Privacy Policy

1. Introduction

Vakeel360 ("Platform", "we", "us", or "our") is a legal-technology product owned and operated by Clickjoymedia, a sole proprietorship registered in India (Registered Address: 2nd Floor, B-38/1, FN-301, Shri Nath Apartment, Tulsipur, Birdopur, Mahmoorganj, Varanasi, Uttar Pradesh, India - 221010). This Privacy Policy explains how we collect, use, store, share, and protect your personal data when you access or use the Vakeel360 mobile application, website, and related services (collectively, the "Services"). This policy is drafted in compliance with the Digital Personal Data Protection Act, 2023 ("DPDP Act") and the rules framed thereunder. By using our Services, you acknowledge that you have read, understood, and agree to be bound by the terms of this Privacy Policy and consent to the processing of your personal data as described herein.

2. Information We Collect

We collect the following categories of personal data in the course of providing the Services:

• Account & Authentication Data: Mobile phone number (used for OTP-based login), full name, and email address (where provided).
• Professional Information: Bar Council enrolment ID, state of practice, and selected courts of interest.
• Usage Data: Case search history, saved dockets, notes created within the Platform, and documents uploaded by you.
• Device & Technical Data: Device identifiers, operating system version, IP address, browser type, and crash/diagnostic logs collected for the purpose of maintaining service quality.

We collect personal data only to the extent that it is necessary for the purposes outlined in this Policy and with your informed consent, in accordance with Section 6 of the DPDP Act, 2023.

3. How We Use Your Data

Your personal data is processed for the following lawful purposes:

• Service Delivery: To provide core functionality including case tracking, docket management, cause-list generation, document storage, and court-date reminders.
• Notifications & Alerts: To send push notifications, SMS, or email alerts regarding upcoming hearings, case status updates, and order uploads.
• AI-Powered Summaries: To generate artificial- intelligence-based case summaries and legal research insights. Only the minimum necessary data is transmitted to our AI provider for this purpose.
• Analytics & Improvement: To analyse aggregated, anonymised usage patterns for the purpose of improving Platform performance, user experience, and feature development.
• Legal Compliance: To comply with applicable laws, regulations, and lawful requests from governmental authorities.

4. Data Obtained from Third Parties

In the course of providing the Services, we may obtain data from the following third-party sources:

• eCourts / National Judicial Data Grid: We retrieve publicly available court records, case status information, cause lists, and order data from the eCourts platform maintained by the Government of India. This data is in the public domain and is not personal data of our users.
• Firebase Authentication (Google): When you sign in using your phone number, we receive authentication tokens and basic account identifiers from Firebase Authentication, a service provided by Google LLC, to verify your identity.

5. Data Storage & Security

We implement appropriate technical and organisational measures to safeguard your personal data against unauthorised access, alteration, disclosure, or destruction, in accordance with Section 8 of the DPDP Act, 2023. Specifically:

• Your data is stored on Supabase (cloud-hosted PostgreSQL) and Firebase infrastructure with encryption at rest and in transit (TLS 1.2+).
• Access to production databases is restricted to authorised personnel only, protected by multi-factor authentication and role-based access controls.
• We conduct periodic security audits and vulnerability assessments to maintain data integrity and confidentiality.

Notwithstanding the above, no method of electronic storage or transmission over the Internet is completely secure. While we strive to protect your personal data, we cannot guarantee its absolute security.

6. Data Retention

We retain your personal data for as long as your account remains active and as necessary to fulfil the purposes for which it was collected. Upon account deletion or a valid erasure request, we shall delete or anonymise your personal data within a reasonable timeframe, unless retention is required by law or for the establishment, exercise, or defence of legal claims. Aggregated, anonymised data that cannot be used to identify you may be retained indefinitely for analytical purposes.

7. Data Sharing & Third-Party Processors

We do not sell, rent, or trade your personal data to any third party. We may share your data with the following categories of data processors, solely to the extent necessary for service delivery:

• Payment Processor — Razorpay: To process subscription payments securely. Razorpay receives only the data necessary to complete payment transactions.
• Cloud Infrastructure — Railway, Supabase, Firebase: Our backend services, databases, and authentication are hosted on these platforms. Data is processed and stored in accordance with their respective security and privacy standards.
• AI Provider: To generate AI-powered case summaries and research insights. Only the minimum data required for generating summaries is transmitted, and no personal data is retained by the AI provider beyond the processing session.

All third-party processors are contractually obligated to process your data only on our instructions and in compliance with applicable data protection laws. We may also disclose your data if required to do so by law, court order, or governmental authority.

8. Cookies & Analytics

We use minimal, strictly functional cookies and local storage mechanisms to maintain your authentication session and user preferences. We do not use third-party advertising trackers or behavioural profiling cookies. Any analytics data collected is aggregated and anonymised and cannot be used to identify individual users.

9. Your Rights under the DPDP Act, 2023

As a Data Principal under the DPDP Act, 2023, you are entitled to the following rights:

• Right to Access (Section 11): You have the right to obtain confirmation as to whether your personal data is being processed and to request a summary of such data and the processing activities undertaken.
• Right to Correction (Section 12): You have the right to request correction of inaccurate or misleading personal data and completion of incomplete personal data.
• Right to Erasure (Section 12): You have the right to request the erasure of your personal data, subject to any legal obligation requiring us to retain such data.
• Right to Data Portability: Where technically feasible, you may request your personal data in a structured, commonly used, and machine-readable format.
• Right of Nomination (Section 14): You have the right to nominate an individual who may exercise your rights in the event of your death or incapacity, in accordance with the provisions of the DPDP Act, 2023.
• Right to Grievance Redressal (Section 13): You have the right to lodge a complaint with our Grievance Officer or with the Data Protection Board of India if you believe your data has been processed in violation of the DPDP Act, 2023.

To exercise any of the above rights, please contact our Grievance Officer using the details provided in Section 11 below.

10. Children's Privacy

The Services are designed for use by legal professionals and are not intended for individuals under the age of 18 years. We do not knowingly collect personal data from children. In accordance with Section 9 of the DPDP Act, 2023, if we become aware that we have collected personal data from a person below the age of 18 without verifiable parental consent, we shall take prompt steps to delete such data from our systems.

11. Grievance Officer

In accordance with the DPDP Act, 2023, we have appointed the following Grievance Officer to address your concerns regarding the processing of your personal data:

12. Changes to This Policy

We reserve the right to amend or update this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or operational needs. Any material changes will be communicated to you via the Platform (through in-app notification or email) prior to the changes taking effect. The "Effective Date" at the top of this page indicates when this Policy was last revised. Your continued use of the Services after the updated Policy becomes effective constitutes your acceptance of the revised terms.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please reach out to us: