event information (such as crashes, system activity and hardware settings, browser type, browser language, the date and time of your request and referral URL), how your device interacts with the Sites, including pages accessed and links clicked, geographic location, and other technical data collected through cookies, pixel tags and other similar technologies that uniquely identify your browser;

4.    Information Captured via External Links;

5.    Information Captured via Log Files, such IP addresses, browser type, Internet service provider (ISP), referring/exit pages, platform type, date/time stamp, and number of clicks; and

6.    Information Captured via Cookies and Similar Technologies.

11.    How the Company Uses Your Information.

A.    We gather Personal Information about you in order to respond to your requests and provide you with appropriate information about our Services.  However, in some instances, we may combine information that we have collected from multiple sources in order to fulfill these purposes.

B.    The Company uses information for the purpose of providing Services. Examples of the types of uses of your information for these purposes include is not limited to administering the Site and processing or transmitting Content, as described in our Portal Terms of Service.

C.    The Company uses information for the purpose of sending information to you to keep you updated about our Services, informing you of relevant updates, addressing any questions or to troubleshoot problems. Based on your communication preferences, we may also send you marketing communications (e.g., emails or mobile notifications) to inform you of new services.  You can always opt out of receiving these materials by clicking on the opt out link in each such marketing communication you may receive.  

D.    The Company may collect information for the purposes of detecting fraud or other suspicious activities.

E.    The Company collects information in order to meet our legal obligations. These obligations may include satisfying screening requirements prior to assisting with Healthcare End User Services, or Law Firm End User Services (as applicable).  We also may use your contact information to notify you of incidents relating to our processing of your Personal Information.

F.    The Company collects information for use in marketing to current and prospective customers according to your indicated preferences. You can opt-out of receiving marketing materials and/or change your preferences at any time.

G.    The Company collects information for researching and improving our existing Services and developing new services.

H.    The Company collects information for use in performing various types of analytics. For example, the Company uses information to analyze how you interact with the Site, where you arrive from and exit to, and gaining insights relevant to our Services or Sites.

I.    The Company collects information for use for our operational purposes, and the operational purposes of our service/data providers and business partners. For instance, the Company may use information for maintaining the Site and other infrastructure, training and quality assurance, for conducting surveys, to promote our brand, and to use in connection with our relationships with service/data providers and business partners.

J.    The Company collects information for use in various types of financial reporting and other similar internal uses. Examples of the types of financial reporting that the Company may use your information in connection with our internal budgets and projections, calculation of compensation, and reporting to investors. This information is on an aggregated basis and will never mention any one individual from a corporate entity customer of the Company.

K.    The Company may also use de-identified or aggregate data that is not capable of being linked to any User for additional purposes not listed above.

L.    The Company may also disclose your Personal Information for any purpose for which you provide consent. We will not use your Personal Information for purposes other than those purposes disclosed in this Portal Privacy Policy, our Portal Terms of Service, or at such time consent is request from you. From time to time, and as required under the applicable law, we may request your permission to allow it to share your contact information (including any Personal Information provided) with third parties.

12.    Cookies and Similar Technologies.

A.    This section expands on how the Company uses Internet technologies, such as cookies, to collect information about you.

B.    The Company and its service providers may use the standard cookie feature of major browser applications and third-party service/data providers, including Google Analytics, or employ internally developed cookies and tracking codes, that allow the Company to store a small piece of data on a your computer, or any other device a you use to access the Site, about your visit to the Site or use of other plug-ins exchanging information with the Company.

C.    We also use similar technologies to analyze trends, administer the Site, track Users’ movements around the Site, and to gather demographic information about our user-base. You can remove persistent cookies by following directions provided in your Internet browser’s “help” directory. You may also control which cookies are placed on your browser when you visit the Site through our cookie preference center. If you reject cookies, you may still use the Site, but your ability to use some areas of the Site, such as order forms, will be limited.

D.    “Web beacons” (also known as “clear gifs” and “pixel tags”) are small transparent graphic images that are often used in conjunction with cookies in order to further personalize the Site and to collect a limited set of information about you.

E.    The use of tracking technologies by our service/data providers, technology partners or other third party assets (such as social media links) on the site is not covered by our Portal Privacy Policy. These third parties may use cookies, clear gifs, images, and scripts to help them better manage their content on the Site. We do not have access or control over these technologies.

F.    Our partners and affiliates may use cookies and web beacons to collect information about your activities on this and other websites to provide you targeted advertising based upon your interests. This means that these partners and affiliates may show our ads on sites across the Internet based upon your previous visits to the Site. Together with our partners and affiliates, we may use these cookies and web beacons to report how your ad impressions, other uses of ad services, and interactions with these ad impressions and ad services are related to your visits to the Site.

G.    If you would like to learn more or opt out of receiving online display advertising tailored to your interests, please visit the Networking Advertising Initiative at www.networkadvertising.org/managing/opt_out.asp or the Digital Advertising Alliance at http://aboutads.info/choices.

H.    If you delete your cookies, use a different browser, or buy a new computer, you will need to renew your online display advertising opt-out choice.

I.    You may also learn more about how Google Analytics uses your information by visiting Google’s page https://policies.google.com/technologies/partner-sites. You may also visit Google Analytics’ Ads Settings at https://adssettings.google.com/u/0/authenticated?hl=en to opt out of Google’s use of cookies and customize Google Display Network ads, and Google Analytics’ Opt Out Browser Add-on for the web - https://tools.google.com/dlpage/gaoptout/.

13.    Third Party Sites, Resources and Services.

A.    The Company may maintain links to other websites and other websites may maintain links to the Site.

B.    This Portal Privacy Policy applies only to our Site and not to other websites accessible from our Site or that you use to access our Site, each of which may have privacy policies materially different from this Portal Privacy Policy.

C.    If you visit other websites, the Company is not responsible for the privacy practices or content of those websites. It is your responsibility to review the privacy policies of non-Company websites to confirm that you understand and agree with them.

14.    Disclosure of Your Information to Third Parties.

A.    The Company may disclose information, including your Personal Information and Content, in accordance with and as described in our Portal Terms of Service.

B.    The Company may contract with service providers which help it to maintain and operate the Site. In such cases, such service providers are required to only use your information in connection with the services they perform for the Company, and contractually proscribe them from selling your information to anyone for any purpose.  Examples of the types of service providers the Company may share Personal Information with (other than those mentioned above) include but are not limited to the following:
o    network infrastructure;
o    cloud storage;
o    security;
o    user support;
o    Internet (e.g., ISPs); 
o    data analytics; and
o    information technology.

C.    The Company may collect information in order to provide business partners information in connection with Users who have either expressed interest in hearing from the business partner or who have purchased Services through the Company. The Company may share information with its business partners, in limited circumstances.

D.    The Company may disclose your information as required by law

i.    to respond a subpoena or similar legal process;
ii.    to comply with a lawful request by a public authority, including to meet national security or law enforcement requirements;
iii.    when we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others;
iv.    to investigate fraud, or respond to a legal request; or 
v.    to enforce this Portal Privacy Policy, our Portal Terms of Service, and/or any Additional Terms.

E.    If the Company undertakes or is involved in any merger, acquisition, reorganization, sale of assets, bankruptcy, or insolvency event, then we may sell, transfer or share some or all of our assets, including information related to Users in connection with the transaction or in contemplation of the transaction (such as conducting due diligence). If such an event occurs, your information may be treated like any other the Company asset and sold, transferred, or shared with third parties, or used in ways not contemplated or permitted under this Portal Privacy Policy. In this case, you will be notified via email and/or a prominent notice on the Site of any change in ownership or uses of your Personal Information, as well as any choices you may have regarding your Personal Information.

F.    In addition to the circumstances listed above, the Company may also share de-identified or aggregate data that is not capable of being linked to any Visitor with additional entities not listed above.

15.    Privacy Rights and Requests.

A.    Comprehensive consumer laws, rules, and regulations of certain states may provide consumers with rights regarding the use of their Personal Information. However, we offer and provide our Services and Sites for business purposes only. Therefore, the Company’s use, collection, and transmission of information is in the context of, and in support of, a business transaction, not a consumer transaction. As such, to the extent permitted by law, you are not entitled to comprehensive consumer laws, rules, and regulations in connection with your use of our Services and our Sites.

B.    TO THE EXTENT ANY COMPREHENSIVE CONSUMER LAWS, RULES, AND REGULATIONS MAY APPLY TO THIS TRANSACTION, THE COMPANY MAY NOT MEET CERTAIN STATUTORY AND REGULATORY THRESHOLDS THAT OBLIGATE OR REQUIRE THE COMPANY TO COMPLY WITH REQUESTS OR SUCH COMPREHENSIVE CONSUMER LAWS, RULES, AND REGULATIONS.

C.    Nevertheless, where doing so does not interfere with, or impede the Company’s administration of the Services or Site, or compliance with applicable laws, we will endeavor to comply with your requests; provided, however, that such rights are not absolute and, depending upon the applicable law, access may be denied as follows:

i.    when denial of access is required or authorized by law;

ii.    you are a resident of a state that does not provide for this right;

iii.    when granting access would have a negative impact on another’s privacy;

iv.    to protect our rights and properties; or

v.    where the request is frivolous or vexatious, or for other reasons.

D.    Otherwise, the Company will accommodate reasonable requests where possible and not excessive.  

16.    Security

A.    We have implemented reasonable technological, administrative and operational controls intended to protect information collected through the Site from loss, misuse, unauthorized access, exfiltration and/or alteration.

B.    In all cases, we will exercise reasonable care to endeavor to provide secure transmission of information between your computer and our servers but given that no information transmitted over the Internet can be guaranteed 100% secure, we cannot guaranty or warrant the security of any information transmitted to the Company over the Internet.

C.    YOU MUST CAREFULLY CONSIDER WHAT INFORMATION YOU SHARE WITH US, AS WE CANNOT GUARANTEE THAT WE WILL BE ABLE TO BLOCK ALL ATTEMPTED ATTACKS TO THE SECURITY OF THE SITE. HENCE, YOU PROVIDE THIS INFORMATION AT YOUR OWN RISK. ALTHOUGH WE USE REASONABLE SECURITY PRECAUTIONS WITH RESPECT TO THE LIMITED PERSONAL INFORMATION WE MAY COLLECT THROUGH THIS SITE, WE CANNOT GUARANTEE THAT ANY OF YOUR PERSONAL INFORMATION STORED ON OUR SERVERS WILL BE FREE FROM UNAUTHORIZED ACCESS.  TO THE FULLEST EXTENT NOT PROHIBITED BY LAW, WE DISCLAIM AND SHALL HAVE NO LIABILITY FOR ANY LOSS OF, UNAUTHORIZED ACCESS OR DAMAGE TO, OR INTERCEPTION OF ANY OF YOUR PERSONAL INFORMATION STORED ON OUR SERVERS WHEN YOU ACCESS THE SITE.  

D.    IF YOU BELIEVE YOUR PRIVACY HAS BEEN BREACHED, PLEASE CONTACT US IMMEDIATELY.

17.    Choice/Opt-Out.

A.    We send promotional emails and newsletters from time to time to Users who have provided us with their email address or whose email addresses we have obtained through other sources.

B.    You can opt-out of promotional communications by using the “Unsubscribe” link and following the unsubscribe instructions in an email you receive from us or by emailing us at info@mycasex.com.

C.    We may also send service-related or transactional communications, which are not promotional. Generally, you may not opt-out of these communications.

D.    If you do not wish to receive service-related communications, you may terminate your account by contacting us at info@mycasex.com.

18.    Contact Information.

A.    You can contact the Company about this Portal Privacy Policy emailing info@mycasex.com.