Privacy Notice

SAASILI LTD (company number 14512976), registered office Flat 2 Kirstin Court, The Green, Eccleston, Chorley, Lancashire, United Kingdom, PR7 5TP, is the data controller for The Case Desk platform. Privacy requests and questions: hello@saasili.com.

Paddle acts as our Merchant of Record and is a separate controller for the transaction and payment information it collects when you buy a subscription. See Paddle’s privacy notice. SAASILI LTD does not receive or store full card numbers, card security codes or complete payment credentials.

The Case Desk is intended for people aged 18 or over. We do not knowingly collect personal data from anyone under 18. If you believe a person under 18 has registered, email hello@saasili.com and we will delete the account and its data.

• Account information — email address, display or detective name, and account creation and sign-in dates.
• Authentication and security records — hashed credentials held by our authentication provider, email verification and password reset events, session tokens and sign-in activity.
• Gameplay activity — evidence you have reviewed or flagged, interviews opened, objectives completed and phase progression.
• Content you enter — notes, timeline entries, theories and answers.
• Case outcomes — progress, submitted answers, scores, ranks, archived closed files and certificates.
• Timing data — case timers and session durations.
• Subscription and entitlement records — plan, status, billing period, renewal or expiry dates, payment environment, the Paddle customer and subscription identifiers, and complimentary-access grants and expiry.
• Charter Detective status — member number, appointment date and acknowledgement.
• Technical, device, diagnostic and security information — IP address, browser and device characteristics, error and performance diagnostics, and abuse or fraud signals.
• Customer-service communications — emails you send us and the emails we send you, including delivery status.

• Contractual necessity — creating and running your account, saving and restoring gameplay progress, awarding scores and certificates, providing DS Vale assistance, applying entitlements and complimentary access, and providing support.
• Legitimate interests — keeping the service secure, preventing fraud and abuse, protecting scoring and leaderboard integrity, diagnosing faults, improving cases and features using aggregated usage insight, and recognising Charter Detectives. We balance these against your rights and use the least intrusive approach that works.
• Legal obligations — accounting and tax records, and responding to lawful requests.
• Consent — where we ask for it, for example optional marketing email. You may withdraw consent at any time without affecting prior processing.

• Service providers (processors) — cloud hosting and database, authentication, email delivery, AI assistance used to power DS Vale, and error monitoring. They act on our instructions under written terms.
• Paddle — as Merchant of Record for the sale, subscription management, payments, tax compliance, invoicing and refunds.
• Professional advisers — legal and accounting advisers where needed.
• Authorities — where required by law or to establish or defend legal claims.

We do not sell personal data.

Some providers process data outside the United Kingdom or the EEA. Where they do, we rely on appropriate safeguards — a UK adequacy regulation, or the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, together with additional technical and organisational measures where appropriate. You can request details of the safeguards used by emailing hello@saasili.com.

We keep account, gameplay, entitlement and Charter records for as long as your account is open, so that your progress, scores, archives and certificates remain available to you. Where an account is deleted, we delete or anonymise the associated personal data, except records we must retain — for example transaction and tax records kept for the period required by law, and limited security or abuse records kept for as long as necessary. Diagnostic and security logs are kept for a short period only.

You can request deletion of your account and its data at any time by emailing hello@saasili.com from your registered address. Deletion is permanent: progress, scores, notes, theories, archives and certificates cannot be recovered afterwards. Cancel any active subscription first, as deleting an account does not itself cancel billing.

We apply appropriate technical and organisational measures, including encryption in transit, encrypted storage of secrets, row-level access controls so that detectives can only reach their own records, server-side entitlement checks, signed and verified payment webhooks, and restricted administrative access. No system can be guaranteed completely secure, but we review these measures regularly.

The Case Desk does not use advertising or cross-site tracking cookies. We use only technologies necessary to run the service:

• Authentication storage — your session token, stored in your browser so you stay signed in.
• Local preferences — theme, audio settings, desk drawer layout, walkthrough status and similar in-game preferences, stored locally on your device.
• Checkout — Paddle sets its own strictly necessary storage when a checkout is opened, governed by Paddle’s privacy notice.

You can clear this storage through your browser settings, though doing so will sign you out and reset local preferences.

Under the UK GDPR you have the right to access your data; to have inaccurate data corrected; to erasure; to restrict processing; to data portability; to object to processing based on legitimate interests, including profiling; and to withdraw consent where processing is based on consent. To exercise any of these, email hello@saasili.com. We will respond within one month and may ask you to confirm your identity.

If you are unhappy with how we handle your data you can complain to the Information Commissioner’s Office at https://ico.org.uk. We would appreciate the chance to put things right first.

We may update this notice as the service develops. The effective and last-updated dates at the top of this page show the current version, and we will tell you about significant changes.