This page is a plain-language summary. It is not itself a Data Processing Agreement (DPA).
Roles
- For individual and family accounts on MyCases, you provide the case data and ABAI processes it to provide the Service to you.
- For firm/team accounts on MyCases, the account owner is the controller for data added by their members and invitees; the Service Operator is the processor acting on the owner's documented instructions embedded in the product.
Categories of Data Processed
- USCIS receipt numbers and returned public case status.
- Beneficiary metadata provided by you.
- Team membership and role metadata (team accounts only).
- Notification channel configuration and delivery status.
- Plan and usage metadata (the personal version is on the free plan).
- Operational logs required for reliability and abuse prevention.
Purposes
- Providing case lookup, tracking, and notifications.
- Organizing cases via folders, beneficiaries, and teams.
- Enforcing quotas.
- Securing the Service and supporting you.
Categories of Sub-processors
- Managed database and hosting infrastructure (Supabase-managed).
- Product hosting and delivery (Lovable-managed platform).
- Payments (Stripe), for paid services only.
- AI providers used for document parsing and translation.
- User-configured notification transports (Telegram, WeCom webhooks, email).
Requests
Signed-in users can request an account data export and account deletion under Settings → Data & privacy (see Account deletion). If you cannot sign in, use the data request form.
Enterprise DPA
A DPA and an itemized sub-processor list may be offered or negotiated for qualifying enterprise engagements. Please contact us via the contact form to request one. Until a DPA has been executed by both parties, no such agreement is in force.