Privacy Policy

1. Scope & Applicability

This Policy applies to all personal data processed by us in connection with the Platform, whether you access it through our website, web application, or any related service. It should be read together with our Terms & Conditions. Capitalised terms not defined here carry the meaning given to them in the Terms.

2. Data We Collect

2.1 Information You Provide

• Account & identity data: name, email address, mobile number, postal address, and, where you use advocate-only features, your Bar Council enrollment number.
• Professional content: case details, drafts, uploaded documents, dictation recordings, and other materials you submit to the Platform.
• Payment data: billing information processed by our payment gateway. We do not store your full card, UPI, or bank account numbers.
• Communications: messages you send to support, chat messages you send through our in-app chat widget, and feedback you provide.
• Connected-service data: when you choose to connect Google Calendar, Gmail, Google Drive, or Zoho Invoice, we process the account identifiers, authorisation data, calendar events and deadlines, email content and metadata, selected Drive file content and metadata, and invoice or organisation data needed to provide the connected feature.

2.2 Information Collected Automatically

• Usage & device data: IP address, browser type, device identifiers, pages viewed, and feature usage, collected through analytics and product tools.
• Diagnostic data: error reports and limited performance traces used to debug, secure, and improve the Platform. See Section 10 for the specific providers involved.

3. How We Use Your Data

We process your personal data for the following purposes:

• To create and administer your account and, for advocate-only features, verify your professional eligibility.
• To provide the Platform's features, including AI drafting, research, OCR, translation, and case tracking.
• To provide connected features you activate, such as calendar synchronisation, email organisation, Drive file access, and invoicing.
• To process subscriptions, payments, and invoices.
• To provide customer support and respond to your requests.
• To maintain the security, integrity, and reliability of the Platform, and to detect and prevent fraud or misuse.
• To send service and transactional communications, and, where you have consented, product updates.
• To comply with applicable legal and regulatory obligations.

4. Legal Basis & Consent

We process your personal data with consent where consent is required, for legitimate uses expressly permitted by applicable law, and as needed to provide services you request or meet legal obligations to the extent applicable law permits. Where we wish to process your personal data for a new purpose that is not described in this Policy or reasonably related to the purpose for which it was collected, we will seek your specific consent where required rather than relying on continued use. You may withdraw consent at any time by contacting us at the details in Section 14; withdrawal does not affect processing carried out before withdrawal and may limit your ability to use certain features.

5. AI Processing & Non-Training Policy

Certain features process your content using artificial intelligence to generate drafts, summaries, translations, and research results. To protect confidential and privileged material, neither the Company nor its AI and language-processing providers are permitted to use your private content to train or improve shared, public, or general-purpose AI models. Those providers may process private content only to deliver the feature you request, subject to contractual confidentiality, security, and use restrictions. AI-generated content may contain inaccuracies and must be independently verified by you before use.

6. Data Sharing & Third-Party Processors

We do not sell your personal data. We share it only with service providers ("Data Processors") who process it on our behalf under contractual confidentiality and security obligations, including:

• Cloud hosting & storage providers that host the Platform and store your data.
• Payment gateway (Razorpay) to process subscription payments.
• AI and language-processing providers to power drafting, research, translation, and speech-to-text features.
• Analytics, monitoring & support providers — including Google Analytics (usage analytics), Sentry (error and performance monitoring), and Zoho SalesIQ (in-app chat support).
• Connected-service providers — including Google and Zoho, when you choose to connect their services or use the corresponding feature.
• Email and communication providers to deliver transactional and service messages.

We may also disclose data where required by law, court order, or a lawful request by a public authority, or to protect our rights, safety, and property.

7. Data Retention

We retain your personal data for as long as your account is active and for as long as necessary to provide the Platform, comply with our legal obligations, resolve disputes, and enforce our agreements. On termination, you may request export of your data within 30 days, after which your data will be deleted or anonymised, save where retention is required by law.

8. Data Security

We maintain technical and organisational safeguards designed for the nature and sensitivity of the data we process. These include protected network transport, access controls, and confidentiality obligations for personnel with access to user data, together with storage safeguards appropriate to the relevant system. No method of transmission or storage is completely secure, and you are responsible for anonymising particularly sensitive client data where appropriate and for keeping your account credentials confidential.

9. Your Rights & Choices

We make the following rights available to you. Some of these correspond to rights under the DPDP Act that will become legally enforceable as the relevant provisions are notified into force; until then, we honour them voluntarily:

• Access a summary of the personal data we process about you.
• Correct, complete, or update inaccurate or incomplete personal data.
• Erase your personal data where it is no longer required for the purpose it was collected.
• Withdraw consent to processing at any time.
• Nominate another individual to exercise your rights in the event of death or incapacity.
• Grievance redressal — raise a complaint with us using the contact details in Section 14.

To exercise any of these rights, contact us using the details in Section 14. We may need to verify your identity before acting on your request. Once the relevant provisions of the DPDP Act are in force, you will also be able to pursue the statutory remedies available under that Act, including recourse to the Data Protection Board of India.

10. Cookies & Tracking

Optional analytics and advertising are enabled by default. Open Manage cookies on our public website and select Reject to turn them off, or Accept to enable them again. We remember your saved choice for future visits in this browser.

We use cookies and similar technologies that are necessary to operate the Platform, keep you signed in, and remember your preferences. We also use the following third-party tools to understand usage, diagnose issues, and provide support:

• Google Analytics — measures how visitors use the Platform (pages viewed, features used, approximate location). Google may set its own cookies and process this data as an independent controller under its own privacy policy.
• Sentry — captures error reports and limited performance traces to help us detect and fix problems. Session replay is disabled and default personal-data collection is not enabled in our configuration.
• Zoho SalesIQ — powers our in-app chat widget; the messages and contact details you provide through chat are processed to respond to you.

You may use browser controls to restrict cookies or similar technologies, although doing so may affect Platform functionality.

11. Cross-Border Data Transfers

Your data is primarily stored on secure servers located in India. Some of our Data Processors may process data outside India; where this occurs, we take reasonable steps to ensure such transfers comply with the DPDP Act and are subject to appropriate safeguards.

12. Who May Use the Platform

The Platform is intended for professional and educational use by advocates, law firms and their staff, law students, in-house and corporate legal teams, and other legal, judicial, and investigative professionals. It is not directed at children, and we do not knowingly collect personal data from minors. If you believe a minor has provided us personal data, please contact us so we can remove it.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified through the Platform or by email. Where a material change introduces a new processing purpose that requires consent, we will request fresh affirmative consent before that processing begins. The "Last Updated" date above reflects the latest revision. Continued use may constitute acceptance of other changes only to the extent permitted by applicable law.

14. Contact & Support

For any questions, requests, or complaints about this Policy or your personal data, please contact us: