The full policy
On this page15 sections
In this policy, “we” and “us” mean Matter Desk Pty Ltd (ABN 39 697 017 502), which runs CaseSharp from Sydney. It covers everyone whose information we handle: students and others who use CaseSharp, people who email us, and people on our interest list. We follow the Australian Privacy Principles in the Privacy Act 1988 (Cth).
Where it goes, feature by feature
For each part of CaseSharp: what stays in Sydney, what can leave Australia and the country it goes to. Only one feature uses generative AI, and only for older paid accounts. Open a feature below for what it receives, how long we keep it and your controls.
| Feature | Stays in Sydney | Can leave Australia |
|---|---|---|
| Checking and searching | ||
| Citation check | Stays in SydneyYour draft while it is read, and any check you save | Can leave Australia
|
| Guest check, without an account | Stays in SydneyYour footnotes while they are read. Nothing is kept | Can leave Australia
|
| Case search and case pages | Stays in SydneyCitation searches, and your search history when signed in | Can leave Australia
|
| Your account | ||
| Your account and signing in | Stays in SydneyYour account details and sign-in records | Can leave Australia
|
| Saved work | Stays in SydneyEverything you save | Can leave Australia
|
| Running the service | ||
| Usage measurement and error reports | Stays in SydneyNothing | Can leave Australia
|
| Visiting the website | Stays in SydneyNothing | Can leave Australia
|
| Emails to and from us | Stays in SydneyNothing | Can leave Australia
|
| Only for some people | ||
| Payments | Stays in SydneyYour plan and billing references | Can leave Australia
|
| Generative AI features for earlier subscribersUses generative AI | Stays in SydneyYour saved chats | Can leave Australia
|
| Practitioner interest list | Stays in SydneyYour email address | Can leave AustraliaNothing |
Checking and searching
Citation check
Compares the case citations in your draft with our court records.No generative AIProcessed inSydney, AustraliaUnited States- What we receive
- The text you paste or the file you upload, the citations found in it, and a sign-in token that identifies your account so we can apply your plan.
- Where it goes
- Your draft is read on our servers in Sydney. Each citation is looked up in our case records, also in Sydney, through our lookup service, which runs on a global network and normally handles our requests in Sydney. When a footnote names a case, the name, and sometimes its citation, can be sent to a search-ranking service in the United States to find the closest records. Your draft, your name and your email address are not sent to it. If a check fails, the error report sent to the United States can include part of the draft.
- How long we keep it
- If you don't save the check, the draft text is not stored. We keep a one-way fingerprint of it, which cannot be turned back into your text, so a recheck of the same draft does not use another free draft. If you save the check, we keep the draft text, its citations and the results until you delete the check or your account.
- Your controls
- Delete a saved check at any time from the citation check page.Open your saved checks
Guest check, without an account
Paste footnotes and check them without signing up.No generative AIProcessed inSydney, AustraliaUnited States- What we receive
- The footnotes you paste, and your network address, as for any web request.
- Where it goes
- Read on our servers in Sydney and looked up in our case records the same way as a signed-in check, including the search-ranking step in the United States for case names. Nothing is linked to an account. If a check fails, the error report sent to the United States can include part of what you pasted.
- How long we keep it
- Nothing is stored. We count guest checks per network address for one hour to stop abuse.
- Your controls
- Close the page and the footnotes are gone. Sign up only if you want to save a check.
Case search and case pages
Finds a case by name or citation and shows its details.No generative AIProcessed inSydney, AustraliaUnited States- What we receive
- The words you search for and the cases you open.
- Where it goes
- Searches run through our lookup service and our case records in Sydney. Search words that are not a citation, such as a case name or a topic, can be sent to the search-ranking service in the United States. When you follow a link to read a judgment on a court website, AustLII or JADE, that site's own privacy policy applies.
- How long we keep it
- Signed in, your searches are kept in your search history so you can return to them. Signed out, searches are not saved; we count them per network address for one hour to stop abuse.
- Your controls
- The app doesn't yet let you delete a search yourself. Email us and we will clear your search history. Deleting your account also deletes it.Ask us to clear it
Your account
Your account and signing in
An email address and a 6-digit code. No password.No generative AIProcessed inSydney, AustraliaUnited States- What we receive
- Your email address, the sign-in codes we send, a display name and preferences if you add them, what you tell us about your studies (such as year level and subjects), your plan, and records of sign-ins.
- Where it goes
- Our account database in Sydney. Sign-in codes and service emails are sent through an email delivery service in the United States.
- How long we keep it
- While your account is open. When you ask us to delete your account, access ends at once and the account is permanently deleted after 30 days.
- Your controls
- Change your details in settings, download your data, or delete your account.Open your settings
Saved work
Checks, cases, notes, folders and files you choose to keep.No generative AIProcessed inSydney, AustraliaUnited States- What we receive
- Whatever you choose to save, any files you upload to your library, and the email addresses of people you invite to a shared workspace.
- Where it goes
- Our database and file storage in Sydney. Invitations are emailed through the email delivery service in the United States. People you share with can see what you share with them.
- How long we keep it
- Until you delete it, or until your account is deleted.
- Your controls
- Delete any item, stop sharing, or download everything from your account page.Download your data
Running the service
Usage measurement and error reports
How we see which features are used and what breaks.No generative AIProcessed inUnited States- What we receive
- A small set of product events, such as opening a citation, linked to a random account number and your plan. Analytics events don't include your draft, your name or your email address, and session recording is off. When something fails, an error report records technical details of the failed page or request.
- Where it goes
- Services in the United States. We remove common personal fields from error reports before they are sent, but a report about a failed check can include part of the request, which can include part of your draft.
- How long we keep it
- For a limited period set in each service, then deleted.
- Your controls
- Email us to ask about or remove data linked to your account.
Visiting the website
What any website receives when you load a page.No generative AIProcessed inGlobal network, near youUnited States- What we receive
- Your network address, browser type and the pages you request. If you arrive from a link with campaign tags, the tags are kept in your browser tab and passed to the sign-up page.
- Where it goes
- Pages are served by a global delivery network from a location near you. Its request logs can be processed outside Australia, including in the United States. casesharp.ai sets no analytics or advertising cookies. The app uses cookies to keep you signed in.
- How long we keep it
- Campaign tags are cleared when you close the tab. Request logs are kept briefly by the network for security.
- Your controls
- Block or clear cookies in your browser. You will need to sign in again.
Emails to and from us
Support, privacy requests and service messages.No generative AIProcessed inUnited States- What we receive
- What you write to us and your email address.
- Where it goes
- Our business email service, which can store messages outside Australia, including in the United States.
- How long we keep it
- As long as needed to answer you and keep a record of what we agreed, then deleted.
- Your controls
- Ask us to delete your messages once your request is closed.
Only for some people
Payments
New paid plans are paused. This applies to existing subscribers.No generative AIProcessed inSydney, AustraliaUnited States- What we receive
- Customer and subscription references, plan status and billing events. Your card details go straight to our payment provider; we never see your full card number.
- Where it goes
- Our database in Sydney, and our payment provider, which processes payments in the United States.
- How long we keep it
- As long as tax and company law requires us to keep financial records.
- Your controls
- Manage or cancel a subscription from your account page.Open your account page
Generative AI features for earlier subscribers
Off for free accounts and for every account created from 13 October 2026. Kept only for paid subscribers with older accounts.Uses generative AIProcessed inSydney, AustraliaSingaporeUnited States- What we receive
- For AI chat and any related generative tool: your question, the conversation so far, the case text it draws on, and any image you ask it to read.
- Where it goes
- A generative AI provider in Singapore. Its own policy says it may use content it receives to improve its models. If a web search is used to answer, the search words can also go to a web-search service in the United States.
- How long we keep it
- Your chats stay in your account in Sydney until you delete them. The provider keeps what it receives under its own policy.
- Your controls
- Don't use these tools for anything you would not want an overseas provider to see. The citation check and case pages never use them.
Practitioner interest list
The optional email list on the casesharp.ai home page.No generative AIProcessed inSydney, Australia- What we receive
- Your email address, and a one-way code made from your network address to stop abuse.
- Where it goes
- Our database in Sydney.
- How long we keep it
- Until you ask to be removed or the list closes.
- Your controls
- Ask to be removed at any time.Ask to be removed
Countries
APP 1.4(f), (g)Most of what you give us stays in Sydney. Some parts are processed overseas by services that run CaseSharp for us. These are the countries, and what can be processed in each.
| Country | What can be processed there |
|---|---|
| Sydney, Australia |
|
| United States |
|
| Singapore |
|
| Global network, near you |
|
Under the Privacy Act we stay accountable for how overseas services handle personal information we send them (APP 8). We don't name these services publicly. If your university or library needs the list for a review, email privacy@casesharp.ai.
What we collect
APP 1.4(a)- Account details: your email address, and if you give them, a display name, your year level and subjects, and preferences.
- What you check: the text or file you add to a citation check, and the citations found in it.
- What you save: saved checks, cases, notes, folders and uploads, your search history, and invitations you send.
- Plan and billing: your plan, and for existing subscribers, payment references and billing events. Never your full card number.
- Technical and usage: sign-in records, network address, browser type, product events and error reports.
- Messages: what you write to us.
Sensitive information
We don't ask for sensitive information, such as health, religious or political information. A draft can contain it, for example a reflective essay. We read a draft only to find its citations, and keep it only if you save the check.
How we collect and hold it
APP 1.4(b)We collect information directly from you when you sign up, add a draft, search, save something or write to us, and automatically from your browser when you use the site. We don't buy lists or collect information about you from other people. The one exception: our payment provider tells us whether an existing subscriber's payment went through.
We hold your account and saved work in our database and file storage in Sydney. How we protect it is under security.
What we use it for
APP 1.4(c)We use personal information only for these purposes. Each one says what it uses and what choice you have.
| Purpose | Information it uses | Your choice |
|---|---|---|
| Sign you in and run the features you use | Information it usesAccount details, and what you check, search and save | Your choiceSearch, case pages and the guest check work without an account |
| Apply your plan, including the free allowance of 3 drafts a month | Information it usesYour plan, and fingerprints of the drafts you check | Your choiceRechecking the same draft is free |
| Keep what you save, and share it only where you ask us to | Information it usesSaved work, and the email addresses of people you invite | Your choiceDelete any item or stop sharing at any time |
| Answer support and privacy requests | Information it usesYour messages and your account details | Your choiceOnly when you write to us |
| Find and fix faults, and see which features are used | Information it usesProduct events and error reports | Your choiceAsk us about, or to remove, data linked to your account |
| Stop abuse and keep the service secure | Information it usesNetwork address, sign-in records and request counts | Your choiceNeeded to run the service |
| Meet our legal obligations | Information it usesBilling records, and anything the law requires us to keep | Your choiceNeeded by law |
| Send research invitations and availability updates | Information it usesYour email address on the practitioner interest list | Your choiceOnly if you join the list. Ask to be removed at any time |
We send service emails, such as sign-in codes and account notices. If you join the practitioner interest list, we email you research invitations and availability updates. We send marketing email only to people who ask for it, and each one has an unsubscribe link.
What we never do
- Sell your personal information.
- Show you advertising, or share your information with advertisers.
- Use your drafts to train AI models.
- Tell your university, your lecturers or anyone else that you used CaseSharp, or what a check found.
- Read your saved drafts, except to fix a fault you report, investigate misuse, or meet a legal obligation.
Automated decisions
APP 1.7 to 1.9Computer programs make a few decisions about your account. None of them uses generative AI.
- The free allowance. A free account can check 3 different drafts each calendar month, Sydney time. The program compares a one-way fingerprint of the draft with the drafts you have already checked that month. Rechecking the same draft is free. Once the allowance is used, a new draft waits until the next month.
- Abuse limits. If an account or network address sends too many requests in a short time, further requests are refused for a while.
- Features by plan. Which features an account can use depends on its plan and when it was created.
These use your account number, your plan, when your account was created, and your recent usage. We don't think they significantly affect anyone's rights or interests, but we list them so you know they happen. If you think one was applied wrongly, email privacy@casesharp.ai and a person will review it.
The citation check's labels describe records, not you. “Not in our records” means we don't hold that case, not that your citation is wrong. No label is a judgement about your work.
See, correct or delete it
APP 1.4(d)You can ask for the personal information we hold about you, and ask us to correct it. It's free. Most of it you can do yourself:
- Download your dataRequest an export from your account page. You get a secure download when it's ready.
- Correct your detailsChange your display name, studies and preferences in settings.
- Delete one thingDelete a saved check or any saved item. To clear your search history, email us; the app doesn't yet let you delete a search yourself.
- Delete your accountFrom settings, or by email. How account deletion works.
For anything else, email privacy@casesharp.ai. We confirm the request comes from the account holder, for example by asking you to write from the account's email address, and reply within 30 days. If we can't do what you ask, we tell you why in writing and how to complain.
Using CaseSharp without your name
APP 2You can search for cases and read case pages without an account or giving your name. An account needs an email address so we can send sign-in codes, but your display name can be anything you like. Paying for a subscription needs your real payment details.
Minimum age
CaseSharp is built for university law students. You must be 16 or older to create an account. We don't knowingly collect personal information from anyone younger. If you think a child under 16 has an account, email privacy@casesharp.ai and we will delete it.
Security and data breaches
APP 11Information is encrypted on its way to us and where we store it. Each account can reach only its own saved work, and the database itself enforces that. Access to our production systems is limited to the people who run CaseSharp, and only to operate the service, fix faults, or respond to your request or a legal obligation.
If we suspect a data breach, we assess it within 30 days. If it is likely to cause serious harm, we notify you and the Office of the Australian Information Commissioner (OAIC) as soon as practicable, as the Notifiable Data Breaches scheme in Part IIIC of the Privacy Act requires.
How long we keep it
APP 11.2| Information | How long |
|---|---|
| Draft text of a check you don't save, and guest checks | Not stored |
| Draft fingerprints used to count free drafts | With your account; deleted when your account is deleted |
| Saved checks, cases, notes, folders and uploads | Until you delete them or your account |
| Search history when signed in | Until you ask us to clear it, or delete your account |
| Signed-out search counts and guest check counts | One hour |
| Account details | While your account is open, then 30 days after you ask us to delete it |
| Billing records | As long as tax and company law requires |
| Interest list email addresses | Until you ask to be removed or the list closes |
When you ask us to delete your account, access ends at once and the account, its records and uploads are permanently deleted after 30 days. If a step fails, we keep the closed account until the deletion succeeds rather than calling it done. We may keep limited billing, security or support records where the law requires or to deal with misuse. Copies can remain in database backups until those backups expire on their regular cycle.
Complaints
APP 1.4(e)If you think we have mishandled your personal information, tell us first.
- Email privacy@casesharp.ai with what happened and what you would like us to do.
- We confirm we have it within 2 business days.
- We look into it and reply in writing within 30 days. If we need longer, we tell you why.
- If you are not satisfied, complain to the OAIC at oaic.gov.au or on 1300 363 992.
Changes and other formats
APP 1.5, 1.6We review this policy at least once a year, and whenever a feature changes where information goes. The date at the top shows the latest change. If a change affects how we use information you have already given us, we email you before it takes effect.
- One policy for casesharp.ai and the app. Names the countries where information is processed, adds the feature-by-feature panel, the citation check's data path, automated decisions and a minimum age of 16.
- Previous version. It described overseas processing without naming countries.
In another format
Print this page or save it as a PDF from your browser. If you need it in another form, such as plain text or large print, email privacy@casesharp.ai and we will send it free.
Contact
- Contact
- Privacy Officer, CaseSharp
- privacy@casesharp.ai
- Company
- Matter Desk Pty Ltd, ABN 39 697 017 502, Sydney, Australia
We handle privacy requests by email so there is a written record. If you would rather talk, or need a postal address, say so in your email and we will arrange it.