Privacy Policy
Last updated: August 12, 2026
Case Builder (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our cloud-based legal case management platform, accessible at casebuilder.com and app.hybridfb.com(collectively, the “Service”).
1. Information We Collect
1.1 Information You Provide
- Account Information: When you register, we collect your name, email address, and a hashed password. We never store plain-text passwords.
- Case Data: Documents, evidence files, annotations, cover page designs, and bundle configurations you upload or create within the Service.
- Billing Information: If you subscribe to a paid plan, our payment processor (PayPal) collects your payment details. We do not store full credit card numbers on our servers.
- Communications: Any information you provide when contacting support, including emails sent to support@hybridfb.com.
1.2 Information Collected Automatically
- Usage Data: Pages visited, features used, and actions taken within the Service.
- Device Information: Browser type, operating system, and device identifiers.
- Log Data: IP addresses, timestamps, and referral URLs. Logs are retained for a maximum of 30 days.
1.3 Cookies
We use essential cookies for authentication and session management. We also use a theme-preference cookie to remember your light/dark mode selection. We do not use third-party advertising or tracking cookies.
2. How We Use Your Information
- To provide, maintain, and improve the Service.
- To process your subscription and manage your account.
- To send transactional emails (account notifications, billing receipts, and product updates).
- To provide customer support and respond to inquiries.
- To detect, prevent, and address technical issues, fraud, or abuse.
- To comply with legal obligations and enforce our Terms of Service.
3. Data Storage and Security
All case files and documents are stored using Wasabi S3 object storage with server-side encryption at rest. Data in transit is protected by TLS 1.3. We perform regular automated backups and maintain a disaster recovery plan.
Access to your case files is strictly limited to you and any team members you explicitly authorize. Our staff cannot access your case documents unless you grant explicit permission for support purposes.
4. Data Retention
- Active Accounts: Your case data is retained for as long as your account remains active.
- Trial Expiry: If your free trial expires without conversion to a paid plan, your data is retained for 30 days, after which it is permanently deleted.
- Account Deletion: You may request account deletion at any time by emailing support@hybridfb.com. Upon confirmation, your data is permanently deleted within 14 days.
- Backups: Backup snapshots are retained for a rolling 90-day window.
5. Data Sharing and Disclosure
We do not sell, rent, or trade your personal information. We may share your information only in the following limited circumstances:
- Service Providers: With trusted third-party vendors who assist in operating the Service (e.g., Wasabi for storage, PayPal for payments). These providers are contractually bound to protect your data.
- Legal Compliance: If required by law, court order, or governmental regulation.
- Business Transfers: In connection with a merger, acquisition, or sale of assets, provided the successor entity agrees to uphold this Privacy Policy.
6. Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal data:
- Access and Portability: Request a copy of your personal data in a machine-readable format.
- Rectification: Correct inaccurate or incomplete personal data.
- Erasure: Request deletion of your personal data (“right to be forgotten”).
- Restriction: Request that we limit the processing of your personal data.
- Objection: Object to processing based on legitimate interests.
To exercise any of these rights, contact us at support@hybridfb.com. We will respond within 30 days. Verification of identity may be required.
7. GDPR Compliance
For users in the European Economic Area (EEA), we act as a data controller for account information and as a data processor for case documents you upload. Our legal basis for processing includes contractual necessity (providing the Service), legitimate interests (improving the Service and preventing fraud), and your consent (marketing communications, which you may opt out of at any time).
8. Children's Privacy
The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal data, we will delete it promptly.
9. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via email and/or a prominent notice within the Service at least 14 days before they take effect. Continued use of the Service after changes become effective constitutes acceptance of the updated policy.
10. Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us at:
Email: support@hybridfb.com