Privacy Policy

KASII is a case management agent operated by KASII (“KASII,” “we,” “us”). KASII is provided to law firms and other professional practices (each, a “Firm”) so they can run client check-ins, treatment-adherence tracking, loss-theory intake, and case updates with their clients (“Clients”).

This Privacy Policy explains what information KASII collects, how it is used, and the choices available to you. If you have questions, contact us at support@kasii.ai.

• Account information from Firms: name, work email, role, firm name, billing details.
• Client information provided by Firms: name, mobile phone number, email, date of birth, mailing address, and case-related context the Firm chooses to share with KASII (e.g. treatment plan, injury narrative).
• Messaging content: SMS, MMS, chat, and email exchanges between KASII and a Client, including responses, timestamps, and delivery status.
• Documents and photos a Client or Firm uploads, and the text KASII reads from them.
• Usage data: log data, device and browser information, and IP address.

• To deliver the case management service the Firm has engaged us for.
• To send SMS/MMS check-ins, reminders, and case updates to Clients on the Firm's behalf.
• To operate, secure, and fix KASII.
• To meet legal, regulatory, and contractual obligations.

When a Client chats or texts with a Firm through KASII, they may be talking with an automated assistant, not a person. The chat says so, and the assistant says so if asked. It does not give legal advice.

To write replies, summaries, and drafts, KASII sends messages, case details, and the text and images of uploaded documents to AI model providers through the Vercel AI Gateway. Before text is sent, KASII removes Social Security numbers, payment card numbers, and bank account numbers from it. Photos and scanned pages are sent as they are. Every request asks the provider not to keep what it is sent.

We do not use Firm or Client information to train AI models.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Information sharing to subcontractors that support the service (for example, our messaging carrier Telnyx) is permitted only to deliver the messages you have consented to receive. All categories of data exclude text-messaging originator opt-in data and consent; this information will not be shared with any third parties.

Clients receive messages from KASII because their Firm has added them to a case and the Client has provided their mobile number to the Firm in connection with that representation. Clients may opt out at any time by replying STOP to any message, or get help by replying HELP. Message frequency varies based on the case. Message and data rates may apply.

We share information only as needed to run the service:

• With the Firm that represents the Client — KASII acts on the Firm's behalf and the Firm sees the messages KASII exchanges with its Clients.
• With service providers who help us deliver the product, listed below.
• For legal reasons — to comply with law, valid legal process, or to protect the rights, safety, and property of KASII, our users, or others.
• In a corporate transaction — if KASII is involved in a merger, acquisition, or sale of assets, information may transfer subject to this Policy.

We do not sell personal information, and we do not share mobile phone numbers or SMS opt-in data with third parties or affiliates for their own marketing.

These companies process information for KASII to run the service. Each does only what is described here.

• Vercel: Runs the Kasii website and app, and limits how fast anyone can call it. Everything the app handles passes through it while a request is served, plus IP addresses.
• MongoDB Atlas: The database. Everything stored: firm and staff accounts, case details, chat and message history, document text, audit records. Case details and document text are encrypted by Kasii before they are stored.
• Vercel AI Gateway: Routes every request to an AI model. Anthropic's Claude writes replies, summaries and drafts; OpenAI turns text into search vectors. Chat and text messages, case details, document text and page images. Social Security, card and bank account numbers are removed from text first. Every request asks for zero data retention.
• Cloudflare: Stores uploaded files and serves images. Files clients and staff upload: photos, medical records, letters, signed documents.
• Amazon Simple Email Service: Sends email: sign-in codes, invitations, notices to staff, and messages to clients. Email addresses and the text of each email.
• Inngest: Runs background work: scheduled messages, document reading, syncs and clean-up. Record ids, plus message text, recipients and case content. Kasii seals the content with its own key before sending once that key is set up.
• Telnyx: Sends text-message alerts to staff who turn them on, and is one of the two texting services a firm can connect for clients. Phone numbers and the text of each message.
• Mapbox: Checks that a postal address a client gives is real. The address, and nothing else about the person.
• Google sign-in: Lets staff sign in with a Google account. The staff member's name and email address. Only when Google sign-in is turned on.
• Microsoft sign-in: Lets staff sign in with a Microsoft work account. The staff member's name and email address. Only when Microsoft sign-in is turned on.
• Sentry: Collects error reports so we can fix faults. Error messages and record ids, with personal details scrubbed first. Only when error reporting is turned on.
• Browserless: Opens a firm's public website to copy its colours and logo into Kasii. The address of the firm's public website. No client data. Only when a firm imports its look from its website.

A firm can also connect services it already uses, with its own account. Those are the firm's vendors, chosen by the firm, and they receive only what the firm sets up to send them:

• Google Workspace (Gmail and Google Drive): Reads the firm's mail and files, and saves documents to the firm's Drive. What the firm chooses to sync or send: email, files and case documents.
• Microsoft 365: Reads the firm's mail and document libraries. Mail and files from the folders and sites the firm picks.
• QuickBooks Online (Intuit): Keeps client records in step with the firm's QuickBooks. Client names, record ids and dates.
• iink: Tracks the progress of payment checks through the firm's iink account. Record ids and dates.
• OpenPhone (Quo): Files the firm's calls, texts and call transcripts to the right case. Nothing is sent; Kasii reads the firm's call and text history with the firm's own API key.
• Lawmatics: Keeps the firm's case management system up to date. Client names, contact details, case fields and documents the firm maps.
• CasePeer (through Zapier): Keeps the firm's case management system up to date. Client names, contact details, case fields and documents the firm maps.
• Salesforce or Litify: Keeps the firm's case management system up to date. Client names, contact details, case fields and documents the firm maps.
• ClickSend: The other texting service a firm can connect to text its clients. Phone numbers and the text of each message.
• Chatbase: Answers clients with the firm's own Chatbase assistant, when a firm chooses to use one. The client's chat messages. Kasii's zero-retention request does not apply here.
• LexisNexis: Legal research with the firm's subscription. Search words and citations. No client records.
• CourtListener: Searches published court opinions. Search words and citations. No client records.
• California Department of Industrial Relations: Searches published Cal/OSHA appeals board decisions. Search words and citations. No client records.

A Firm decides how long a Client's case is kept. KASII never deletes an open case on a timer. Once a Firm closes a case, it is kept for the period the Firm sets, and a Firm can put a case on hold so it is not deleted at all. The Firm's owner is told 30 days before any case is deleted.

A Firm can also delete a single case, document, or contact at any time. Account information is kept while the Firm's account is open. A Client who wants their information deleted should ask their Firm, or email us at the address below.

Case details and the text of documents are encrypted before they are stored, and the credentials for systems a Firm connects are encrypted under a separate key. Information travels over encrypted connections. Firm staff see only their own firm's cases. No method of transmission or storage is perfectly secure. Our security page says what is protected, what is not, and how to report a problem.

• SMS opt-out: reply STOP to any KASII message to unsubscribe from that program. Reply HELP for support.
• Access, correction, deletion: Clients may contact their Firm or email us at support@kasii.ai to request access, correction, or deletion of their information, subject to applicable law and the Firm's legal and ethical retention obligations.
• State-specific rights: residents of certain US states (including California, Colorado, Connecticut, Virginia, and Utah) may have additional rights regarding their personal information. To exercise them, contact us at the address above.

KASII is not directed to children under 13 and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us so we can delete it.

KASII is operated from the United States, and the service providers listed above process information in the United States. By using KASII, you understand that information will be processed in the United States, which may have different data-protection laws than your jurisdiction.

Where information is transferred from the European Economic Area, the United Kingdom, or Switzerland, we rely on appropriate safeguards for such transfers — typically the European Commission's Standard Contractual Clauses (and the UK / Swiss equivalents) or another lawful transfer mechanism — as contemplated by Chapter V of the GDPR. You may contact us (see below) to ask about the safeguards that apply to a specific transfer.

We may update this Privacy Policy from time to time. Material changes will be communicated through the dashboard or by email. Continued use of KASII after the effective date constitutes acceptance of the updated Policy.

Questions or requests? Email support@kasii.ai.

For data-protection matters — including access, correction, deletion, or questions about international transfers — you can reach our data protection contact at privacy@kasii.ai.