Privacy Policy

2.1 This Privacy Policy applies to all personal data processed by the Company in connection with the operation of the Platform, including data relating to:

• Registered Users, including law firms, advocates, legal researchers, and their authorised personnel;
• Visitors to the Platform's website and marketing pages;
• Third parties (including advocates and legal professionals) whose information appears in Lawyer Profile Data sourced from publicly available channels; and
• Any individual who contacts the Company, including through grievance or correction requests.

2.2 This Policy should be read together with the Terms and Conditions governing the Platform. In the event of any conflict between this Policy and the Terms and Conditions on matters of data protection, this Policy shall prevail.

2.3 This Policy does not apply to information processed by third-party websites, applications, or services that may be linked from the Platform. The Company is not responsible for the privacy practices of such third parties.

3.1 Information You Provide Directly: When you register for, subscribe to, or use the Platform, we may collect:

• Account and identity information: name, email address, phone number, designation, and law firm or organisation name;
• Billing information: billing address, GST registration details, and payment details (processed via third-party payment gateways; the Company does not store full card or bank account numbers);
• Communications: information you provide when contacting customer support, submitting feedback, or raising a grievance or correction request;
• User content: queries, search terms, documents, case references, or instructions you submit to the Platform for processing.

3.2 Information Collected Automatically: When you access the Platform, we may automatically collect:

• Usage data: pages visited, features used, queries run, dossiers generated, time stamps, and session duration;
• Device and log data: IP address, browser type and version, operating system, device identifiers, and referring URLs;
• Cookies and tracking: as described in Clause 9 (Cookies and Tracking Technologies).

3.3 Information Relating to Third Parties: The Platform aggregates publicly available information relating to advocates and legal professionals, such as publicly visible professional profiles, published judgements, tribunal orders, and documented case histories, to generate informational summaries, case dossiers, and predictive analytics. The Company does not collect this information directly from the individuals concerned, and does not collect sensitive personal data (such as financial, medical, or biometric information) of any advocate from any source.

This processing is undertaken on the legal basis of legitimate use of publicly available personal data, consistent with Section 7 of the DPDPA and the principle that judicial proceedings and professional information voluntarily made public by an individual may be processed for legitimate research and informational purposes, subject to the safeguards and correction rights described in Clauses 8 and 12.

3.4 UPREAT Data and Judicial Records: The Platform indexes historical orders, decisions, and records of the Uttar Pradesh Real Estate Appellate Tribunal and other publicly accessible judicial or quasi-judicial repositories. Such records may incidentally contain personal data of litigants, advocates, or other individuals named in such proceedings. This data is reproduced solely for research and informational purposes on the basis that judicial records of courts and tribunals of record are in the public domain.

The Company processes personal data on one or more of the following legal bases recognised under the DPDPA:

• Consent: where you have provided free, specific, informed, and unambiguous consent for a specified purpose, in accordance with Section 6 of the DPDPA, for example at the time of account registration;
• Performance of contract: where processing is necessary to provide the services you have subscribed to under the Terms and Conditions;
• Legitimate uses: for certain specified “legitimate uses” recognised under Section 7 of the DPDPA, including the processing of personal data made publicly available by the data principal or any person legally obliged to make it public;
• Compliance with law: where processing is necessary to comply with any law in force, including tax and corporate filings, or to respond to an order of a court or tribunal.

Where consent is the basis of processing, you may withdraw such consent at any time by contacting the Grievance Officer, without affecting the lawfulness of processing carried out prior to withdrawal. Withdrawal of consent may result in the Company being unable to continue providing certain features of the Platform.

The Company does not sell personal data. We may share information in the following circumstances:

• Service providers and sub-processors: with cloud infrastructure providers, payment processors, analytics providers, and AI model or compute providers (including NVIDIA Inception infrastructure partners) who process data on our behalf and are bound by confidentiality and data protection obligations;
• Within your organisation: where your account is associated with a law firm or entity, certain account and usage information may be visible to authorised administrators of that entity's account;
• Legal and regulatory disclosures: where required to comply with applicable law, a court order, or a lawful request from a government or regulatory authority;
• Business transfers: in connection with a merger, acquisition, restructuring, or sale of assets, subject to equivalent confidentiality protections being extended to the acquiring entity;
• With your consent: for any other purpose disclosed to you at the time of collection and to which you have consented.

6.2 Lawyer Profile Data and case dossiers generated by the Platform are made available to subscribing Users as part of the Platform's core research functionality, on the terms described in the Terms and Conditions.

7.1 The Company implements reasonable security practices and procedures, as mandated under Section 43A of the Information Technology Act, 2000 and the rules made thereunder, including encryption in transit, access controls, and periodic security review of its infrastructure.

7.2 Personal data may be stored and processed on servers located in India or, where necessary for the provision of the Platform (including AI model training, inference, and vector indexing through cloud and compute partners such as those provided under the NVIDIA Inception programme), on servers located outside India. Any cross-border transfer of personal data shall be undertaken in accordance with Section 16 of the DPDPA and any conditions, restrictions, or notifications issued by the Central Government from time to time.

7.3 Notwithstanding the implementation of reasonable security practices, no method of electronic transmission or storage is completely secure. The Company does not warrant that the Platform or its infrastructure is impenetrable to unauthorised access, and disclaims liability to the maximum extent permitted by law for unauthorised access resulting from circumstances beyond its reasonable control.

8.1The Platform uses artificial intelligence and machine learning, including a proprietary multi-phase data pipeline, to parse, structure, vectorise, and analyse publicly available legal records and to generate case dossiers, summaries, and Lawyer Profile Data, including predictive analytics regarding an advocate's likely arguments or areas of practice.

8.2 Such outputs are generated algorithmically from historical public data and represent probabilistic inference. They do not constitute, and should not be interpreted as, a decision by the Company that produces a legal effect or otherwise significantly affects any individual. Outputs relating to advocates are informational only and are not ratings, rankings, or evaluations, as further described in the Terms and Conditions.

8.3 Users remain responsible for independently verifying AI-generated Content before relying on it. Individuals who believe that information generated about them is inaccurate may submit a Correction Request under Clause 12 of this Policy.

9.1 The Platform uses cookies and similar technologies to operate core functionality (such as maintaining your login session), to remember preferences, and to analyse usage of the Platform through analytics tools.

9.2 Categories of cookies used include:

• Strictly necessary cookies: required for authentication, security, and core functionality of the Platform;
• Preference cookies: used to remember settings and preferences;
• Analytics cookies: used to understand how Users interact with the Platform in order to improve it.

9.3 Most browsers allow you to control cookies through their settings. Disabling certain cookies may affect the functionality of the Platform, including your ability to remain logged in.

10.1 The Company retains personal data of registered Users for as long as the account remains active and for such additional period thereafter as may be necessary to comply with applicable legal, accounting, or regulatory requirements, or to resolve disputes and enforce agreements.

10.2 Lawyer Profile Data and UPREAT Data, being derived from public judicial and professional records, are retained for as long as they remain relevant to the research purpose of the Platform, subject to correction or update in accordance with Clause 12.

10.3 Anonymised or aggregated data, from which an individual cannot reasonably be re-identified, may be retained indefinitely for product development, research, and analytical purposes.

10.4 Upon a valid request for erasure under Clause 11.4, or upon withdrawal of consent where consent is the sole basis of processing, the Company shall erase the relevant personal data unless retention is required by law, for the establishment, exercise, or defence of legal claims, or for the legitimate uses described in Clause 5.

In accordance with the DPDPA, you have the following rights in respect of your personal data:

• Right to access information (Section 11, DPDPA): to obtain a summary of the personal data processed by the Company and the processing activities undertaken with respect to such data;
• Right to correction and erasure (Sections 12 and 13, DPDPA): to request correction of inaccurate or misleading personal data, completion of incomplete personal data, updating of personal data, and erasure of personal data that is no longer necessary for the purpose for which it was processed;
• Right to grievance redressal (Section 13, DPDPA): to have any grievance regarding the processing of your personal data addressed by the Grievance Officer designated under Clause 13;
• Right to nominate (Section 14, DPDPA): to nominate another individual to exercise your rights under the DPDPA in the event of your death or incapacity.

11.2 Requests to exercise these rights may be submitted to the Grievance Officer in accordance with Clause 13. The Company shall respond to such requests within the timelines prescribed under applicable law, and in any event shall acknowledge receipt within twenty-four (24) hours and provide a substantive response within seven (7) business days, save where a longer period is reasonably required and communicated to you.

11.3 The Company may require you to verify your identity before acting on a request, to the extent reasonably necessary to prevent unauthorised access to or modification of personal data.

11.4 Where you withdraw consent or request erasure, and no other legal basis or legitimate use under Section 7 of the DPDPA applies to continued processing, the Company shall erase such personal data within a reasonable time, unless retention is otherwise required or permitted under applicable law.

12.1 Any individual, including an advocate or legal professional whose information appears in Lawyer Profile Data or UPREAT Data on the Platform, who believes that such information is factually inaccurate, materially misleading, outdated, or incorrectly attributed, may submit a Correction Request to the Grievance Officer under Clause 13, regardless of whether they hold a registered account on the Platform.

12.2 Upon receipt of a valid Correction Request, the Company shall follow the Data Correction Mechanism set out in Clause 12 of the Terms and Conditions, including acknowledgment within twenty-four (24) hours and a substantive review within seventy-two (72) hours.

12.3This mechanism is provided as part of the Company's commitment to data accuracy under the DPDPA and does not require the individual to be a subscriber of the Platform. No fee is charged for the exercise of this right.

In accordance with Rule 3A of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, and the grievance redressal obligations under the DPDPA, the Company has designated the following Grievance Officer for matters relating to this Privacy Policy:

13.2If you are not satisfied with the Company's response to a grievance, you may escalate the matter to the Data Protection Board of India once constituted under the DPDPA, or seek redressal before any other forum of competent jurisdiction.

17.1 The Company may update this Privacy Policy from time to time to reflect changes in its practices, technology, legal requirements, or for other operational reasons.

17.2 Material changes to this Policy shall be communicated to registered Users through a prominent notice on the Platform at least fifteen (15) days before taking effect. Non-material updates, including clarifications and corrections, may take effect immediately upon publication.

17.3 Your continued use of the Platform after the effective date of any revised Policy constitutes your acknowledgment of, and agreement to be bound by, the revised Policy.