Skip to the policy

Privacy policy

Privacy, and where your draft goes

CaseSharp checks the case citations in your own draft. This policy says what we collect, which country each part is processed in, and how to see, change or delete it. It follows the Australian Privacy Principles.

A citation check, step by step

No generative AI
  1. You add your draft

    Paste the text or upload a file.

    Your device
  2. We read it to find the citations

    On our servers. The uploaded file is not kept.

    Sydney, Australia
  3. Each citation is looked up

    Compared with our court records, without your draft.

    Sydney, Australia
  4. Only for some footnotesA case name is sent for ranking

    When a footnote names a case, the name can go to a search-ranking service that finds the closest records. It never receives your draft, and it writes nothing.

    United States
  5. You see the result

    Kept only if you choose Save.

    Sydney, Australia
Solid edge: stays in Australia, or on your deviceDashed edge: can leave AustraliaThis is the citation check. Every other feature is listed in where it goes, feature by feature.
Last updated
Covers
casesharp.ai and the app at app.casesharp.ai
Run by
Matter Desk Pty Ltd (ABN 39 697 017 502), Sydney
Countries
AustraliaUnited StatesSingaporeWhat goes where
Contact our privacy officer

Summary

The short version

Six things to know. The full policy follows, and each point links to its detail.

  1. Your draft is read in Sydney

    We read the text you paste or upload on our servers in Sydney to find its case citations. The uploaded file is not kept.

    The citation check in detail
  2. Only citations are looked up

    Each citation is compared with our court records in Sydney. If a footnote names a case, the name can go to a search-ranking service in the United States. Your draft is not sent with it.

    Every country we use
  3. No generative AI on the check

    The citation check and the case pages match facts: names, citations, courts and dates. Nothing in your work is written, rewritten or suggested.

    Feature by feature
  4. Stored only if you save

    If you don't save a check, we keep a one-way fingerprint of the draft to count your 3 free drafts a month, not the text. A guest check stores nothing. A saved check keeps your draft until you delete it.

    How long we keep things
  5. Not sold, not used for training

    We don't sell personal information, show advertising, use your drafts to train AI models, or tell your university that you used CaseSharp.

    What we use it for
  6. You stay in control

    Download a copy of your data, correct it, or delete a check or your whole account. If we get something wrong, complain to us, then to the OAIC.

    Your choices

The full policy

On this page15 sections

In this policy, “we” and “us” mean Matter Desk Pty Ltd (ABN 39 697 017 502), which runs CaseSharp from Sydney. It covers everyone whose information we handle: students and others who use CaseSharp, people who email us, and people on our interest list. We follow the Australian Privacy Principles in the Privacy Act 1988 (Cth).

Where it goes, feature by feature

For each part of CaseSharp: what stays in Sydney, what can leave Australia and the country it goes to. Only one feature uses generative AI, and only for older paid accounts. Open a feature below for what it receives, how long we keep it and your controls.

What stays in Sydney and what can leave Australia, by feature
FeatureStays in SydneyCan leave Australia
Checking and searching
Citation checkStays in SydneyYour draft while it is read, and any check you saveCan leave Australia
  • United States
    • Case names, to rank the closest records
    • Part of a check that fails, in an error report
Guest check, without an accountStays in SydneyYour footnotes while they are read. Nothing is keptCan leave Australia
  • United States
    • Case names, to rank the closest records
    • Part of a check that fails, in an error report
Case search and case pagesStays in SydneyCitation searches, and your search history when signed inCan leave Australia
  • United States
    • Other search words, such as a case name or a topic
Your account
Your account and signing inStays in SydneyYour account details and sign-in recordsCan leave Australia
  • United States
    • Your email address, to send codes and notices
Saved workStays in SydneyEverything you saveCan leave Australia
  • United States
    • Email addresses of people you invite
Running the service
Usage measurement and error reportsStays in SydneyNothingCan leave Australia
  • United States
    • Product events and error reports
Visiting the websiteStays in SydneyNothingCan leave Australia
  • Global network
    • Page requests, served from near you
  • United States
    • Request logs, kept briefly for security
Emails to and from usStays in SydneyNothingCan leave Australia
  • United States
    • What you write to us
Only for some people
PaymentsStays in SydneyYour plan and billing referencesCan leave Australia
  • United States
    • Card payments, through our payment provider
Generative AI features for earlier subscribersUses generative AIStays in SydneyYour saved chatsCan leave Australia
  • Singapore
    • Questions, chats and the case text they draw on
  • United States
    • Web search words, when a search is used
Practitioner interest listStays in SydneyYour email addressCan leave AustraliaNothing

Checking and searching

  • Citation check
    Compares the case citations in your draft with our court records.No generative AI
    Processed inSydney, AustraliaUnited States
    What we receive
    The text you paste or the file you upload, the citations found in it, and a sign-in token that identifies your account so we can apply your plan.
    Where it goes
    Your draft is read on our servers in Sydney. Each citation is looked up in our case records, also in Sydney, through our lookup service, which runs on a global network and normally handles our requests in Sydney. When a footnote names a case, the name, and sometimes its citation, can be sent to a search-ranking service in the United States to find the closest records. Your draft, your name and your email address are not sent to it. If a check fails, the error report sent to the United States can include part of the draft.
    How long we keep it
    If you don't save the check, the draft text is not stored. We keep a one-way fingerprint of it, which cannot be turned back into your text, so a recheck of the same draft does not use another free draft. If you save the check, we keep the draft text, its citations and the results until you delete the check or your account.
    Your controls
    Delete a saved check at any time from the citation check page.Open your saved checks
  • Guest check, without an account
    Paste footnotes and check them without signing up.No generative AI
    Processed inSydney, AustraliaUnited States
    What we receive
    The footnotes you paste, and your network address, as for any web request.
    Where it goes
    Read on our servers in Sydney and looked up in our case records the same way as a signed-in check, including the search-ranking step in the United States for case names. Nothing is linked to an account. If a check fails, the error report sent to the United States can include part of what you pasted.
    How long we keep it
    Nothing is stored. We count guest checks per network address for one hour to stop abuse.
    Your controls
    Close the page and the footnotes are gone. Sign up only if you want to save a check.

Your account

  • Your account and signing in
    An email address and a 6-digit code. No password.No generative AI
    Processed inSydney, AustraliaUnited States
    What we receive
    Your email address, the sign-in codes we send, a display name and preferences if you add them, what you tell us about your studies (such as year level and subjects), your plan, and records of sign-ins.
    Where it goes
    Our account database in Sydney. Sign-in codes and service emails are sent through an email delivery service in the United States.
    How long we keep it
    While your account is open. When you ask us to delete your account, access ends at once and the account is permanently deleted after 30 days.
    Your controls
    Change your details in settings, download your data, or delete your account.Open your settings
  • Saved work
    Checks, cases, notes, folders and files you choose to keep.No generative AI
    Processed inSydney, AustraliaUnited States
    What we receive
    Whatever you choose to save, any files you upload to your library, and the email addresses of people you invite to a shared workspace.
    Where it goes
    Our database and file storage in Sydney. Invitations are emailed through the email delivery service in the United States. People you share with can see what you share with them.
    How long we keep it
    Until you delete it, or until your account is deleted.
    Your controls
    Delete any item, stop sharing, or download everything from your account page.Download your data

Running the service

  • Usage measurement and error reports
    How we see which features are used and what breaks.No generative AI
    Processed inUnited States
    What we receive
    A small set of product events, such as opening a citation, linked to a random account number and your plan. Analytics events don't include your draft, your name or your email address, and session recording is off. When something fails, an error report records technical details of the failed page or request.
    Where it goes
    Services in the United States. We remove common personal fields from error reports before they are sent, but a report about a failed check can include part of the request, which can include part of your draft.
    How long we keep it
    For a limited period set in each service, then deleted.
    Your controls
    Email us to ask about or remove data linked to your account.
  • Visiting the website
    What any website receives when you load a page.No generative AI
    Processed inGlobal network, near youUnited States
    What we receive
    Your network address, browser type and the pages you request. If you arrive from a link with campaign tags, the tags are kept in your browser tab and passed to the sign-up page.
    Where it goes
    Pages are served by a global delivery network from a location near you. Its request logs can be processed outside Australia, including in the United States. casesharp.ai sets no analytics or advertising cookies. The app uses cookies to keep you signed in.
    How long we keep it
    Campaign tags are cleared when you close the tab. Request logs are kept briefly by the network for security.
    Your controls
    Block or clear cookies in your browser. You will need to sign in again.
  • Emails to and from us
    Support, privacy requests and service messages.No generative AI
    Processed inUnited States
    What we receive
    What you write to us and your email address.
    Where it goes
    Our business email service, which can store messages outside Australia, including in the United States.
    How long we keep it
    As long as needed to answer you and keep a record of what we agreed, then deleted.
    Your controls
    Ask us to delete your messages once your request is closed.

Only for some people

  • Payments
    New paid plans are paused. This applies to existing subscribers.No generative AI
    Processed inSydney, AustraliaUnited States
    What we receive
    Customer and subscription references, plan status and billing events. Your card details go straight to our payment provider; we never see your full card number.
    Where it goes
    Our database in Sydney, and our payment provider, which processes payments in the United States.
    How long we keep it
    As long as tax and company law requires us to keep financial records.
    Your controls
    Manage or cancel a subscription from your account page.Open your account page
  • Generative AI features for earlier subscribers
    Off for free accounts and for every account created from 13 October 2026. Kept only for paid subscribers with older accounts.Uses generative AI
    Processed inSydney, AustraliaSingaporeUnited States
    What we receive
    For AI chat and any related generative tool: your question, the conversation so far, the case text it draws on, and any image you ask it to read.
    Where it goes
    A generative AI provider in Singapore. Its own policy says it may use content it receives to improve its models. If a web search is used to answer, the search words can also go to a web-search service in the United States.
    How long we keep it
    Your chats stay in your account in Sydney until you delete them. The provider keeps what it receives under its own policy.
    Your controls
    Don't use these tools for anything you would not want an overseas provider to see. The citation check and case pages never use them.
  • Practitioner interest list
    The optional email list on the casesharp.ai home page.No generative AI
    Processed inSydney, Australia
    What we receive
    Your email address, and a one-way code made from your network address to stop abuse.
    Where it goes
    Our database in Sydney.
    How long we keep it
    Until you ask to be removed or the list closes.
    Your controls
    Ask to be removed at any time.Ask to be removed

Countries

APP 1.4(f), (g)

Most of what you give us stays in Sydney. Some parts are processed overseas by services that run CaseSharp for us. These are the countries, and what can be processed in each.

Where your personal information can be processed
CountryWhat can be processed there
Sydney, Australia
  • Your account, saved work and search history
  • Reading your draft, and saved checks
  • Our case records and the lookups against them
United States
  • Case names and other search words sent for ranking
  • Sign-in codes, invitations and service emails
  • Usage measurement and error reports. An error report can include part of a check that failed
  • Emails you send us
  • Payments for existing subscribers
Singapore
  • Generative AI features, only for paid subscribers whose accounts were created before 13 October 2026
Global network, near you
  • Delivering web pages and running our lookup service. Requests are handled near where they start, but can pass through or be logged in other countries.

Under the Privacy Act we stay accountable for how overseas services handle personal information we send them (APP 8). We don't name these services publicly. If your university or library needs the list for a review, email privacy@casesharp.ai.

What we collect

APP 1.4(a)
  • Account details: your email address, and if you give them, a display name, your year level and subjects, and preferences.
  • What you check: the text or file you add to a citation check, and the citations found in it.
  • What you save: saved checks, cases, notes, folders and uploads, your search history, and invitations you send.
  • Plan and billing: your plan, and for existing subscribers, payment references and billing events. Never your full card number.
  • Technical and usage: sign-in records, network address, browser type, product events and error reports.
  • Messages: what you write to us.

Sensitive information

We don't ask for sensitive information, such as health, religious or political information. A draft can contain it, for example a reflective essay. We read a draft only to find its citations, and keep it only if you save the check.

How we collect and hold it

APP 1.4(b)

We collect information directly from you when you sign up, add a draft, search, save something or write to us, and automatically from your browser when you use the site. We don't buy lists or collect information about you from other people. The one exception: our payment provider tells us whether an existing subscriber's payment went through.

We hold your account and saved work in our database and file storage in Sydney. How we protect it is under security.

What we use it for

APP 1.4(c)

We use personal information only for these purposes. Each one says what it uses and what choice you have.

What we use personal information for
PurposeInformation it usesYour choice
Sign you in and run the features you useInformation it usesAccount details, and what you check, search and saveYour choiceSearch, case pages and the guest check work without an account
Apply your plan, including the free allowance of 3 drafts a monthInformation it usesYour plan, and fingerprints of the drafts you checkYour choiceRechecking the same draft is free
Keep what you save, and share it only where you ask us toInformation it usesSaved work, and the email addresses of people you inviteYour choiceDelete any item or stop sharing at any time
Answer support and privacy requestsInformation it usesYour messages and your account detailsYour choiceOnly when you write to us
Find and fix faults, and see which features are usedInformation it usesProduct events and error reportsYour choiceAsk us about, or to remove, data linked to your account
Stop abuse and keep the service secureInformation it usesNetwork address, sign-in records and request countsYour choiceNeeded to run the service
Meet our legal obligationsInformation it usesBilling records, and anything the law requires us to keepYour choiceNeeded by law
Send research invitations and availability updatesInformation it usesYour email address on the practitioner interest listYour choiceOnly if you join the list. Ask to be removed at any time

We send service emails, such as sign-in codes and account notices. If you join the practitioner interest list, we email you research invitations and availability updates. We send marketing email only to people who ask for it, and each one has an unsubscribe link.

What we never do

  • Sell your personal information.
  • Show you advertising, or share your information with advertisers.
  • Use your drafts to train AI models.
  • Tell your university, your lecturers or anyone else that you used CaseSharp, or what a check found.
  • Read your saved drafts, except to fix a fault you report, investigate misuse, or meet a legal obligation.

Who we share it with

APP 6, APP 8

We share personal information only:

  • with services that run parts of CaseSharp for us, for the purposes above. Each one, and its country, is listed under where it goes;
  • with people you choose to share with, such as a shared workspace;
  • when the law requires it, for example a court order. We tell you first unless the law prevents it; and
  • if CaseSharp is sold or restructured, with the new owner, who must keep to this policy. We tell you before that happens.

Automated decisions

APP 1.7 to 1.9

Computer programs make a few decisions about your account. None of them uses generative AI.

  • The free allowance. A free account can check 3 different drafts each calendar month, Sydney time. The program compares a one-way fingerprint of the draft with the drafts you have already checked that month. Rechecking the same draft is free. Once the allowance is used, a new draft waits until the next month.
  • Abuse limits. If an account or network address sends too many requests in a short time, further requests are refused for a while.
  • Features by plan. Which features an account can use depends on its plan and when it was created.

These use your account number, your plan, when your account was created, and your recent usage. We don't think they significantly affect anyone's rights or interests, but we list them so you know they happen. If you think one was applied wrongly, email privacy@casesharp.ai and a person will review it.

The citation check's labels describe records, not you. “Not in our records” means we don't hold that case, not that your citation is wrong. No label is a judgement about your work.

See, correct or delete it

APP 1.4(d)

You can ask for the personal information we hold about you, and ask us to correct it. It's free. Most of it you can do yourself:

  • Download your dataRequest an export from your account page. You get a secure download when it's ready.
  • Correct your detailsChange your display name, studies and preferences in settings.
  • Delete one thingDelete a saved check or any saved item. To clear your search history, email us; the app doesn't yet let you delete a search yourself.
  • Delete your accountFrom settings, or by email. How account deletion works.

For anything else, email privacy@casesharp.ai. We confirm the request comes from the account holder, for example by asking you to write from the account's email address, and reply within 30 days. If we can't do what you ask, we tell you why in writing and how to complain.

Using CaseSharp without your name

APP 2

You can search for cases and read case pages without an account or giving your name. An account needs an email address so we can send sign-in codes, but your display name can be anything you like. Paying for a subscription needs your real payment details.

Minimum age

CaseSharp is built for university law students. You must be 16 or older to create an account. We don't knowingly collect personal information from anyone younger. If you think a child under 16 has an account, email privacy@casesharp.ai and we will delete it.

Security and data breaches

APP 11

Information is encrypted on its way to us and where we store it. Each account can reach only its own saved work, and the database itself enforces that. Access to our production systems is limited to the people who run CaseSharp, and only to operate the service, fix faults, or respond to your request or a legal obligation.

If we suspect a data breach, we assess it within 30 days. If it is likely to cause serious harm, we notify you and the Office of the Australian Information Commissioner (OAIC) as soon as practicable, as the Notifiable Data Breaches scheme in Part IIIC of the Privacy Act requires.

How long we keep it

APP 11.2
How long we keep each kind of information
InformationHow long
Draft text of a check you don't save, and guest checksNot stored
Draft fingerprints used to count free draftsWith your account; deleted when your account is deleted
Saved checks, cases, notes, folders and uploadsUntil you delete them or your account
Search history when signed inUntil you ask us to clear it, or delete your account
Signed-out search counts and guest check countsOne hour
Account detailsWhile your account is open, then 30 days after you ask us to delete it
Billing recordsAs long as tax and company law requires
Interest list email addressesUntil you ask to be removed or the list closes

When you ask us to delete your account, access ends at once and the account, its records and uploads are permanently deleted after 30 days. If a step fails, we keep the closed account until the deletion succeeds rather than calling it done. We may keep limited billing, security or support records where the law requires or to deal with misuse. Copies can remain in database backups until those backups expire on their regular cycle.

Complaints

APP 1.4(e)

If you think we have mishandled your personal information, tell us first.

  1. Email privacy@casesharp.ai with what happened and what you would like us to do.
  2. We confirm we have it within 2 business days.
  3. We look into it and reply in writing within 30 days. If we need longer, we tell you why.
  4. If you are not satisfied, complain to the OAIC at oaic.gov.au or on 1300 363 992.

Changes and other formats

APP 1.5, 1.6

We review this policy at least once a year, and whenever a feature changes where information goes. The date at the top shows the latest change. If a change affects how we use information you have already given us, we email you before it takes effect.

  • One policy for casesharp.ai and the app. Names the countries where information is processed, adds the feature-by-feature panel, the citation check's data path, automated decisions and a minimum age of 16.
  • Previous version. It described overseas processing without naming countries.

In another format

Print this page or save it as a PDF from your browser. If you need it in another form, such as plain text or large print, email privacy@casesharp.ai and we will send it free.

Contact

Contact
Privacy Officer, CaseSharp
Company
Matter Desk Pty Ltd, ABN 39 697 017 502, Sydney, Australia

We handle privacy requests by email so there is a written record. If you would rather talk, or need a postal address, say so in your email and we will arrange it.