Privacy Policy

Who we are

CaseThread is operated by Optimiz Solutions. Address the Information Officer at legal@casethread.co.za for any privacy, access or data-protection query.

This policy explains how we handle personal information when a social-work practice uses CaseThread.

Information we process

Account and practice details you provide at sign-up, and the case information your practice captures (clients, sessions, notes, documents). For client case data, the practice is the responsible party and CaseThread is the operator — see the Data Processing Agreement.

How we use it

To provide and secure the service, process payments, send transactional email, and meet our legal obligations. We do not sell personal information.

Sharing & sub-processors

We use a small set of vetted sub-processors to run the service. See the Sub-processors page for the current list, their purpose and region.

Security & hosting

Encryption in transit and at rest, row-level access control on every case record, and a documented backup/recovery process. Data is hosted on managed EU cloud infrastructure under data-processing agreements; cross-border processing relies on POPIA §72 safeguards.

Your rights

You may request access to, correction of, or deletion of personal information, subject to our retention obligations. Data-subject requests are handled through the in-app register and to a documented schedule.

Retention

Records are retained for the period required by law and professional practice, then deleted or de-identified per the retention schedule.

Contact

CaseThread is operated by Optimiz Solutions. Address the Information Officer at legal@casethread.co.za for any privacy, access or data-protection query.