Privacy Policy

Case Connect Group LLC dba Kayse

Voice & Messaging AI Platform for Legal, Home Services, and Adjacent Support Businesses

Effective Date: May 4th, 2026 · Version 2.3

1. Introduction

Welcome to Case Connect Group LLC, a New York limited liability company doing business as Kayse, Kayse AI, Kayse.ai, Kayse App, and Kayseapp.com (collectively, “Kayse,” “we,” “us,” or “our”). Kayse provides voice and messaging AI services to law firms, home services businesses, call centers, intake centers, lien resolution companies, marketing firms, settlement companies, case processing companies, claims administrators, and other ancillary or adjacent support companies that serve the legal and home services industries across the United States. “Kayse”™ is a registered trademark of Case Connect Group LLC.

Kayse provides a voice and messaging AI platform designed for law firms, home services businesses, and ancillary or adjacent support companies that serve those industries (including, for example, call centers, intake centers, lien resolution companies, marketing firms, settlement companies, case processing companies, claims administrators, and similar service providers) in the United States. Platform features may include AI receptionist services, automated voice calls, SMS and email messaging, intake automation, client and customer engagement, and CRM and practice-management integrations. Specific features available to a customer depend on the customer’s subscription level and configuration.

This Privacy Policy describes how Kayse generally collects, uses, discloses, and protects personal information in connection with the Kayse platform, our websites, our mobile and web apps, and related services (the “Services”).

Scope. This Policy applies to individuals located in any U.S. state or U.S. territory who interact with the Services, including residents of California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Iowa, Delaware, New Jersey, New Hampshire, Minnesota, Tennessee, Maryland, Indiana, Kentucky, Rhode Island, and other U.S. jurisdictions. Kayse aims to provide privacy practices consistent with applicable U.S. federal and state privacy laws and, where reasonably practicable, extends similar choices to U.S. residents in other states. To the extent any provision of this Policy conflicts with a mandatory requirement of applicable law, the requirement of applicable law will govern.

2. Communications Consent — Voice, SMS, Email, and Portal

This section describes how Kayse handles consent for communications sent or facilitated through the Services. It is intended, in part, to reflect best practices for A2P 10DLC registration and similar messaging-program requirements. It is not intended to describe, govern, limit, or make any warranty or representation about what any Kayse customer does with its own contact data, leads, intakes, or messaging lists, or about how a Kayse customer obtains, records, or honors consent through its own operations.

Channels and channel-level controls

The Services may include multiple communication channels, including (a) Voice AI calls (inbound and outbound), (b) SMS and MMS text messaging, (c) email, and (d) client portal messages and in-app notifications. Each channel generally offers its own opt-in and opt-out mechanisms, and consent and opt-out preferences are generally tracked on a per-channel basis.

Consent collected directly by Kayse

Where an individual provides opt-in consent directly to Kayse to receive communications from Kayse (for example, signing up for Kayse product updates), Kayse does not share the contact information collected through that opt-in with unaffiliated third parties for those third parties’ own marketing or promotional purposes. This is consistent with A2P 10DLC and similar carrier and industry messaging-program guidelines.

Consent collected by customers using the Services

Where a Kayse customer collects opt-in consent from individuals through the Services, the customer is independently responsible for obtaining, recording, honoring, and revoking that consent in accordance with applicable law. Kayse does not direct or control how customers obtain or use opt-in consent through their own operations and makes no warranty or representation regarding any customer’s consent practices or compliance.

Opt-out across channels

Recipients may withdraw consent or opt out using the channel-appropriate mechanism, for example: (a) SMS — reply STOP (or another carrier-recognized opt-out keyword); (b) email — use the unsubscribe link in the message; (c) Voice AI — tell the agent they do not wish to be contacted on that channel; and (d) client portal messages and in-app notifications — adjust notification preferences or settings within the portal. Opt-out applies to the channel and category for which it is requested. Transactional, service, intake, account-related, and other non-marketing communications may continue across channels as permitted by applicable law and the underlying relationship between the recipient and the party with which the recipient is engaged.

Customer responsibility for use of contact data and leads

Each Kayse customer is independently responsible for what it does with its own contact data, leads, intakes, recordings, transcripts, and messaging lists. Kayse does not direct or control how customers use the data they collect or generate through their own business activities, and Kayse is not responsible for customer compliance with applicable laws, including the Telephone Consumer Protection Act, CAN-SPAM, the Fair Debt Collection Practices Act, state consumer-protection laws, professional-conduct rules, and similar requirements that apply to the customer’s own operations.

3. Information We Collect

3.1 Information Collected from Third-Party Apps and Integrations

Kayse may receive data from CRMs, practice-management systems, dialers, calendars, payment systems, and similar tools the First Party connects to Kayse, which may include:

  • Contact information: name, email, phone number, mailing address, and other identifiers.
  • Activity data: interaction history, call logs, message logs, transaction records, and communication history.
  • Intake and matter information: information appropriate to the First Party’s line of business — for example, for law firms: case type, incident details, jurisdiction, retainer status, documents, and notes; for home services: service request type, property details, scheduling, estimates, and job notes; and for ancillary or adjacent businesses: intake or matter records relevant to the services they provide, such as call disposition data, lien or settlement details, marketing campaign data, or case-status information.
  • Recordings and transcripts: audio recordings, AI-generated transcripts, and summaries of calls and voicemails handled by the AI receptionist or voice agents, where lawful and appropriately disclosed.
  • Messaging content: SMS, MMS, email, and chat messages exchanged through the Services.
  • Other relevant data: additional information that may be useful to provide the Services.

3.2 Information You Provide Directly

  • Account information: username, password, role, profile details, and billing information.
  • Communications: messages, feedback, support tickets, and other communications with our team.
  • Verification information: identifiers used to confirm identity for security or rights requests.

3.3 Information Collected Automatically

  • Device and usage data: IP address, device identifiers, browser type, operating system, pages viewed, links clicked, and timestamps.
  • General location data: approximate location derived from IP address.
  • Cookies and similar technologies: as described in Section 13.

3.4 Sensitive Information

Because Kayse serves law firms, intake conversations may include sensitive personal information (for example, health, injury, financial, or legal-status details). Kayse seeks to handle this information with safeguards appropriate to its sensitivity, does not use it for advertising, and does not use it to infer characteristics about a consumer.

4. Voice and Messaging AI — Specific Practices

Call recording and transcription

When the Services place, receive, or assist with calls, recordings and AI-generated transcripts may be created for quality, training, intake, and recordkeeping purposes. The platform offers configuration options that allow First Parties to provide consent and recording disclosures where required by federal or state law, including in California, Florida, Illinois, Maryland, Massachusetts, Montana, Nevada, New Hampshire, Pennsylvania, Washington, and other states with all-party-consent rules. The First Party is responsible for selecting and implementing the disclosure and consent practices appropriate for its operations.

AI-generated voices and messages

Kayse’s voice AI may use synthesized voices to interact with callers. The platform offers configuration options for AI-disclosure messaging; the First Party is responsible for using those options where disclosure is required by law. See Section 5 (Artificial Intelligence Practices and Disclosures) for further information.

Telephone Consumer Protection Act (TCPA), CAN-SPAM, and 10DLC

Outbound voice calls, SMS, and email sent through Kayse rely on the First Party’s lawful basis to contact the recipient (for example, prior express consent, an established business relationship, or another permitted basis). Kayse provides tools intended to support opt-out handling, quiet-hours configuration, suppression-list management, and 10DLC-registered messaging, but the First Party is solely responsible for ensuring lawful contact, including obtaining and maintaining required consents and complying with applicable do-not-call rules and state-specific requirements.

Opt-out and STOP

Recipients may opt out of marketing messages by replying STOP to an SMS, by following the unsubscribe link in a marketing email, or by telling the voice AI they do not wish to be contacted. Transactional, service, and intake communications may continue as permitted by law.

First-Party responsibility

The First Party is solely responsible for: (a) the accuracy and lawfulness of contact data and Leads provided to or generated through the Services; (b) obtaining and maintaining all consents required to contact, record, message, or otherwise communicate with individuals; (c) for law firms, compliance with applicable rules of professional conduct and any advertising or solicitation rules; (d) for home services businesses, compliance with applicable industry and consumer-protection rules; and (e) for call centers, intake centers, lien resolution companies, marketing firms, settlement companies, case processing companies, claims administrators, and other ancillary or adjacent support businesses, compliance with all federal, state, and industry-specific laws, regulations, and contractual obligations applicable to their services. Kayse does not provide legal advice.

5. Artificial Intelligence Practices and Disclosures

This section summarizes how Kayse uses artificial intelligence (“AI”) in connection with the Services and how Kayse approaches AI-related disclosures. For more detail, Kayse maintains a separate Kayse AI Data Policy, which is the controlling document for Kayse’s AI data practices and is updated from time to time. In the event of any conflict between this Privacy Policy and the Kayse AI Data Policy regarding AI-specific data practices, the Kayse AI Data Policy controls.

AI is used for inference, not training

Kayse uses AI strictly for inference within defined workflows. Kayse does not use customer-specific data — including message bodies, chat content, email content, call transcripts, call recordings, case or matter data, attorney-client communications, and related metadata — to train, retrain, or fine-tune any AI models. AI models used by Kayse are pre-trained by vendors and used exclusively for inference within the Services.

AI vendor configuration

Kayse uses AI vendors under business-tier accounts where available, with administrative settings designed to restrict vendor-side reuse of prompts and responses for model training. Where the controls are available within a vendor account, Kayse configures settings such as data-logging, evaluation sharing, fine-tuning sharing, and input/output sharing in line with the practices described in the Kayse AI Data Policy. New AI vendors are subject to documented internal review prior to use.

Limits on Kayse’s control over third-party AI vendors

Kayse does not control the global training methodologies, internal architectures, or roadmaps of independent third-party AI vendors beyond account-level configurations and contractual commitments. Kayse does not guarantee, represent, or warrant the data-handling practices of third-party AI vendors beyond the controls and commitments referenced in the Kayse AI Data Policy and the applicable vendor agreements.

Disclosure to recipients of AI use (state law)

Several U.S. states have enacted, or are in the process of enacting, laws or guidance addressing the disclosure of AI use in consumer-facing interactions, including, for example, the Utah Artificial Intelligence Policy Act, California’s bot-disclosure rules and AI transparency laws, the Colorado AI Act, and similar measures in Texas, New York, Illinois, and other states. The Services offer configuration options that allow First Parties to provide AI-disclosure messaging across voice, SMS, email, and portal channels where required by applicable law. The First Party is responsible for selecting and implementing AI disclosures appropriate for its operations, channels, audiences, and the jurisdictions in which it operates.

Use case — no high-risk automated decisions

Kayse’s AI features are designed to assist with communications, intake, scheduling, summarization, and similar workflow tasks, and are not designed to be the sole basis for legal, medical, employment, lending, housing, insurance, or other decisions that produce legal or similarly significant effects on individuals. Where state law provides rights to opt out of profiling or solely-automated decisions that produce such effects, Kayse seeks to support First Party compliance to the extent applicable to the Services.

Data architecture and separation

Production communication data flowing through the Services is separated from any model training environment. AI inference operates on First Party data in accordance with the parties’ agreement, this Privacy Policy, and the Kayse AI Data Policy.

Employee AI governance

Access to AI configuration settings is restricted to authorized personnel. Personnel with such access are required to complete Kayse’s AI governance training and to acknowledge Kayse’s internal AI data-handling policies.

Reviews and updates

Kayse periodically reviews its AI vendor configurations and AI-related practices. The Kayse AI Data Policy will be updated to reflect material changes, with a revised version date.

6. How We Use Personal Information

  • Service delivery: to provide and operate the Services for the First Party, including AI receptionist, voice, messaging, intake, and CRM-integration features.
  • Lead handling on behalf of the First Party: to capture, route, and respond to Leads for the applicable First Party.
  • Personalization: to tailor the experience for authorized users of the First Party’s account.
  • Communication: to send service updates, security alerts, billing notices, and support responses.
  • Analytics and improvement: to analyze usage patterns, debug issues, and improve the Services, generally using aggregated, de-identified, or otherwise processed data.
  • Security and fraud prevention: to detect, investigate, and seek to prevent fraud, abuse, and unlawful activity.
  • Legal compliance: to comply with legal obligations and to protect the rights, property, and safety of Kayse, our customers, and the public.

7. How We Share Personal Information

Kayse does not sell personal information. Kayse may share personal information as described below:

  • With the First Party: the customer that owns the account (for example, the law firm, home services business, call center, lien resolution company, marketing firm, settlement company, case processing company, claims administrator, or other ancillary or adjacent support business) is provided access to its own Leads, recordings, transcripts, and records consistent with the parties’ agreement.
  • Service providers (sub-processors): vendors that help host, secure, and operate the Services (for example, cloud hosting, telephony carriers, transcription, and analytics providers) under written contracts intended to limit their use of personal information to providing services to Kayse.
  • Affiliates: entities that control, are controlled by, or are under common control with Case Connect Group LLC, under terms consistent with this Policy.
  • Legal authorities: when reasonably necessary to comply with a subpoena, court order, or other lawful process, or to protect rights, safety, or property.
  • Business transfers: in connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, with notice where required by law.
  • With your direction: when an authorized user of the First Party directs Kayse to share data with a connected third-party application or recipient.

Sensitive information. Kayse does not disclose sensitive personally identifiable information to unaffiliated third parties for those parties’ own marketing or lead-generation purposes.

8. How We Protect Personal Information

Kayse seeks to use commercially reasonable administrative, technical, and organizational measures designed to help protect personal information against unauthorized access, use, alteration, and disclosure. Such measures may include, depending on the Service and subscription level, encryption in transit, encryption at rest, access controls, account-level access management, logging, monitoring, vendor-management practices, and documented incident-response procedures. Specific measures may evolve over time as the platform develops and as Kayse adopts updated practices.

Account structure

Depending on the subscription level, customer accounts may be organized into organizations and sub-organizations, with role-based access controls designed to limit access to authorized users of the applicable account. Specific architectural details may vary and may evolve over time.

Sub-processors

Kayse engages third-party service providers to help operate the Services and seeks to bind them to written confidentiality and security obligations appropriate to the services they provide.

Incident response

Kayse maintains procedures intended to address suspected security incidents and to provide notifications where required by applicable U.S. breach-notification laws.

No guarantee or warranty of security

No method of transmission over the internet, method of electronic storage, or security control is 100% secure. Kayse does not guarantee, represent, or warrant the absolute security or integrity of personal information. Personal information is provided to Kayse at the user’s and First Party’s own risk. To the maximum extent permitted by law, Kayse disclaims all warranties, express or implied, regarding the security of personal information, and is not responsible for unauthorized access resulting from compromised, shared, or misused credentials, user or First Party misconfiguration, third-party services not controlled by Kayse, or events outside Kayse’s reasonable control.

9. Data Retention

Kayse retains personal information for as long as reasonably necessary to provide the Services to the First Party, comply with legal, regulatory, tax, accounting, recordkeeping, or reporting obligations (including, where applicable, recordkeeping rules applicable to law firms), resolve disputes, defend legal claims, and enforce agreements. When personal information is no longer needed for these purposes, Kayse will take reasonable steps to delete, anonymize, or de-identify it. Subject to applicable retention obligations, the First Party may request deletion of its data by contacting help@kayse.ai.

10. Your Privacy Rights — United States

Subject to applicable law and any permitted exceptions, U.S. residents may have the rights described below. The specific rights available, and the procedures for exercising them, depend on the state in which you reside and the role Kayse plays with respect to your personal information (for example, service provider/processor versus business/controller). Where Kayse acts as a service provider or processor on behalf of a First Party, certain requests will be forwarded to the First Party for handling.

  • Right to know / access: request confirmation that personal information is processed and a copy of certain personal information.
  • Right to correct: request correction of inaccurate personal information.
  • Right to delete: request deletion of personal information, subject to legal exceptions.
  • Right to portability: request personal information in a portable, commonly used format, where applicable.
  • Right to opt out of sale or sharing: Kayse does not sell personal information or share personal information for cross-context behavioral advertising.
  • Right to opt out of profiling and certain automated decisions: where required by state law, you may opt out of profiling that produces legal or similarly significant effects.
  • Right to limit use of sensitive personal information: you may request limits on the use of sensitive personal information consistent with applicable law.
  • Right to non-discrimination: you will not be denied service or charged different prices for exercising rights provided by applicable law.
  • Right to appeal: if a rights request is denied, you may appeal that decision where applicable law provides this right.

10.1 State-Specific Notices

California (CCPA / CPRA): California residents have the rights described above and may designate an authorized agent. Kayse has not sold personal information or shared personal information for cross-context behavioral advertising and does not intend to do so.

Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Iowa, Delaware, New Jersey, New Hampshire, Minnesota, Tennessee, Maryland, Indiana, Kentucky, Rhode Island, and other states with comprehensive privacy laws: residents have the rights described above to the extent provided by their state law.

Nevada: Nevada residents may opt out of certain sales of personal information; Kayse does not engage in such sales.

Washington and other consumer-health-data laws: Kayse does not knowingly collect or process consumer health data for purposes outside the intake activities of the applicable First Party, and applies safeguards to such data consistent with this Policy.

10.2 How to Exercise Your Rights

Submit a request to help@kayse.ai. Kayse may verify your identity before responding to certain requests. If a request is submitted through an authorized agent, the agent must provide signed written permission, and you may be asked to verify your identity directly.

Appeals. To appeal a decision, email help@kayse.ai with the subject line “Privacy Appeal.”

11. Children

The Services are not directed to children under 18, and Kayse does not knowingly collect personal information from children. If you believe a child has provided personal information through the Services, contact help@kayse.ai and Kayse will investigate and, where appropriate, delete the information.

12. United States Operations

Kayse operates in the United States, and the Services are intended for U.S.-based law firms, home services businesses, and ancillary or adjacent support companies that serve those industries (including, for example, call centers, intake centers, lien resolution companies, marketing firms, settlement companies, case processing companies, and claims administrators), and for individuals located in the United States. By using the Services, you acknowledge that personal information may be processed in the United States.

13. Cookies and Tracking Technologies

Kayse’s websites and apps may use cookies, pixels, and similar technologies to enable core functionality, remember preferences, support security, and measure performance. You can generally manage cookies through your browser settings or through any cookie-preference tool we make available. Where required by applicable law, Kayse will seek to honor recognized opt-out preference signals such as Global Privacy Control (GPC).

14. Changes to this Privacy Policy

Kayse may update this Privacy Policy from time to time. The updated version will be posted on Kayse’s website with a revised “Effective Date.” Where required by law or where Kayse considers it appropriate, additional notice may be provided through the Services or by email to account administrators. Continued use of the Services after the Effective Date of an updated Privacy Policy constitutes acceptance of the updated Policy.

15. No Legal Advice; Relationship to Other Agreements

This Privacy Policy is provided for informational purposes and does not constitute legal advice. The Services are governed by the master services agreement, order form, terms of service, or other written agreement between Kayse and the First Party (the “Customer Agreement”). To the extent of any conflict between this Privacy Policy and the Customer Agreement with respect to a Kayse customer, the Customer Agreement governs as between Kayse and that customer.

16. Contact Us

Case Connect Group LLC dba Kayse
c/o Kayse App
www.kayse.ai
help@kayse.ai