Privacy Policy
Draft template only. Have counsel review this policy against the DPDP Act, 2023 and Bar Council professional rules before launch. Matter data is personal and professionally sensitive.
What we store
Account details (name, email) and the matter information you enter: client names, contacts, opposite-party names, case type, status, hearing and notice dates, document-checklist ticks, notes, fee amounts (Pro), reminder logs, and AI drafts generated from facts you submit.
Who can access it
Signed-in users can access only rows owned by their user id. Server functions ignore any client-supplied user id. Operators with database credentials (you, or your host) can technically read the database — treat production credentials as client-confidential.
Processors
Payments are processed by Razorpay. Hearing and fee reminders, if you enable them, go through Twilio using the phone number on your profile. AI drafting sends only the facts in that form to the drafting model (xAI). Do not paste material you are not willing to process through that channel.
Retention and deletion
Data remains until you delete a matter or request account deletion from the operator of this instance. Deleted matters remove the case row and linked checklists, appointments, and recurring tasks on this account.
Security
Transport is HTTPS on a deployed host. Sessions use HttpOnly cookies. You should enable production secrets rotation, restrict dashboard access, and never share Razorpay, Twilio, or database keys in the client.