Privacy Policy

This Privacy Policy explains how Law Land India(“LawLand”, “we”) collects, uses, stores, transfers, and discloses personal data (“Personal Data”) when you use the Platform. We are a Data Fiduciary under the Digital Personal Data Protection Act, 2023 (the “DPDP Act”) and process Personal Data in accordance with that Act, the Information Technology Act, 2000, and applicable rules.

1. Personal Data we collect

• Identity: phone number (mandatory), name, email (optional), city.
• Service-context data: case briefs, documents you upload, language preference, jurisdiction tags. These are encrypted at rest with envelope encryption.
• Transaction data: order id, amount, payment status. Card and bank details are processed by Razorpay; we never see them.
• Operational data: log timestamps, IP address, user-agent, device class — used solely for fraud prevention and debugging.
• Cookies: see Section 7.

2. Lawful purposes (DPDP Act, s.4)

• To provide the services you request and fulfil your orders.
• To verify your identity at login (OTP) and prevent fraud.
• To meet legal obligations including tax invoicing and regulator reporting.
• To improve the Platform — only on de-identified, aggregated metrics.
• To send transactional and (with consent) marketing communications.

3. Consent & withdrawal

We collect Personal Data only with your consent or for purposes permitted under the DPDP Act. You may withdraw consent at any time by writing to our Grievance Officer or visiting /account/privacy. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

4. Sharing & processors

We disclose Personal Data only as listed below, under written contracts that bind processors to confidentiality and security obligations equivalent to ours.

• Razorpay — payment processing.
• Gupshup — WhatsApp Business communications and OTP delivery.
• AWS (Mumbai region, ap-south-1) — hosting, storage, encryption.
• AWS SES (Mumbai) — transactional email.
• Sentry — error monitoring (PII scrubbed).
• PostHog — product analytics (cookieless person ID).

5. International transfers

Personal Data of Indian residents is hosted within India (AWS Mumbai). Where a processor operates outside India (currently none in our default stack), transfers are made under standard contractual safeguards and only with your prior consent.

6. Retention

• Account data: retained while your account exists; hard-deleted on request.
• Order and tax records: retained for 8 years from the order date as required by Indian tax law, in anonymized form after account deletion.
• Case briefs: retained for 12 months from order completion, then permanently deleted.
• Operational logs: 90 days.

7. Cookies

We use the following cookie classes:

• Strictly necessary — session, locale, CSRF. No consent required.
• Functional — language preference, theme. Default-on for India per DPDP guidance.
• Analytics — PostHog (cookieless identifier) and Google Analytics 4. Off until you accept the cookie banner.
• Marketing — none currently. We do not run third-party ad pixels.

8. Your rights (Data Principal)

• Right to access — see what we hold on you (in-app export at /account/privacy).
• Right to correction and erasure — fix or delete inaccurate data.
• Right to grievance redressal — contact our Grievance Officer below.
• Right to nominate — designate a successor in case of incapacity.

9. Security

We employ encryption at rest (AWS KMS), encryption in transit (TLS 1.2+), strict access control, audit logging, and a vulnerability-disclosure programme. No system is perfectly secure; we will notify you and the Data Protection Board of India of any reportable personal-data breach in the manner required by the DPDP Act.

10. Children

The Platform is not intended for individuals under 18. We do not knowingly process children’s data and will delete any such data on becoming aware of it.

11. Changes to this Policy

Material changes will be notified in advance via email and an in-app notice.

12. Grievance Officer

Law Land India
Grievance Officer
Arera Hills, Bhopal, Madhya Pradesh 462011
Email: support@lawland.in