Privacy Policy

Legal Mindx ("Company," "We," "Us," "Our") is committed to protecting the privacy and personal data of its users ("Advocate," "User," "You"). This Privacy Policy explains how We collect, use, store, disclose, and protect Your personal information in connection with the AdvocateAI platform ("Platform").

This Policy is published in compliance with the Digital Personal Data Protection Act, 2023 ("DPDP Act"), the Information Technology Act, 2000, and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 ("SPDI Rules").

2.1 Account Data.

• Full name, email address, mobile number;
• Bar Council enrolment number and State Bar Council;
• Specialisation, primary court, chamber address;
• Authentication credentials (securely hashed).

2.2 Content Data. Documents, case details, client information, and other materials You upload or generate through the Platform. This may include sensitive personal data or information as defined under the SPDI Rules.

2.3 Usage Data. Log data, IP address, device information, browser type, timestamps, feature usage statistics, and interaction telemetry.

2.4 Payment Data. Transaction identifiers, payment method (UPI, card, cash), and billing address. We do not store full card numbers or CVV; payment processing is handled by PCI-DSS compliant third-party processors.

Under the DPDP Act, We process Your personal data on the following legal grounds:

• Consent — for optional data fields, marketing communications, and analytics;
• Contractual necessity — to provide the Services You have subscribed to;
• Legal obligation — to comply with applicable laws, court orders, or regulatory requests;
• Legitimate interest — to maintain security, prevent fraud, and improve the Platform.

You may withdraw consent at any time by contacting legalmindx.support@gmail.com. Withdrawal does not affect the lawfulness of prior processing.

• To create and manage Your account and authenticate Your identity;
• To provide AI-assisted drafting, analysis, and research services;
• To process payments and maintain billing records;
• To communicate with You about service updates, security alerts, and support requests;
• To monitor and improve the performance, safety, and quality of the Platform;
• To detect, prevent, and investigate fraud, abuse, or violations of these Terms;
• To comply with legal obligations under Indian law.

We do not sell Your personal data to any third party.

We may share Your personal data with the following categories of recipients, strictly on a need-to-know basis and under contractual confidentiality obligations:

• Cloud infrastructure providers hosting the Platform (e.g., database and server providers);
• Payment processors handling subscription transactions;
• AI model providers powering the drafting and research features;
• Legal and regulatory authorities where required by law, court order, or valid government request;
• Professional advisors (auditors, legal counsel) in connection with corporate compliance;
• Successors or transferees in the event of a merger, acquisition, or asset sale, subject to continued compliance with this Policy.

We implement industry-standard technical and organisational security measures including:

• End-to-end encryption (TLS 1.2+) for data in transit;
• AES-256 encryption for data at rest;
• Row-level security and role-based access controls on all databases;
• Regular security audits and vulnerability assessments;
• Strict access controls limiting internal access to authorised personnel only;
• Secure deletion procedures for data upon account termination or expiry of retention periods.

Despite these measures, no system can be guaranteed to be completely secure. You acknowledge that You provide Your data at Your own risk.

We retain Your personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, or reporting requirements:

• Account data — retained for the duration of Your account plus 3 years thereafter for audit purposes;
• Content data — retained for the duration of Your subscription. Upon termination, content is permanently deleted within 30 days;
• Usage logs — retained for 12 months;
• Payment records — retained for 7 years as required under the Income Tax Act, 1961 and GST law.

Under the DPDP Act and applicable law, You have the following rights:

• Access — request a copy of the personal data We hold about You;
• Correction — request correction of inaccurate or incomplete data;
• Erasure — request deletion of Your personal data, subject to legal retention obligations;
• Data portability — receive Your data in a structured, machine-readable format;
• Grievance — lodge a complaint with Our Grievance Officer or the Data Protection Board of India.

To exercise any of these rights, contact legalmindx.support@gmail.com. We will respond within 30 days.

In accordance with the DPDP Act, 2023, the contact details of Our Grievance Officer are:

[Name of Grievance Officer]
Designation: Data Protection Officer
Email: legalmindx.support@gmail.com
Mobile: +91 77569 72955
Address: [Registered Office Address, City, India — PIN]

The Platform uses essential cookies to maintain Your session and provide core functionality. We do not use third-party advertising cookies. Analytics cookies, where used, are anonymised and require Your consent.

Your data is stored primarily on servers located in India. Where any processing occurs outside India (e.g., via AI model providers), We ensure such transfers comply with the DPDP Act and are subject to appropriate safeguards including Standard Contractual Clauses.

The Platform is not directed to individuals under 18 years of age. We do not knowingly collect personal data from minors. If You believe a minor has provided data to Us, please contact Our Grievance Officer immediately.

We may update this Privacy Policy from time to time. Material changes will be notified via email or in-Platform notification at least 30 days before taking effect. Continued use of the Platform after the effective date constitutes acceptance.

For any questions regarding this Privacy Policy, please contact:

Legal Mindx
Email: legalmindx.support@gmail.com
Mobile: +91 77569 72955