Privacy Policy
Last updated: July 20, 2026
This Privacy Policy explains how Live Case Inc. ("LiveCase", "We", "Us" or "Our") collects, uses and shares your personal data when you use Live Case, accessible from https://www.livecase.com (the "Service"), and the rights you have over that data.
LiveCase is an immersive, case-based learning platform. Learners ("players") work through interactive cases, answer questions, and converse with AI-powered characters by text or voice. Educators and authors create and host those cases. This policy is written for all of these roles.
Who we are and how to contact us
The Service is operated by Live Case Inc., 1007 North Orange Street 4th Floor #12, Wilmington, DE 19801. For any privacy question or to exercise your rights, contact us at [email protected] or via our contact page.
Our role: when we are a "controller" and when we are a "processor"
- If you sign up directly (creating an account yourself, purchasing a case, authoring content), We act as the data controller for your personal data as described in this policy.
- If your account is provisioned by your school, university or employer (for example when you launch LiveCase from your institution's learning management system such as Blackboard or Canvas, or sign in through your institution's single sign-on), We process your personal data primarily as a service provider / processor on behalf of that institution. Your institution controls that data, and its own privacy notices and policies also apply. Requests about that data may be referred to your institution where required.
Information we collect
Information you provide
- Account data: email address, username, display name, password (stored only as a salted hash), and optional profile details such as first and last name, avatar image, bio, color and language preference.
- Billing data: billing name and address for purchases and invoices. Card details are collected and processed directly by our payment provider Stripe and never stored on our servers; We keep transaction records (what was purchased, amount, currency, billing address and Stripe transaction identifiers).
- Content you create: cases, characters, questions, and files that authors create or upload (images, audio, video, documents); answers, free-text responses and voice memos that players submit while playing a case; comments left by reviewers.
- Messages you send us: contact-form submissions, educator access requests, and support requests (name, email, and the content of your message).
Information from your institution or partner
When you access LiveCase through an institution or partner integration (LTI launch from a learning management system, SAML single sign-on, or a partner enrollment system), that institution sends Us identity data to create and match your account: typically your name, email address, and an institutional user identifier, and in some cases course or cohort information.
Learning activity
While you play a case We record your progress and interactions: taps, answers and free-text responses, scores and grades, feedback on your answers (some feedback is written in advance by the case author, some is AI-generated), timing information (such as time taken to answer), badges, and session membership. This is the core service — it is how progress, scoring and debriefs work.
AI conversations, voice and camera
- Text conversations with AI characters are stored as transcripts linked to your play session.
- Voice mode is optional. If you choose voice conversation with an AI character, your microphone audio is streamed to our voice-AI provider (Hume AI) to power the conversation, and in video mode your camera stream is used as well. Transcripts of what you said are stored with your session.
- Expression measures: the voice-AI provider derives expression/emotion measures from the voice conversation (for example how confident or hesitant a reply sounded). Where produced, these measures are stored alongside the transcript and may be reflected in feedback. If you prefer not to have your voice processed, use text mode instead.
- AI outputs: AI characters and AI feedback are machine-generated. You are conversing with software, not a human.
Information collected automatically
We collect usage data such as IP address, browser type and version, pages visited, and timestamps. IP addresses are used for security purposes (such as rate limiting and abuse prevention) and appear in short-lived operational logs; We do not build advertising profiles from this data. For cookies and similar technologies (including localStorage), see our Cookie Policy. Optional analytics (Google Analytics) run only on our production website and only with your consent.
How we use your information
- To provide the Service — run cases and sessions, store progress and scores, power AI conversations and feedback, process payments, and provide support. (Legal basis: performance of a contract; for institution-provisioned accounts, the agreement with your institution.)
- To operate AI features — send the necessary conversation content to our AI providers, generate AI-assisted grades and feedback, and generate character voice and video. (Legal basis: performance of a contract; consent for optional voice/camera features.)
- To secure and maintain the Service — authentication, fraud and abuse prevention, debugging and operational logging. (Legal basis: legitimate interests.)
- To communicate with you — transactional emails such as email confirmation, password reset, purchase receipts, invitations, and onboarding messages about content you created. We do not currently operate a marketing newsletter; if We introduce marketing email, it will include an opt-out. (Legal basis: performance of a contract; legitimate interests.)
- To improve the Service — aggregate usage statistics and (with consent) analytics. (Legal basis: legitimate interests; consent.)
- To comply with the law — tax, accounting and other legal obligations. (Legal basis: legal obligation.)
We do not sell your personal data, and We do not use your personal data or your content to train our own AI models.
Who can see your activity inside LiveCase
Learning is social on LiveCase, and some of your information is visible to others by design:
- Session participants can see your display name, avatar and color, and — depending on how the case is designed — shared answers, scores or leaderboards.
- Hosts and educators of your session can see your participation, answers, scores, AI-conversation transcripts and feedback, and can download session reports.
- Authors of the content and your institution may receive session results and analytics to run their course and improve the content.
- Our staff can access data as needed to operate the Service, provide support and investigate abuse.
Service providers we share data with
We share personal data with service providers that process it on our behalf to run the Service. We do not allow them to use it for their own advertising. The main categories and providers are:
| Service category | Providers | Data processed |
|---|---|---|
| AI text generation & grading | OpenRouter (routing to model providers such as OpenAI, Google and Anthropic) | Conversation messages, answers being graded, and relevant case content |
| Case-authoring assistant | OpenAI; AI Juicing (authoring workflows) | Author chat messages, uploaded source documents, author email (AI Juicing) |
| Voice AI | Hume AI (conversational LLM provided by Anthropic) | Microphone audio (and camera in video mode), conversation context, generated expression measures |
| Character video avatars | HeyGen | Character photos and script text supplied by authors |
| Payments | Stripe | Email, name, billing address, purchase details |
| Hosting & infrastructure | Heroku (Salesforce), MongoDB Atlas, Amazon Web Services (file storage, logging), Redis | Application data, uploaded files, operational logs and caches |
| Support & sales | Zendesk, Pipedrive | Contact-form name, email and message; new-author contact details |
| Analytics & website widgets | Google Analytics (with consent); Growth Stack by Recursive Solutions (expert-chat widget on marketing pages) | Usage events and page context; anything you type into the chat widget |
| Email delivery | Our SMTP email provider | Email address, name, and email content |
We may also disclose personal data if required by law or valid requests by public authorities, to protect the rights, property or safety of LiveCase, our users or the public, and in connection with a merger, acquisition or sale of assets (in which case We will provide notice before your data becomes subject to a different privacy policy).
Uploaded files and embedded content
- Uploaded files (images, audio, video, documents) are stored on Amazon Web Services and are served via direct links; treat uploads as accessible to anyone who has the link, and avoid uploading confidential material you would not want shared with your session.
- Author-embedded media: cases can embed third-party content such as YouTube, Vimeo, Panopto, Kaltura, SoundCloud, Vidyard, Mixcloud, Wistia, Gamma, Genially or GIFs (Giphy). When a case containing such content loads, your browser connects to that provider, which may set its own cookies and collect usage data under its own privacy policy. Previews of uploaded office documents may be rendered by Microsoft's online viewer. Some pages load fonts from Google Fonts.
International transfers
Live Case Inc. is a company based in the United States, and some of our service providers are located in the United States or other countries outside your own. Where personal data of individuals in the European Economic Area, the United Kingdom or Switzerland is transferred to a country without an adequacy decision, We rely on appropriate safeguards such as Standard Contractual Clauses with our providers, or the provider's certification under the EU-U.S. Data Privacy Framework where applicable.
How long we keep data
- Account data is kept while your account exists.
- Learning records (answers, scores, session results, AI-conversation transcripts) are kept while your account exists, and session records may be retained for the host, author or institution that ran the session as part of their course records.
- Operational AI logs are short-lived: authoring-assistant history is deleted after 7 days, AI request logs after roughly 90 days, AI usage metering after 180 days, and authoring cost logs after 30 days.
- Transaction and invoice records are retained as required for tax, accounting and legal purposes.
- Support and contact messages are retained as long as needed to handle your request and for our records.
Your rights and choices
- Access and portability: you can export your data as JSON from your account settings, and you can ask us for a copy of your personal data.
- Correction: you can update your profile in account settings, or ask us to correct inaccurate data.
- Deletion: you can delete your account from the account "danger zone" page, or ask us to delete your data. We retain what the law requires us to keep (for example transaction records), and session contributions that form part of a host's or institution's course records may be retained on their behalf.
- Objection, restriction, and withdrawal of consent: you may object to or ask us to restrict certain processing, and you can withdraw consent at any time where processing is based on consent (for example by switching from voice to text mode, or changing your cookie preferences from the link in the page footer).
- EEA/UK residents also have the right to lodge a complaint with their data protection authority. See our GDPR notice for details.
- California residents have rights under the CCPA/CPRA to know, access, correct and delete personal information, and the right not to be discriminated against for exercising them. We do not sell personal information and We do not share it for cross-context behavioral advertising.
To exercise any of these rights, use the self-service options above or contact [email protected]. If your account is managed by your institution, We may need to refer your request to that institution.
Security
We use commercially reasonable technical and organizational measures to protect your personal data, including encryption in transit, salted password hashing, and access controls. No method of transmission or storage is 100% secure, so We cannot guarantee absolute security.
Children's Privacy
The Service is designed for higher education and professional learning. It is not directed at children under the age of 13, and We do not knowingly collect personal data from children under 13. If you believe a child has provided Us with personal data, contact us and We will delete it. Where local law sets a higher age of digital consent and requires parental or institutional consent, access should be arranged through the learner's institution.
GDPR
If you are in the European Economic Area or the United Kingdom, please also read our GDPR notice.
Links to Other Websites
Our Service may contain links to websites not operated by Us. We have no control over, and assume no responsibility for, their content or privacy practices. We advise you to review the privacy policy of every site you visit.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time. For material changes, We will provide notice on the Service (and, where appropriate, by email) before the change becomes effective, and We will update the "Last updated" date at the top of this page.
Contact Us
If you have any questions about this Privacy Policy, you can contact us:
- By email: [email protected]
- By visiting this page on our website: https://www.livecase.com/contact
- By mail: Live Case Inc., 1007 North Orange Street 4th Floor #12, Wilmington, DE 19801