Privacy Policy

Last updated: 19 February 2026

LegalIntelli ("we", "us", "the Platform") is committed to protecting your privacy in accordance with the Digital Personal Data Protection Act, 2023 (DPDPA) and applicable Indian laws.

1. Data We Collect

a) Account Information

• Name — to personalise your experience.
• Email address — for login and notifications (if email-based auth).
• Phone number — for OTP-based login and WhatsApp/SMS notifications.
• Firm name — for professional context (optional).

b) Case Portfolio Data

• Cases you track, labels, notes, and alert preferences.
• This data is associated with your account and not shared with other users.

c) Court Data

• Case information (parties, hearing dates, orders) sourced from public court databases. This is public information, not personal data.

d) Technical Data

• IP address, browser type, and usage analytics for service improvement.
• Telegram chat IDs for notification delivery (if linked by you).

2. Purpose of Processing

We process your data for the following lawful purposes under DPDPA 2023:

• Consent-based: Account creation, case tracking, notifications.
• Legitimate use: Service delivery, security, fraud prevention.
• Legal obligation: Compliance with court orders or law enforcement requests.

3. Data Storage & Security

• Passwords are hashed using bcrypt and never stored in plain text.
• OTPs are stored in Redis with a 5-minute TTL and deleted after verification.
• Phone numbers are stored to enable OTP login and notifications. We recommend future implementation of phone number hashing for at-rest protection.
• All data is stored on servers located in India.
• We use HTTPS/TLS for all data in transit.
• Database access is restricted to authorised services only.

4. Third-Party Sharing

We do not sell, rent, or share your personal data with third parties for marketing or commercial purposes. Data may be shared only:

• With service providers (hosting, SMS gateway) strictly for Platform operation, under data processing agreements.
• With Anthropic (Claude AI) — only case text (public court data) is sent for AI summarization. No personal user data is shared with AI providers.
• When required by law or court order.

5. Data Retention

• Account data: Retained while your account is active. Deleted within 90 days of account deletion request.
• Case data: Public court data is retained indefinitely as it is public information.
• OTPs: Auto-deleted after 5 minutes.
• Logs: Retained for up to 12 months for security purposes.

6. Your Rights (DPDPA 2023)

As a Data Principal under the DPDPA, you have the right to:

• Access: Request a summary of your personal data we hold.
• Correction: Request correction of inaccurate data.
• Erasure: Request deletion of your personal data (subject to legal retention requirements).
• Grievance redressal: Contact our Grievance Officer for any privacy concerns.
• Nominate: Nominate another person to exercise your rights in case of death or incapacity.

7. Data of Children

LegalIntelli is not intended for use by persons under 18 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us for immediate deletion.

8. Consent Management

You provide consent at the time of account registration. You may withdraw consent at any time by deleting your account via Settings or contacting us. Withdrawal of consent will result in inability to use the Platform.

9. Data Breach Notification

In the event of a personal data breach, we will notify the Data Protection Board of India and affected users as required under DPDPA 2023, without unreasonable delay.

10. Grievance Officer

For privacy-related queries or complaints:

• Email: privacy@legalintelli.in
• Response time: Within 7 working days.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified via email or in-app notification. Continued use of the Platform after changes constitutes acceptance.