Caseload Manager Privacy Policy

Last Updated: April 16, 2026

This Privacy Policy describes the data handling practices of ODR dot com inc. ("Company," "we," "us," or "our"), a subsidiary of the American Arbitration Association (AAA). This policy applies to the Caseload Manager cloud application and associated services (the "Service"). We are committed to protecting the privacy of our Clients ("Clients," "you") and the sensitive data managed within our platform.

1. Information We Collect

We collect only the minimum information necessary to provide and maintain the Service:

• Account Information: Company name, street address, contact name, phone number, email address, and company website.
• Client-Stored Data: Our Service allows Clients to store case management data. Clients maintain full ownership and control over what data is entered into their respective Caseload Manager systems.
• Communication Data: We collect information necessary to send system alerts and notifications via email or SMS.

3. Data Sharing and Disclosure

We do not sell, rent, or share Client information with third parties.

• Public Identity: Clients may choose to remain private. We will only list a Client as a "Sample Caseload Manager System" (displaying entity name and city only) with explicit prior permission.
• Government Requests: odr dot com, inc. / Caseload Manager will only disclose information to a governmental authority based upon a valid court order. We are committed to exhausting all legal avenues to resist such disclosure to protect Client confidentiality.
• Onward Transfers: We remain liable for the protection of personal data in cases of onward transfers to third parties acting on our behalf.

4. Client Control and Access

Clients have full access to their data at all times. Our platform provides the ability to:

• View, edit, or delete personal and case-related data.
• Control the visibility of their system within our public-facing directories.
• Audit the limited access permissions granted to Caseload Manager technical support staff.

5. International Data Transfers

odr dot com, inc. complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce.

We have certified to the U.S. Department of Commerce that we adhere to the Data Privacy Framework Principles regarding the collection, use, and retention of personal information transferred from the European Union, the United Kingdom, and Switzerland to the United States. If there is any conflict between the terms in this privacy policy and the DPF Principles, the DPF Principles shall govern. To learn more about the DPF program, please visit https://www.dataprivacyframework.gov/.

6. Dispute Resolution and Enforcement

Our data practices are subject to the jurisdiction of the U.S. Federal Trade Commission (FTC).

• Internal Resolution: In compliance with the DPF Principles, we commit to resolve complaints about our collection or use of your personal information. EU, UK, and Swiss individuals should first contact us at 541.345.1629 x3.
• AAA Administration: If a dispute remains unresolved, it is administered by the American Arbitration Association (AAA). Information regarding their privacy protocols can be found at https://go.adr.org/privacyshield.html.
• Mediation and Arbitration: We encourage voluntary mediation as a first step. If unsuccessful, Clients have the possibility, under certain conditions, to invoke binding arbitration.