Privacy Policy

How Camdoy collects, uses, shares and retains information, and how you can ask us to delete it.

Effective date: November 1, 2026
Last updated: November 1, 2026
Privacy contact: privacy@camdoy.com

1.Who we are

Camdoy is a product developed and operated by 4UIT. In this policy, "Camdoy", "we" and "us" mean 4UIT acting as the operator of the Camdoy platform.

If you have a privacy question, or you want to ask for a copy of your information or ask us to delete it, write to privacy@camdoy.com.

2.How this policy applies

Camdoy is software for immigration law practices. Our direct customers are law firms and immigration professionals, who use Camdoy to manage their own clients’ cases.

That shapes who controls what. When a firm uses Camdoy, the firm decides what client information to put into the platform, how long to keep working on a case, and who on its team may see it. We handle that information on the firm’s behalf and under its instructions.

If you are a client of a law firm that uses Camdoy, the firm is your point of contact for your case file. You can still write to us directly, and we will help, but for records that belong to a firm we may need to route your request through that firm.

This policy covers our public website and the Camdoy platform. It does not cover the separate practices of any law firm that uses Camdoy.

3.Information we collect

We collect the following categories of information.

Account and contact data: name, email address, role within a firm, firm name, and authentication data such as password hashes and session tokens.
Immigration and case data: case type, status, deadlines, notes, tasks and the details a firm records about a case.
Intake and questionnaire answers: the responses a firm or its client provides through intake flows and forms.
Uploaded documents: files a firm or its client uploads, such as identity documents, certificates, letters and supporting evidence, together with text and data extracted from them.
Family and beneficiary details: information about relatives connected to a case, including names, dates of birth and places of birth. Where a case involves a minor, this can include information about that minor, provided by the firm.
USCIS case tracking data: receipt numbers a firm asks us to track, and the case status and status history that USCIS returns for them.
Billing and payment data: invoices, amounts, due dates, payment status and payment links. Card payments are handled by our payment processor on its own pages, so we do not receive or store full payment card numbers.
Support communications: messages you send us and the context needed to answer them.
Security and anti-abuse data: IP address, browser and device information, bot-protection signals, and authentication and access logs.
Website analytics and telemetry: pages visited, referral information and anonymous identifiers used to measure how our website and product are used.
AI processing inputs: the document content, case text and questionnaire answers that are sent to AI providers when a feature you use requires it. See "How we use AI" below.

4.Why we use your information

We use the information above for these purposes.

To provide the platform: case management, intake, deadlines, tasks, client portals and firm collaboration.
To prepare documents and forms: filling immigration forms, assembling evidence packages and generating drafts a professional then reviews.
To run AI-assisted features you choose to use, such as document data extraction, form mapping and draft generation.
To track case status with USCIS, when a firm asks us to monitor a receipt number.
To handle billing and payments, including subscriptions and client payment collection.
To provide customer support and respond to your requests.
To keep the platform secure: authentication, access control, abuse prevention, troubleshooting and audit logging.
To understand and improve how the website and product are used.
To meet legal, regulatory and professional obligations, and to establish, exercise or defend legal claims.

5.How we use AI

Several Camdoy features use artificial intelligence. To make them work, we send the content they need to an AI service provider. Today that provider is OpenAI.

Be aware of what this means in practice: when you use a feature that reads a document, the content of that document is transmitted to the AI provider. For features that read scanned or image-based documents, this includes images of the document pages. When you use an AI drafting or intake feature, the case text and answers it needs are transmitted in the same way.

We do not make claims here about whether our AI providers retain that content or use it to train their models. Those are matters governed by our agreements with them and by their own terms, not by this page, and we will not state something we cannot show you.

AI output is a draft. It is produced by software, it can be wrong or incomplete, and it is not legal advice. A qualified professional must review anything an AI feature produces before it is relied on or filed.

6.USCIS case status tracking

When a firm asks us to track a case, we use official U.S. Citizenship and Immigration Services interfaces to look up its status.

To do that we send the receipt number to USCIS. We store the receipt number, and we store the case status and status history that USCIS returns, including the response data needed to show the tracking timeline and detect changes. We keep that data for as long as the firm is tracking the case and as described under "How long we keep information".

Camdoy is not affiliated with USCIS or any government agency. We read case status; we do not file anything with USCIS on your behalf and we cannot change the outcome of a case.

8.We do not sell your personal information

4UIT does not sell personal information for monetary consideration. We do not sell case data, documents, client records or intake answers, and we do not trade them to data brokers.

One disclosure belongs here so the statement above is not read too broadly. On our public marketing website, if you consent to marketing tracking, advertising identifiers and page activity may be shared with Google and Meta so we can measure advertising performance. Under some privacy laws, including the California Consumer Privacy Act, that kind of sharing for cross-context advertising can be treated as a "sale" or "share" even though no money changes hands. You can decline it in the consent banner, and declining does not affect your use of the platform.

This sharing happens only on the marketing website. It never involves the Camdoy platform, case data, documents or client records.

How the Google Ads tag and the Meta pixel work on our website: these third-party web beacons are not loaded until you accept marketing tracking in the consent banner. If you accept, they load on our public pages, including the trial sign-up page, store cookies and similar storage technologies in your browser, and receive the pages you visit and, when a trial starts, a sign-up confirmation with a technical reference to the checkout session. They do not receive your name, email address or case data, and they never load on signed-in pages of the platform. You can change your choice at any time through the "Privacy preferences" link on our website.

9.How long we keep information

We keep information for as long as it is needed to provide the platform to the firm that put it there, and after that for as long as we need it to meet legal, professional, accounting or security obligations, or to resolve a dispute.

We are honest about the limits of that answer. For case, client and document data we have not yet set a single fixed retention period, because how long an immigration matter must be preserved depends on the firm’s own professional obligations. We are formalizing a retention schedule, and we will state the periods here once they are set rather than publish a number we do not actually enforce.

Two periods are already enforced automatically, and we can state them:

Documents moved to the trash in a client document library are permanently purged 72 hours later.
Raw marketing website visit telemetry is retained for up to 90 days where automatic purging is enabled.

10.Asking us to delete your information

You can ask us to permanently delete your information by emailing privacy@camdoy.com. Put "Deletion request" in the subject line and tell us the account or email address the request concerns. You can also use that address to ask for a copy of your information or to correct it.

This is a request-based process handled by a person, not an instant self-service button. We are telling you that plainly so you know what to expect: there is no button in the product today that permanently erases an account by itself.

What happens after you write to us:

We verify who you are before acting, so that nobody can use this process to delete someone else’s records. We may ask you to confirm from the email address on the account.
If the information belongs to a law firm’s case file, we tell you so and coordinate with that firm, because the firm decides what happens to its own client records.
We acknowledge your request and tell you what we can delete and what we must keep.
We delete what we can from our live systems, including stored files, and we remove or anonymize associated records.
We may need to keep specific information to meet a legal, tax, accounting or professional obligation, to protect against fraud or abuse, or to resolve a dispute. If that applies, we tell you which information and why.
Encrypted backups and security logs are kept on their own cycles and are not edited record by record. Information already captured there is removed as those backups and logs age out rather than at the moment of your request.

11.Your choices and rights

Depending on where you live, you may have rights to access, correct, delete or receive a copy of your personal information, to object to or restrict certain processing, and not to be discriminated against for exercising those rights.

To exercise any of them, write to privacy@camdoy.com. We respond to every request we receive, and we will tell you if we need to route it through the law firm that controls the records.

You also have these choices directly:

Marketing tracking: accept or decline in the consent banner on our public website. Your choice is stored in your browser and you can reopen the banner to change it.
Email notifications: platform notification settings control what the product sends you, and marketing email includes an unsubscribe link.
Account information: you can correct most account and case information directly in the product, or ask your firm administrator to.

12.How we protect information

We encrypt stored files and records at rest, and we require encryption for the storage containers that hold case documents, payment proofs, invoices and signed records. Traffic to the platform is encrypted in transit.

Access is controlled by authentication and role-based permissions, so a user sees only what their firm and role allow. Administrative and access events are logged. Public forms are protected against automated abuse.

No system is perfectly secure, and we will not tell you otherwise. We work to protect your information and we keep improving these controls, but we cannot guarantee that no incident will ever occur.

13.Security incidents

If we discover a security incident that affects your personal information, we will investigate it, work to contain it, and notify affected users and any regulator where notification is legally required, within the time the applicable law allows.

Our notice will explain, as far as we know it at the time, what happened, what information was involved, what we have done, and what you can do to protect yourself, such as changing your password, enabling additional protections or watching for suspicious messages.

14.If our business changes hands

If 4UIT is acquired or merged, sells part of its business, reorganizes, or discontinues Camdoy, information held in the platform may be transferred to the acquiring or successor organization as part of that change, or returned or deleted.

Two commitments apply. First, any organization that receives the information remains bound by commitments no less protective than this policy for information collected before the transfer. Second, we will give notice of a transfer that materially affects how your information is handled, by email or in the product, with enough time for a firm to export its working documents or ask for deletion before the change takes effect.

If Camdoy is discontinued, we will give notice before the platform closes, keep it possible to retrieve working documents during that period, and then dispose of the data we no longer need.

15.Where information is processed

Camdoy is hosted in the United States, and our service providers may process information in the United States and other countries where they operate. If you use Camdoy from outside the United States, you are sending your information to be processed there.

16.Children

Camdoy is a professional tool. It is not directed to children and children may not create accounts.

Immigration cases often involve families, so a firm may record information about a relative or beneficiary who is a minor, such as a name, a date of birth or a birth certificate. That information comes from the firm, for the purpose of the case it belongs to, and it is handled under this policy like any other case data.

17.Changes to this policy

We may update this policy as the product changes or as the law requires. The "Last updated" date at the top of this page always reflects the current version.

When a change materially affects how we handle your personal information, we will give notice before it takes effect, by email or in the product, with a plain-language summary of what changed. Where the law requires your consent for a change, we will ask for it and not rely on your silence.

18.Contact us

Privacy questions, access requests and deletion requests: privacy@camdoy.com.

Camdoy is a product developed and operated by 4UIT.