Privacy Policy

LawFirmAI (“we”, “us”, or “our”) operates the LawFirmAI platform accessible at lawfirmai.in and portal.lawfirmai.in (the “Service”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By accessing or using the Service, you consent to the practices described in this Privacy Policy. If you do not agree, please discontinue use of the Service.

1. Information We Collect

1.1 Information You Provide

• Account Information: Name, email address, phone number, and bar council registration number when you create an account.
• Case and Client Data: Documents, case notes, client details, and other information you upload or enter into the platform.
• Payment Information: Billing details processed through our payment processor. We do not store full card numbers on our servers.
• Communications: Messages you send via the contact form, support requests, or in-platform messaging.

1.2 Information Collected Automatically

• Usage Data: Pages visited, features used, time spent, and actions taken within the platform.
• Device Information: IP address, browser type, operating system, and device identifiers.
• Cookies and Similar Technologies: Session cookies for authentication and preference cookies for theme settings. See Section 7 for details.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service
• Process your subscription and billing
• Send you service notifications, updates, and security alerts
• Respond to your comments and support requests
• Improve and develop new features of the Service
• Monitor and analyse usage patterns to improve user experience
• Comply with applicable laws and legal obligations

3. Data Security

We implement industry-standard security measures to protect your data:

• Encryption: All data is encrypted in transit using TLS 1.3 and at rest using AES-256 encryption.
• Access Controls: Role-based access controls ensure that only authorised personnel can access specific data.
• AI Model Privacy: Your firm's documents and case data are never used to train global AI models. All AI processing is performed on isolated, private model instances.
• Audit Logs: All data access events are logged and monitored.

While we implement robust security measures, no method of electronic transmission or storage is 100% secure. You are responsible for maintaining the confidentiality of your account credentials.

4. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share information in the following limited circumstances:

• Service Providers: With trusted third-party vendors who assist in operating our platform (cloud hosting, payment processing, email delivery). These vendors are contractually bound to handle data only as directed by us.
• Legal Requirements: When required by applicable Indian law, court order, or governmental authority.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, provided the acquiring party agrees to honour this Privacy Policy.
• With Your Consent: In any other case, only with your explicit consent.

5. Your Rights Under Indian Law

Under the Digital Personal Data Protection Act, 2023 (DPDP Act), you have the following rights as a Data Principal:

• Right to Access: You may request a summary of the personal data we hold about you.
• Right to Correction: You may request correction of inaccurate or incomplete personal data.
• Right to Erasure: You may request deletion of your personal data, subject to applicable legal retention requirements.
• Right to Grievance Redressal: You may raise a complaint with our Data Protection Officer.
• Right to Nominate: You may nominate another person to exercise rights on your behalf in case of incapacity or death.

To exercise any of these rights, please contact us at lawfirmai@lawfirmai.in.

6. Data Retention

We retain your personal data and case information for as long as your account is active or as necessary to provide the Service. Upon account termination, we will delete or anonymise your data within 90 days, except where we are required to retain data by applicable law (such as for tax or compliance purposes).

7. Cookies

We use the following types of cookies:

• Essential Cookies: Required for authentication and basic platform functionality. Cannot be disabled.
• Preference Cookies: Store your theme preference (light/dark mode). Stored in your browser's localStorage.

We do not currently use third-party advertising or tracking cookies.

8. Third-Party Services

The Service may contain links to third-party websites or integrate with third-party services (such as payment gateways). We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.

9. Children's Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us and we will promptly delete it.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or via a prominent notice on the Service. Your continued use of the Service after the effective date of the updated policy constitutes your acceptance of the changes.

11. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact our Data Protection Officer:

• Email: lawfirmai@lawfirmai.in
• Address: Pune, Maharashtra, India