Last Updated: October 9, 2026
This policy explains how ManageWhat collects, uses and protects personal information when you visit managewhat.com or use the ManageWhat legal case management platform at app.managewhat.com.
ManageWhat is operated by Business and Project Analysts LLC ("ManageWhat", "we", "us"), Warner Center Towers 21550 Oxnard Street, 3rd Floor Woodland Hills, CA 91367. You can reach us at [email protected].
This policy applies to three groups of people:
For visitor data and customer account data, ManageWhat is the controller: we decide why and how it is used.
For client and case data that a law firm stores in the platform, the law firm is the controller and ManageWhat acts as its processor, handling that data only on the firm's instructions and under our Terms and Conditions. If you are a client of a law firm and want to access, correct or delete your case information, please contact your law firm first. We will help the firm respond to your request.
| Category | Examples | Who provides it |
|---|---|---|
| Contact and enquiry data | Name, work email, phone number, firm name, and your message when you request a demo or email us | Visitors and prospective customers |
| Account and firm data | Firm profile, staff names and roles, login credentials, access permissions | Customers |
| Client and case data | Client contact details, case history, matter stages, deadlines, notes, activity logs, uploaded documents, communication templates | Customers (as controller) |
| Communications data | Content and delivery status of emails and SMS sent through the platform | Customers |
| Usage and device data | IP address, browser and device type, pages visited, log-in times, actions taken in the platform | Collected automatically |
| Cookies and similar technologies | Session, security and preference cookies; analytics identifiers if enabled | Collected automatically |
When billing and payment features launch, we will also process billing details such as billing contact and transaction records. Card numbers will be handled by a PCI-compliant payment provider and not stored by us.
Customers are responsible for making sure they have a lawful basis, and any required consent, to enter client and case data into the platform. Please do not enter information you are not permitted to share, or sensitive data that you do not need for your case work.
We use personal information to:
Where data protection law requires a legal basis, we rely on: performance of our contract with the customer; our legitimate interests in running, securing and improving the service; compliance with legal obligations; and consent where required (for example, certain marketing or non-essential cookies). We do not sell personal information, and we do not use client or case data to advertise to anyone.
We share information only as described here:
A current list of our key service providers is available on request.
We keep customer account data while the account is active and for a reasonable period afterwards for legal, tax and dispute purposes. Client and case data is kept for as long as the customer's account is active, or as the customer instructs. After an account closes, we delete customer data within [30–90] days on request, except where we must keep it by law. Backups are overwritten on a regular cycle. Enquiry data from visitors is kept for as long as needed to respond and for a reasonable period after.
We use safeguards appropriate to the sensitivity of legal data, including encryption in transit, access controls and permission levels, logging of user activity, and restricted staff access. No system is completely secure. If we become aware of a breach affecting personal information, we will notify affected customers and regulators as required by law, without undue delay. Customers must keep their login details confidential and tell us promptly of any suspected unauthorised access.
Our providers and servers may be located outside your country. Where we transfer personal information across borders, we use appropriate safeguards required by applicable law, such as standard contractual clauses or equivalent mechanisms.
Depending on where you live, you may have the right to access your personal information, correct it, delete it, restrict or object to its use, receive a portable copy, withdraw consent, and complain to your data protection authority. These rights arise under laws such as the GDPR, UK GDPR, CCPA/CPRA and the Nigeria Data Protection Act.
To exercise them, email [email protected]. We may need to verify your identity, and we will respond within the time required by law. For client and case data, we will refer you to or assist the responsible law firm.
We use essential cookies to keep you signed in and secure the platform. If we use analytics or marketing cookies, we will ask for consent where required. You can control cookies in your browser settings; blocking essential cookies may stop the platform from working properly.
ManageWhat is a professional tool for legal practitioners and is not directed at anyone under 18. We do not knowingly collect personal information from children, other than case information a law firm lawfully enters about a minor client.
Our website may link to other sites. We are not responsible for their privacy practices.
We may update this policy from time to time. We will post the new version with a revised date and, for material changes, notify customers by email or in the platform.
Business and Project Analysts LLC, Warner Center Towers 21550 Oxnard Street, 3rd Floor Woodland Hills, CA 91367
Email: [email protected]
Website:
https://managewhat.com