MyCases

Data Processing

Last updated: 2026-07-18
This page is maintained by the MyCases service operator to answer common product, privacy, and security questions. It is app-owned content, not an independent certification. For legally binding terms, refer to the applicable order or service agreement.

This page is a plain-language summary. It is not itself a Data Processing Agreement (DPA).

Roles

  • For individual and family accounts on MyCases, you provide the case data and the MyCases service operator identified in the applicable order, invoice, or service agreement processes it to provide the Service to you.
  • For team accounts on MyCases, the account owner is the controller for data added by their members and invitees; the Service Operator is the processor acting on the owner's documented instructions embedded in the product.

Categories of Data Processed

  • USCIS receipt numbers and returned public case status.
  • Beneficiary metadata provided by you.
  • Team membership and role metadata.
  • Notification channel configuration and delivery status.
  • Billing metadata (plan, seats, subscription status).
  • Operational logs required for reliability and abuse prevention.

Purposes

  • Providing case lookup, tracking, and notifications.
  • Organizing cases via folders, beneficiaries, and teams.
  • Operating billing and quotas.
  • Securing the Service and supporting you.

Categories of Sub-processors

  • Managed database and hosting infrastructure (Supabase-managed).
  • Product hosting and delivery (Lovable-managed platform).
  • Payments (Stripe).
  • AI providers used for document parsing and translation.
  • User-configured notification transports (Telegram, WeCom webhooks).

Requests

Data export and deletion requests can be submitted via /en/contact. Self-serve, account-wide export and deletion tools are in progress; today, case-level CSV export is available inside the product.

Enterprise DPA

A DPA and an itemized sub-processor list may be offered or negotiated for qualifying enterprise engagements. Please contact sales to request one. Until a DPA has been executed by both parties, no such agreement is in force.