Privacy Document · Verified Privacy Policy

Privacy Policy

Effective: Jan 01, 2026

Jurisdiction: India

Compliance: DPDP Act 2023

— Introduction

This Privacy Policy explains how Legal AI Coding Private Limited ("Company", "we") collects, uses, stores, and protects personal data through its Legal AI SaaS Platform ("Platform").

We strictly comply with the following Indian statutes:

Information Technology Act, 2000

And the IT Rules, 2011 (SPDI) governing sensitive personal data or information.

DPDP Act, 2023

Digital Personal Data Protection Act, 2023 — India's primary data protection statute.

Bar Council Norms

Bar Council of India confidentiality norms applicable to advocate-client relationships.

Advocates Act, 1961

Professional duties and obligations applicable to use of technology in legal practice.

1. Data We Collect

Account Data

Full name · Email & phone · Firm details · Billing data

Usage Data

AI queries · Draft inputs · Metadata · Log files

Sensitive Data

Case documents · Client details · Legal evidence · Court filings

WhatsApp Data

Mobile number · Message content · Conversation history · Delivery status

Note: Users are solely responsible for ensuring lawful upload of client data in compliance with attorney-client privilege.

WhatsApp (“Ask Junior”): Where you choose to use our WhatsApp assistant, we receive your WhatsApp mobile number and the text of the messages you send us. Your number is used only to identify you as a registered advocate and to locate the matters already held in your AdvocatePro account. Message content is processed to answer your query, and a short conversation history is retained so the assistant can follow the thread. We do not read, import or store any other WhatsApp conversation, contact or media on your device. The assistant is available to registered advocates and their associates; it is not offered to clients or to the general public.

2. How We Use Data

AdvocatePro processes your data primarily to deliver AI-powered litigation intelligence and document generation. Our use cases include:

Service Delivery: Providing the core AI drafting and research functionality.
System Improvement: Enhancing platform performance. We do not use your private case data to train public models.
Security: Monitoring for fraud, unauthorised access, and maintaining audit trails.
Compliance: Fulfilling statutory obligations and Bar Council record-keeping requirements.
WhatsApp Assistance: Answering queries sent to our WhatsApp assistant from case records already held in your account, and returning that answer to the same WhatsApp number. Messages travel through WhatsApp’s own infrastructure and are subject to WhatsApp’s terms in transit.

We maintain a zero-monetisation policy for personal data. We do NOT sell or trade your personal or client data to any third parties.

3. Security Measures

We treat legal data with the highest sensitivity. Our security architecture includes:

AES-Hash256 Encryption

Advanced encryption protocols for data at rest and in transit.

Role-Based Access

Granular permissions ensuring only authorised personnel see specific data.

Regular Audits

Frequent vulnerability assessments and infrastructure penetration testing.

Data Residency

Your records are stored on Google Cloud infrastructure. Some processing, including our application servers and certain AI providers, takes place outside India. See section 4.

4. Who Processes Your Data

We do not sell or trade your data. To deliver the service we do share it with a small number of processors, each bound to use it only on our instructions and only for the purpose stated:

Google Cloud / Firebase

Hosting, database and file storage. Our application servers currently run in the United States; background jobs run in India.

OpenAI

Drafting, research and summarisation. Text you submit for these features is processed on servers outside India. Not used to train their public models.

Sarvam AI

Reading scanned documents and translating Indian-language text. Processed in India.

Google Gemini

Fallback document reading where the primary service is unavailable.

eCourts

Case status, cause lists and orders, retrieved from official court sources using case numbers you supply.

Meta Platforms / WhatsApp

Carrying messages to and from the WhatsApp assistant. Meta handles those messages under its own terms while in transit.

Razorpay

Subscription payments. Card details are handled by Razorpay and are never stored by us.

Cross-border transfer

Where processing occurs outside India it is for service delivery only, under contract, and subject to the transfer conditions of the DPDP Act, 2023.

We maintain a zero-monetisation policy. No processor above is permitted to use your data for advertising, resale, or training a general-purpose model.

5. Your Rights

Under the Digital Personal Data Protection Act (DPDP), 2023, you have absolute control over your information:

Right to Access

View all data associated with your account and firm.

Right to Correction

Update or rectify inaccurate profile or firm information.

Right to Erasure

Request permanent deletion of data upon account closure.

Right to Withdraw

Revoke consent for specific data processing activities.

Right to Nominate

Appoint a representative to manage your data rights.

6. Contact & Grievance

In accordance with the IT Rules and DPDP Act, we have appointed a dedicated Grievance Officer to handle data concerns.

Grievance Officer

Raj Kumar

advocateproind@gmail.com

HQ Address

749, 7th Cross, 14th Main Rd
BTM Layout, Bengaluru – 560076

Submit Grievance

7. Deleting Your Data

You may ask us to delete your personal data at any time. This section sets out how to ask, what is deleted, what we are obliged to keep, and how long it takes.

By written request

Email advocateproind@gmail.com from your registered address with the subject “Data Deletion Request”. We verify every request before acting on it.

WhatsApp only

To stop using the WhatsApp assistant and erase your conversation history alone, email us with the subject “Delete WhatsApp Data”.

Timeframe

Verified requests are completed within 30 days. We confirm by email once deletion is done.

What we need from you

The email address registered on your account, so we can confirm the request is genuinely yours before anything is erased.

What is deleted: your account and profile; firm and team records you own; uploaded case documents and the text extracted from them; AI drafts, research notes and summaries; matter records and notes; billing profile data; and your WhatsApp mobile number together with your conversation history with the assistant.

What we retain, and why: a limited record may be kept where the law requires it — invoices and tax records under the Income-tax Act and GST law, and audit entries evidencing lawful access. Retained records are kept only for the statutory period, are not used for any other purpose, and are then destroyed. Data that has been anonymised so that it can no longer identify you may be retained.

Your conversation history with the WhatsApp assistant is held in your account until you close it or ask us to delete it. We do not expire it on a timer, and we do not use it for any purpose other than answering your queries.

This section is our published data deletion instruction for the purposes of platform requirements, including Meta Platforms, and may be cited directly at advocatepro.in/privacy-policy#data-deletion.

Request Deletion