Privacy Policy

1. Information We Collect

• Account details: your name and email; your password, stored only as a one-way hash; and, if you sign in with Google, the name, email and Google account ID Google shares with us. We do not receive or keep your Google password, your profile picture or Google's sign-in tokens.
• Professional details you choose to give: phone number, Bar Council, enrolment number, state, practice areas and years of practice.
• Plan, Ink balance, payments and referrals, and the State you give us for your tax invoices.
• How you found us: if the link that brought you to Lawie carried campaign tags, the source, medium and campaign named in it, saved with your account when you sign up.
• Case details you enter to create a draft: your answers to the form, your description of the matter, the brief, the list of facts Lawie builds from it, and the draft itself. These often contain personal data of your clients and of other parties.
• Technical data: IP address and browser details, kept with your sign-in session, and server logs.
• Waitlist details: if you join the waitlist, your name and email, the phone number, city and practice area if you give them, and the link or campaign you came from.

2. How We Use Information

We use it to create the drafts you ask for, keep you signed in, take payments, issue GST tax invoices, send you service emails, prevent misuse, and fix errors. We use case details only to produce and show your drafts.

3. Where Data Is Stored, and Backups

• Our servers run on Amazon Web Services in Mumbai, India. Our database is MongoDB Atlas, in India (Mumbai). Our session store is Redis Cloud, which may store data outside India.
• We protect data with access controls and encrypted connections (HTTPS).
• We do not currently keep backups of your data. If our database is lost, your drafts may be lost with it. Download and keep your own copy of every document you need.

4. Encryption of Your Documents

Your drafts and briefs are encrypted in our database (AES-256). Your form answers and the list of facts Lawie builds from your matter are not yet encrypted in the same way; they are protected by the database's access controls. Enter only the case details the draft needs.

5. Who Else Receives Data

We share data only with these service providers, and only for the purpose shown:

Data sent abroad is transferred as the DPDP Act, 2023 allows. Each provider handles it under its own terms; Helicone has the data sent to it before 9 October 2026 and we cannot have it deleted.

6. Browser Storage and Cookies

To keep you signed in, we store a sign-in token in your browser's local storage; it carries your name and email. We also store your referral code, the campaign tags of the link that brought you to Lawie (until you close the tab), and small display settings in your browser. Signing out removes the sign-in token. On our public pages, the ones you can open without signing in, Google Analytics loads only if you accept it in the cookie notice; it then sets cookies whose names start with _ga so we can count visits. It does not run on the sign-in pages or anywhere inside your account. We keep a record of your choice (a random number, the choice, the version of the notice and the time, but not your name, email or IP address) for 12 months, and ask again after 12 months or when the notice changes. You can change your choice at any time with Cookie settings at the bottom of every public page. Lawie sets no other cookies. Clearing your browser's site data removes what is stored in your browser.

7. Your Rights

Under the DPDP Act, 2023 you may:

• ask for a summary of the personal data we hold about you and who we have shared it with;
• ask us to correct, complete or update it;
• ask us to erase your account, your documents, or both;
• nominate another person to exercise these rights if you die or cannot act;
• raise a grievance with us, and, if we do not resolve it, complain to the Data Protection Board of India.

You can close your account and erase your data from Settings, and delete any single document from the document itself. You can also write to contact@lawie.in from your account email and we will do it for you. Backup copies are erased within 7 days. We keep payment records and tax invoices for as long as tax law requires; an invoice keeps the name and State printed on it. Erasure cannot reach data already sent to Helicone (see §5) or copies you have downloaded.

8. Your Clients' Data

The case details you enter are yours and your clients'. You decide what to enter and are responsible for having the right to share it with Lawie. We process it only to create your drafts. Do not enter Aadhaar numbers, bank details, medical records or other information a draft does not need.

9. How Long We Keep Data

• Sign-in sessions: about 24 hours (7 days if you stay signed in).
• Records of changes to the fact list: 90 days.
• Everything else (account, case details, drafts): until you close your account or delete the document. Backup copies are erased within 7 days after that.
• If you do not verify your email address within 30 days of signing up, we delete your account and everything in it.
• Waitlist details: until you ask us to delete them, and in any case no more than 18 months after you joined or we last wrote to you, whichever is later.
• Server logs: until we delete them.
• Emails we could not send: up to 30 days.
• Emails we have sent: up to 7 days, even after you close your account.
• Payment records and tax invoices: for as long as GST law requires (72 months from the due date of the annual return for the year of the invoice), even after you close your account.

10. Children

Lawie is for practising advocates. We do not knowingly collect data from anyone under 18.

11. Contact and Grievances

For privacy questions, rights requests, grievances and general support, write to contact@lawie.in.

Grievance Officer: Abhinav Anand. Email: contact@lawie.in. We acknowledge every complaint within 24 hours and resolve it within 15 days.