Privacy Policy

1. Scope and accountable organization

This policy explains how ARIS PARTY LLC, doing business as Aris Party ("we", "us", or "our"), handles personal information for ShowCase accounts, subscriptions, entitlement checks, support, and the ShowCase subscription website. It does not cover a customer's own handling of case material. ARIS PARTY LLC is accountable for the personal information under its control.

2. What stays on your device

ShowCase is designed so case files, evidence, annotations, timelines, presentations, transcripts, and local AI prompts and outputs remain in storage controlled by you. ShowCase does not upload that case content to Aris Party's subscription service. Optional local AI uses an on-device model or a service running on your own computer.

You control backups, exports, sharing, retention, deletion, and access permissions for that local content. If you choose to open an external download or update service, that provider handles the request under its own policy.

3. Information we collect

• Account data: email address, verification status, authentication provider, SSO identifier, enrolled second-factor status, and an internal user ID.
• Subscription data: account type, plan, licensed-user limit and utilization, membership roles and status, subscription status, billing provider and period, trial or pilot dates, refund or revocation state, and Stripe, App Store, or Google Play transaction references.
• Firm administration data: verified work domains, DNS verification timestamps, invitations, administrator actions, auto-enrollment settings, and audit events. Firm audit events exclude case names, evidence metadata, and case contents.
• Billing data: name, billing address, tax details, payment status, and the last four digits and type of a payment method where Stripe makes those details available. Aris Party does not receive complete card numbers.
• Security and service data: authentication events, entitlement requests, signed-token timestamps, idempotency records, error details, and records needed to prevent fraud and prove subscription state.
• Partner referral data: creator code, campaign, click identifier, and limited source/content labels when you arrive through a partner link. The website retains a complete referral on your device for up to 60 days.
• Website measurement: privacy-limited page, interaction, device, and coarse location information. We do not send URL query strings or fragments to analytics and disable advertising personalization signals.
• Support data: information you choose to send when requesting help or exercising a privacy right.

4. Why we use it

We use this information to create and secure accounts, verify email addresses, process recurring payments and taxes, issue and revoke entitlements, support offline continuity, verify firm domains, apply administrator-authorized enrollment and capacity rules, prevent duplicate billing or commission events, respond to support and privacy requests, detect abuse, meet accounting and legal obligations, and improve the reliability of the subscription website.

We limit collection, use, and disclosure to purposes a reasonable person would consider appropriate. We do not sell customer personal information or use local case content to train models.

5. Service providers and disclosures

We disclose the minimum necessary information to service providers acting for us: Google Firebase for authentication and subscription records; Stripe for web Checkout, billing, tax, invoices, refunds, and the billing portal; Apple and Google for mobile purchases, purchase restoration, and store notifications; Google Analytics for privacy-limited website measurement; and infrastructure, email, security, or professional advisers as reasonably needed. These providers may process information outside your province, state, or country under their own security and contractual safeguards.

We may also disclose information when required by law, to protect rights or safety, or as part of a business transaction subject to appropriate safeguards. Partner reporting uses transaction and commission references and does not disclose your email address, payment credentials, or case content.

6. Retention, safeguards, and offline tokens

We retain account and subscription records while your account is active and afterward only as needed for security, disputes, refunds, accounting, tax, fraud prevention, and legal obligations. Checkout requests and financial event references are retained to preserve idempotency and audit history. Device-local partner referrals expire after 60 days unless replaced or removed.

We use access controls, verified email, encrypted transport, managed secrets, restricted database rules, signed webhooks, hashed verification evidence, mandatory administrator MFA and recent reauthentication, and short-lived signed offline entitlement tokens. A token is valid for no more than 72 hours on a paid active account or 24 hours during a trial or payment grace period, and is stored using operating-system secure storage. No system can guarantee absolute security.

7. Your choices and rights

Depending on where you live, you may ask to access, correct, or delete personal information, withdraw consent where consent is the basis for processing, or challenge our compliance. Some billing and audit records must be retained after account deletion. You can sign out to remove the local authentication session, manage or cancel billing through the Stripe customer portal, and use browser controls for local storage and analytics preferences.

ShowCase is not directed to children. You must be at least 18, or the age of legal majority where you live, to create a paid subscription.

8. Contact and complaints

Contact the Aris Party Privacy Officer at michael.dabish@arisparty.org for privacy questions, access or correction requests, deletion requests, or complaints. We may need to verify your identity before acting on a request. You may also complain to the privacy regulator with authority where you live.

9. Changes

We will post material changes here with a new effective date. When required, we will give additional notice or obtain new consent before using personal information for a materially different purpose.