Privacy policy

Last updated: 19/09/2026. Can I Win This Case? operates this information service. Contact [email protected] about your information.

What you provide

When you request a preview, we process your case description, answers and optional documents to generate and privately store your assessment. You may choose no email delivery, one address or two addresses. Each nominated recipient receives the complete PDF separately. Only share information you are entitled to provide. Remove information that is not needed for your assessment.

Why we process it

We use case information to provide the assessment you request and administer its purchase and delivery. We use your processing consent for sensitive information you choose to include, and retain relevant records where needed for legal claims or legal obligations. Security controls and limited request records help prevent abuse. There is no marketing subscription or advertising profiling.

Service providers

Cloudflare hosts this site, converts uploaded documents and stores reports in private storage. OpenAI processes your case narrative and extracted document text to research, generate and review the report. We request that API responses are not stored as retrievable responses. Anonymous legal questions are used for web research; provider security retention may still apply. Stripe processes payments and associated billing information. We do not receive or store card numbers. Brevo sends the PDF copies you request. Our support address forwards through Cloudflare Email Routing to the operator's support inbox. Google Fonts receives connection information when your browser requests fonts.

Providers may process data internationally under their applicable data protection arrangements. Contact us to ask about the providers and safeguards relevant to your request. We do not pass your case to a solicitor or referral service simply because you read a recommendation.

Storage and retention

Unpurchased previews are removed after their availability period, normally within two days; previews awaiting delayed payment confirmation may remain for up to 14 days. Purchased report files and delivery details are retained for up to 366 days. Uploaded documents are deleted within 30 days, or sooner with an abandoned preview. Payment and support records may be retained where needed for accounts, disputes and legal obligations. Rate-limit identifiers are short-lived keyed hashes, not stored raw IP addresses in our application database.

Service analytics

Cloudflare Web Analytics records aggregated page views, visits, referrers, country, browser and device information so we can understand site traffic. Our first-party system also records button destinations, assessment stages and successful PDF download responses. These event records do not include your case description, document names, email address, payment details or private report access token. We retain event records for up to 13 months.

Secure access and your browser

A private access token is required to open your report. Keep that link private. The browser saves the current report access in session storage so that you can return after checkout or reload the page. Closing that browser session normally clears it. Downloaded PDFs and copies already emailed remain on the recipients' devices or accounts.

Your choices and rights

You may request access, correction, deletion, restriction or a portable copy, and object where that right applies. You may withdraw processing consent without affecting processing already carried out. We may need to verify your identity and may retain records required by law. Contact [email protected] with your report ID, without sending card details. You can complain to the Information Commissioner's Office.