Privacy Policy
संक्षेप: आपके दस्तावेज़ भारत (मुंबई) में रहते हैं; AI को नाम-नंबर की जगह टोकन दिखते हैं; AI प्रोसेसिंग Anthropic (US) के API से होती है और वे अपनी नीति के तहत सीमित समय के लिए डेटा रख सकते हैं; आप कभी भी मैटर हटा सकते हैं और रसीद मिलती है; शिकायत के लिए uv@casefileai.in।
Written to the standard of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and prepared for the Digital Personal Data Protection Act, 2023 and its Rules. [LEGAL REVIEW]
1. What we collect
- Account: email address (login is by one-time code; we store no password), name if you give one, organisation/tenant name.
- Content you upload: case documents and the case file, chat and drafts derived from them.
- Operational: audit records of actions (who opened, confirmed, corrected, deleted what — identifiers only, no document content), server logs without document content.
2. Why (purpose)
To provide the service you asked for: build a case file from your documents, answer questions from them, prepare drafts for advocate review; to secure the service and to meet legal obligations. We do not use your content to train AI models, and we do not sell or share it for advertising.
3. Where your data is
Documents, case files, chats and audit records are stored on servers in the DigitalOcean Mumbai region, India. Object storage is encrypted at rest with keys we control; transport is encrypted.
4. AI processing and what the provider sees
Before any AI processing, identifiers (names detected by pattern, phone numbers, account numbers, PAN, addresses, email) are replaced with tokens such as PERSON_1 or ACCT_A. The mapping between tokens and real values is stored separately, encrypted, and is never sent to the AI provider. Name detection is currently pattern-based; a free-text name may reach the AI. For scanned pages, the AI sees the page image to read it; digital pages are text-extracted first.
Pseudonymised text is processed by Anthropic's API (United States) directly, with no intermediary. Anthropic may retain API inputs and outputs for a limited period under its commercial data-retention policy (https://platform.claude.com/docs/en/manage-claude/api-and-data-retention). We have not enabled a zero-data-retention arrangement at this stage. [LEGAL REVIEW — cross-border processing notice under DPDP]
5. Who can see your content
You and the members you invite to your organisation. Our staff cannot read matter content in the ordinary course; any exceptional access is logged with a reason. [LEGAL REVIEW — describe break-glass procedure]
6. Retention and deletion
Your content stays until you delete it. Deleting a matter removes its documents, case file, chat, drafts and encryption keys, and produces a receipt listing what was removed. Audit entries referencing a deleted matter (identifiers only) are currently retained for security and are not yet included in the receipt count; this will change to deletion-with-count. Backups expire on rotation within 7 days.
Pilot accounts: content is deleted 30 days after the pilot ends unless the account is converted.
7. Your rights
Access, correction and erasure of your personal data; withdrawal of consent (withdrawal = deletion of the affected content); grievance redressal. Write to the Grievance Officer below. We respond within the time required by applicable law. [LEGAL REVIEW — DPDP timelines]
8. Security
Encryption at rest and in transit; per-organisation and per-matter isolation enforced at the database level; access logging; malware scanning of uploads; India-region hosting. We will notify affected users and the applicable authority of a personal-data breach as required by law. [LEGAL REVIEW — 72-hour DPDP requirement]
9. Cookies
A session cookie for login and an organisation-selection cookie. No advertising or third-party analytics cookies.
10. Children
The service is for professionals and adults; we do not knowingly collect data of persons under 18.
11. Changes
We will post changes here with a new effective date.
12. Grievance Officer
Ujjawal Verma · uv@casefileai.in · Nurturflow Solutions Private Limited, Unit No. 213 & 214, 2nd Floor, Welldone Tech Park, Sector 48, Gurugram, Haryana 122001, India.