CaseNexus, a Product of Clarvo, Inc.

Privacy Policy

Last Updated: August 28, 2025

This Privacy Policy describes the privacy practices of CaseNexus, a Product of Clarvo, Inc., ("CaseNexus," "we," "us," or "our") and how we handle personal information collected through our website at www.casenexus.us and any other website or service that we own or control and that links to this Privacy Policy (collectively, the "Services").

CaseNexus, operated by Clarvo, Inc., complies with the EU–U.S. Data Privacy Framework (EU–U.S. DPF) as set forth by the U.S. Department of Commerce. Clarvo, Inc. has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles with regard to the processing of personal data received from the European Union in reliance on the EU-U.S. DPF. If there is any conflict between the terms in this Privacy Policy and the EU-U.S. DPF Principles, the Principles shall govern. To learn more about the Data Privacy Framework (DPF) Program, please visit https://www.dataprivacyframework.gov/.

This Privacy Policy does not apply to our handling of personal information that we process on behalf of our enterprise customers as a service provider or processor.

For purposes of the EU and UK General Data Protection Regulation (GDPR), Clarvo, Inc. acts as the "data controller" of your personal data. Certain trusted third-party service providers, including Parley Technologies, Inc., act as "data processors" on our behalf.

Information We Collect

We collect the following categories of personal information, which may include personal data received from the European Union:

  • Contact information: first and last name, email address, mailing address, phone number, company name, and professional title.
  • Communications: inquiries, feedback, and other messages exchanged with us.
  • Usage information: details of your interactions with our Services, including content you upload and use of interactive features.
  • Marketing information: preferences for receiving communications and interaction history.
  • Device and online activity data: browser, device type, IP address, screen resolution, location info, access times, and interaction with communications.
  • Social media and third-party sources: profile information or public data we may receive from third-party sites or marketing partners.
  • Educational and professional background
  • Familial details (birth, death, and marriage information)
  • Financial information and payment details
  • Attorney information (if you engage with attorneys through CaseNexus)

AI-generated responses are based solely on the data you provide, processed without human review. These outputs are intended for informational purposes only and should be independently validated before use.

Purposes of Processing

We process personal data for the following purposes:

  • To provide and operate our Services
  • To personalize and improve user experience
  • To communicate updates, support, and administrative messages
  • For research and development
  • For direct marketing (with opt-out options)
  • For legal compliance, security, and fraud prevention
  • To generate automated responses or draft materials using AI tools based on your inputs.
  • To provide immigration-related tools, such as visa application tracking and case progress monitoring.
  • To compile aggregate client information for resources, statistics, and research (without disclosing personal identifiers).
  • To comply with Apple App Store and Google Play platform-specific privacy requirements, including disclosure of data collection, linking, and tracking practices in app listings.

Your Rights and Choices

If you are a data subject under the EU-U.S. DPF, you have the right to:

  • Access your personal data
  • Correct inaccuracies in your data
  • Delete your data, subject to exceptions permitted under law

To exercise these rights, please contact us at: admin@casenexus.us.

California Residents (CCPA/CPRA):

  • The right to know the categories and specific pieces of personal information collected.
  • The right to request deletion of your personal information.
  • The right to correct inaccurate information.
  • The right to opt out of the "sale" or "sharing" of personal information, if applicable.
  • The right not to be discriminated against for exercising these rights.

Do Not Sell or Share My Personal Information: To exercise, email admin@casenexus.us

EU/UK Users (GDPR):

  • The right to access, rectify, or erase personal data.
  • The right to restrict or object to processing.
  • The right to data portability.
  • The right to withdraw consent at any time.
  • The right to lodge a complaint with a supervisory authority.

To exercise these rights, please contact us at: admin@casenexus.us.

Data Sharing and Onward Transfer

We may share personal information with:

  • Service providers: to perform services on our behalf
  • Professional advisors: such as auditors, legal counsel, and insurers
  • Government authorities: when required to comply with legal obligations, including national security or law enforcement
  • Third parties in business transfers: such as during mergers or acquisitions

Third-Party Vendors / Attorneys

  • Attorneys and service providers engaged through CaseNexus must adhere to confidentiality obligations.
  • Attorneys may contact clients following an evaluation but must cease communication if the client declines further engagement.
  • Clients may opt in or out of further communication preferences post-evaluation.
  • Clients retain full control over whether they wish to receive further communications from attorneys or third-party providers after an initial evaluation.

Use of Third-Party Service Providers

CaseNexus uses trusted third-party service providers to deliver portions of our Services. These providers may support functions such as secure cloud hosting, data storage, payment processing, analytics, communications, or technical infrastructure. These providers act solely as CaseNexus's processors/service providers and handle personal information only on CaseNexus's instructions and in accordance with applicable privacy laws. Service providers may create aggregated and de-identified data for analytics purposes, but such data does not identify individual users.

Third-Party Financing Providers

CaseNexus may offer the option to apply for financing through independent third-party providers, such as Affirm, Klarna, or Afterpay, to pay for certain Services. If you choose to apply, you will provide personal and financial information directly to the financing provider, and your information will be handled in accordance with that provider's privacy policy, not CaseNexus's. CaseNexus does not share your personal data with these providers. Your use of their services is voluntary and subject to their terms and conditions.

Security Measures:

CaseNexus, through Clarvo, Inc., maintains, and requires its service providers to maintain, appropriate technical and organizational measures to protect personal information against unauthorized or accidental access, loss, alteration, disclosure, or destruction. These measures include:

  • Processing data only in secure facilities with controlled physical access.
  • Granting system access only to authorized personnel on a need-to-know basis, with unique IDs and strong authentication.
  • Requiring all personnel with access to personal information to sign confidentiality agreements and receive security and privacy training appropriate to their role.
  • Encrypting personal data in transit and at rest using industry-recognized practices.
  • Maintaining systems designed for integrity, availability, and timely restoration after an incident.
  • Monitoring for and promptly addressing potential vulnerabilities or attacks.
  • Regularly testing the effectiveness of security measures.

While CaseNexus and its service providers implement safeguards to protect your information, no method of transmission or storage is completely secure, and CaseNexus cannot guarantee absolute security.

Data Incidents

If CaseNexus becomes aware of a Data Incident involving your personal information, we will notify you without undue delay when required by applicable law, and provide information to help you understand the nature of the incident and any steps you may need to take.

CaseNexus retains personal information only for as long as necessary to provide our Services or as required by law. Upon termination of your account or our agreement with you, CaseNexus will direct our service providers, including Parley, to delete or anonymize your personal data within commercially reasonable timelines, subject to any legal retention requirements. Aggregated and de-identified data derived from your use of the Services may be retained by CaseNexus and its service providers for analytics, product improvement, and benchmarking purposes.

Children's Privacy:

  • CaseNexus does not knowingly collect personal information from children under 13.
  • If we learn that we have collected such information, we will delete it promptly.

We may also be required to disclose personal information in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.

Clarvo, Inc. remains responsible for the processing of personal data it receives and subsequently transfers to a third party acting as an agent on its behalf under the DPF Principles.

No HIPAA Compliance

CaseNexus's Services are not designed to comply with the U.S. Health Insurance Portability and Accountability Act (HIPAA). You must not upload or provide any protected health information (PHI) to CaseNexus. We disclaim all liability for any PHI submitted in violation of this restriction.

Independent Dispute Resolution Mechanism – BBB National Programs

In compliance with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), Clarvo, Inc. commits to resolve complaints about our collection or use of your personal information transferred to the U.S. pursuant to the EU-U.S. DPF. EU individuals with inquiries or complaints should first contact:

CaseNexus (operated by Clarvo, Inc.)
Email: admin@casenexus.us

Clarvo, Inc. has further committed to refer unresolved DPF Principles-related complaints to a U.S.-based independent dispute resolution mechanism, BBB National Programs. If you do not receive timely acknowledgment of your complaint, or if your complaint is not satisfactorily addressed, please visit https://www.bbbprograms.org/dpf-complaints for more information and to file a complaint. This service is provided free of charge.

If your DPF complaint cannot be resolved through the above channels, under certain conditions, you may invoke binding arbitration. See https://www.dataprivacyframework.gov/s/article/ANNEX-I-introduction-dpf for details.

International Data Transfers

For users in the European Economic Area or the United Kingdom, transfers of personal data to the United States are made pursuant to the European Commission's Standard Contractual Clauses (SCCs) or other lawful transfer mechanisms permitted under applicable law.

Enforcement and Oversight

Clarvo, Inc. is subject to the investigatory and enforcement powers of the U.S. Federal Trade Commission (FTC) with respect to our compliance with the EU-U.S. DPF.

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email (if available) or through a notice on our website prior to the change taking effect. Please review this Privacy Policy periodically to stay informed of our practices.