Privacy Policy

Effective October 2, 2026 · Applies to Case Control Tower and related services

Five Point Four Technologies, Inc. (“5point4”, “we”, “us”) builds and operates Case Control Tower, a case-management, status-update and client-reporting application for law firms. Each firm (our “customer”) gets its own private deployment, for example elliott.cct.5point4.com. This policy explains what information the service handles, how we use it, and the choices you have.

In short: we use your Google account to sign you in and, if your firm uses calendar sync, to put the firm’s critical dates on your Google Calendar. We don’t sell data, don’t use it for advertising, and don’t use Google user data to train AI models. Matter information belongs to your firm.

1. Who is responsible for what

Your firm decides who can use its deployment and what matter information is entered. For that matter information, we act as a service provider (processor) on the firm’s behalf and follow the firm’s instructions and our agreement with it. 5point4 is responsible for the information described in this policy that we handle to run the service: account, sign-in, Google API data and technical logs.

2. Information we collect

Account and sign-in information

Your name, email address and firm title, as set up by your firm’s administrator.
From Google Sign-In: your Google account email, name and profile identifier, used to confirm who you are.

Firm matter information

Information your firm and its users enter: matter numbers and names, clients, team assignments, critical dates, status updates and briefs.

Google Calendar access (only if your firm uses calendar sync)

With your permission, we receive an authorization token that lets the service create, update and delete calendar events for critical dates on matters you work on.

Technical and security information

An access log of actions in the service (for example, viewing a matter or confirming a date), with time and user, which your firm can use for audit purposes.
Standard server logs kept by our hosting providers (IP address, browser type, timestamps) for security and troubleshooting.

3. How we use Google user data

Google data What we do with it

Basic profile (email, name) Sign you in and match you to the person record your firm created. Your email domain must be one your firm has approved.

Google Calendar events (calendar.events scope) Create an event for each confirmed critical date on a matter you work on, with the other people chosen for that date as guests; update it when the date changes; delete it when the date is done or vacated. Events contain only the matter number and the type of date (for example, “M-01234 — Hearing”), never client names or case details. We only look for events the service itself created, identified by a private marker on those events. We do not read, copy or analyze your other calendar events.

Google data	What we do with it
Basic profile (email, name)	Sign you in and match you to the person record your firm created. Your email domain must be one your firm has approved.
Google Calendar events (`calendar.events` scope)	Create an event for each confirmed critical date on a matter you work on, with the other people chosen for that date as guests; update it when the date changes; delete it when the date is done or vacated. Events contain only the matter number and the type of date (for example, “M-01234 — Hearing”), never client names or case details. We only look for events the service itself created, identified by a private marker on those events. We do not read, copy or analyze your other calendar events.

Limited Use. Case Control Tower’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

We use Google user data only to provide and improve the user-facing features described above.
We do not transfer Google user data to others except as needed to provide those features, to comply with law, or as part of a merger or acquisition with notice to users.
We do not use Google user data for advertising, and we do not sell it.
We do not use Google user data to develop, improve or train generalized artificial intelligence or machine learning models.
No person at 5point4 reads your Google user data unless you give us permission for a specific purpose (for example, a support request), it is necessary for security, or it is required by law.

4. How we use other information

To provide the service to your firm: showing matters, dates and updates; sending daily date reminders by email; producing reports.
To keep the service secure: access control, audit logs, abuse prevention and troubleshooting.
To communicate with your firm about the service (for example, maintenance notices).

We do not use firm matter information for any purpose other than providing the service to that firm.

5. How information is stored and protected

Each firm’s data is stored in its own database, hosted in the United States. Access is enforced in the database itself: users only see matters their firm has given them access to.
Google authorization tokens are stored encrypted and are only readable by the server-side job that syncs calendars.
All connections use HTTPS. Sign-in uses Google’s own authentication.

6. Service providers we use

We share information only with providers that help us run the service, under agreements that limit their use of it:

Supabase: database and authentication.
Vercel: application hosting.
Resend: sending service emails (invitations and date reminders).
Google: sign-in and calendar.

We may also disclose information if required by law or valid legal process, to protect the rights and safety of users or others, or with your firm’s instruction.

7. Retention and deletion

Matter information is kept for as long as your firm’s agreement with us requires, then deleted or returned as that agreement provides.
You can revoke Case Control Tower’s access to your Google account at any time at myaccount.google.com/permissions. Calendar sync stops immediately.
You can ask us to delete your stored Google token and sign-in data by writing to the address below. We will do so within 30 days, unless your firm requires us to keep audit records.

8. Your choices and rights

Depending on where you live, you may have rights to access, correct or delete personal information. Because your firm controls its deployment, please contact your firm first; we will help them respond. You can also contact us directly.

9. Children

The service is for law-firm professionals and is not directed to children under 16.

10. Changes

We will post changes on this page and update the effective date. If a change materially affects how we use Google user data, we will notify affected firms before it takes effect.

11. Contact

Five Point Four Technologies, Inc.
Email: connect@5point4.com
100 E. Whitestone Blvd., #148-127
Cedar Park, TX 78613