Privacy Policy

Effective Date: May 1, 2026  |  Last Updated: May 25, 2026

UnionWork(TM) CaseFlow ("we," "us," or "our") is committed to protecting the privacy of union locals, their representatives, and members who use our platform. This Privacy Policy explains what information we collect, how we use it, and your rights with respect to that information.

1. Information We Collect

We collect information you provide directly when you register, configure your portal, or contact support:

• Organization name, local number, and union affiliation
• Contact information (name, email address, phone number)
• Billing and payment information (processed securely via Stripe - we do not store card numbers)
• Case and grievance data you enter into the CaseFlow portal (stored in your workspace only)
• Login credentials (passwords are hashed and never stored in plain text)

We also collect limited technical data automatically: browser type, IP address (for security logging), and usage patterns (page visits, feature interactions) to improve the platform.

2. How We Use Your Information

• To provision and operate your CaseFlow workspace
• To send account credentials, invoices, and support communications
• To process subscription payments
• To provide the Stewie AI feature (prompts are sent to the AI provider you configure - we do not log AI conversations server-side beyond error reporting)
• To improve platform performance and fix bugs
• To comply with legal obligations

3. Case Data and Member Information

All grievance data, case notes, and member information you enter into CaseFlow belongs to your union local. We do not sell, share, or use this data for any purpose other than operating the service you subscribed to. Case data is stored in your workspace and is not accessible to other subscribers.

4. Data Sharing

We do not sell your information. We share data only with:

• Supabase - our database provider (data stored in US data centers)
• Stripe - payment processing (PCI-DSS compliant)
• EmailJS / Gmail SMTP - transactional email delivery
• Anthropic / OpenAI / Google - only when you use the Stewie AI feature with your own API key; your prompts are sent directly to the provider you configure
• Law enforcement or courts when required by valid legal process

5. Data Retention

We retain your workspace data for the duration of your active subscription plus 90 days after cancellation, during which you may export your data. After that period, data is permanently deleted.

6. Security

We implement industry-standard security measures including TLS encryption in transit, bcrypt-hashed passwords, row-level security on all database tables, and role-based access controls. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security but take commercially reasonable steps to protect your data.

7. Your Rights

You may request access to, correction of, or deletion of your personal data at any time by contacting us at support@unionworkcaseflow.com. We will respond within 30 days.

8. Cookies

CaseFlow uses localStorage (browser-side storage) to maintain your session and preferences. We do not use third-party advertising cookies. We use no tracking pixels.

9. Changes to This Policy

We may update this policy from time to time. We will notify active subscribers by email of material changes at least 14 days before they take effect.

10. Contact

Questions about this Privacy Policy may be directed to:
UnionWork(TM) CaseFlow
Email: support@unionworkcaseflow.com