Back to home
NyayKavach

Privacy Policy

Last updated: April 2026

NyayKavach Technologies Pvt. Ltd. ("we," "our," or "us") is committed to protecting your privacy and ensuring the security of your personal and professional data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered litigation platform.

1. Information We Collect

1.1 Account Information

  • Name, email address, phone number
  • Bar Council enrollment number (for advocates)
  • Firm name and address (for law firms)
  • Payment information (processed securely via third-party providers)

1.2 Case & Matter Data

  • CNR numbers and case details you add to the platform
  • Court orders, filings, and documents you upload
  • Notes, tags, and annotations you create
  • Client information you choose to store

1.3 Usage Data

  • Log data (IP address, browser type, device information)
  • Feature usage patterns and preferences
  • Search queries within the platform

2. How We Use Your Information

  • Service Delivery: To provide court tracking, AI-powered preparation packets, and client communication features
  • Personalization: To customize your experience and provide relevant insights
  • Communication: To send hearing reminders, platform updates, and support responses
  • Improvement: To analyze usage patterns and improve our services (using aggregated, anonymized data only)
  • Legal Compliance: To comply with applicable laws and regulations

3. Data Protection & Security

3.1 Data Residency

All data is stored exclusively in AWS Mumbai (ap-south-1) data centers within India. We do not transfer personal data outside India without explicit consent.

3.2 Encryption

  • Data at rest: AES-256 encryption
  • Data in transit: TLS 1.3
  • Database: Encrypted with customer-managed keys

3.3 Access Controls

  • Role-based access control (RBAC)
  • Multi-factor authentication available
  • Audit logs for all data access

4. DPDP Act 2025 Compliance

We comply with the Digital Personal Data Protection Act, 2025 (DPDP Act). As a Data Fiduciary, we:

  • Process personal data only for lawful purposes with valid consent
  • Provide clear notice about data collection and usage
  • Honor your rights to access, correct, and erase your data
  • Implement reasonable security safeguards
  • Report data breaches to the Data Protection Board within 72 hours

5. Your Rights

Under the DPDP Act, you have the right to:

  • Access: Request a copy of your personal data
  • Correction: Request correction of inaccurate data
  • Erasure: Request deletion of your data (subject to legal retention requirements)
  • Portability: Export your data in a machine-readable format
  • Withdraw Consent: Withdraw consent for data processing at any time

6. AI & Machine Learning

Important: We do NOT use your case data, documents, or client information to train our AI models. Our AI features use:

  • Pre-trained models fine-tuned on publicly available legal data
  • Retrieval-augmented generation (RAG) from verified legal databases
  • Your data is processed in real-time and not stored for model training

7. Attorney-Client Privilege

We recognize and respect attorney-client privilege. NyayKavach Technologies Pvt. Ltd. is a tool that assists your practice — we are not a party to any attorney-client relationship. All communications and documents remain privileged.

8. Data Retention

  • Active account data: Retained while your account is active
  • Deleted account data: Permanently erased within 90 days of account deletion
  • Backup data: Retained for 30 days after deletion for disaster recovery
  • Legal holds: Data may be retained longer if required by law

9. Third-Party Services

We use the following third-party services:

  • AWS (Mumbai): Cloud infrastructure
  • Razorpay: Payment processing (PCI-DSS compliant)
  • Indian Kanoon, SCC Online: Legal database APIs
  • WhatsApp Business API: Client notifications

10. Contact Us

For privacy-related inquiries or to exercise your rights:

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or in-app notification at least 30 days before they take effect.