GDPR Notice
Last updated: July 20, 2026
This notice supplements our Privacy Policy for individuals in the European Economic Area (EEA) and the United Kingdom. The full description of what we collect, why, and who we share it with is in the Privacy Policy — this page summarizes the points specific to the EU/UK General Data Protection Regulation (GDPR).
Controller and processor roles
- Direct accounts: Live Case Inc., 1007 North Orange Street 4th Floor #12, Wilmington, DE 19801, is the data controller for personal data of users who sign up and use Live Case directly.
- Institution-provisioned accounts: when you access the Service through your school, university or employer (for example an LTI launch from your learning platform or institutional single sign-on), that institution is generally the controller of your learning data and we act as its processor / service provider. Its privacy notices apply alongside ours, and we may refer requests concerning that data to your institution.
Contact for data-protection matters: [email protected].
Legal bases we rely on
- Performance of a contract (Art. 6(1)(b)) — providing the platform: accounts, playing and hosting cases, storing progress and results, AI conversations and feedback, payments, support.
- Consent (Art. 6(1)(a)) — optional features and tools: voice/camera conversation mode, non-essential cookies and analytics. You can withdraw consent at any time (switch to text mode; change cookie preferences via the link in the page footer).
- Legitimate interests (Art. 6(1)(f)) — securing the Service, preventing fraud and abuse, operational logging, improving the Service with aggregate statistics, and communicating about content you created.
- Legal obligation (Art. 6(1)(c)) — tax, accounting and compliance record-keeping.
Your rights
Subject to the conditions in the GDPR, you have the right to:
- access the personal data we hold about you, and receive a copy in a portable format (you can self-serve a JSON export from your account settings);
- rectify inaccurate data (you can edit most profile data in account settings);
- erase your data (you can delete your account from the account "danger zone" page; some records are retained as described in the Privacy Policy, for example invoices we must keep, or session records processed on behalf of your institution);
- restrict or object to processing based on legitimate interests;
- withdraw consent at any time, without affecting the lawfulness of processing before withdrawal;
- lodge a complaint with your local supervisory authority. A list of EEA authorities is available at edpb.europa.eu; the UK authority is the ICO at ico.org.uk.
To exercise a right, use the self-service options or email [email protected]. We respond within the timelines the GDPR requires. If your account is managed by your institution, we may need to involve your institution in fulfilling the request.
International transfers
Live Case Inc. is based in the United States and uses service providers in the United States and elsewhere (listed in the Privacy Policy). Where personal data leaves the EEA/UK for a country without an adequacy decision, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (and the UK Addendum or IDTA), or the provider's certification under the EU-U.S. Data Privacy Framework where applicable.
Automated processing and AI
AI features on the platform (character conversations, grading suggestions, feedback) are part of the learning experience. AI-generated grades and feedback support — but do not replace — human educators: how they count toward any course outcome is decided by the host, author or institution running your session, not solely by automated means. Optional voice conversations are processed by our voice-AI provider and may include machine-derived expression measures, as described in the Privacy Policy; use text mode if you prefer not to have your voice processed.
Cookies
Non-essential cookies and analytics run only with your consent, which you can change at any time via the "cookie preferences" link in the page footer. Details are in our Cookie Policy.
Children
The Service is designed for higher education and professional learning and is not directed at children under 13. Where member state law sets an age of digital consent, access for younger learners should be arranged and authorized through their institution.