Privacy Policy
संक्षेप: आपका सारा डेटा भारत में रहता है (फ़ाइलें AWS मुंबई में, केस फ़ाइल और चैट बेंगलुरु में); AI को फ़ोन, PAN, खाता जैसे नंबरों की जगह टोकन दिखते हैं, नाम और पते सिर्फ़ उन रूपों में mask होते हैं जिन्हें नियम पहचानते हैं, बाकी जैसे लिखे हैं वैसे AI तक पहुँचते हैं; जो पेज अपने टेक्स्ट से नहीं पढ़ा जा सकता (जैसे स्कैन) उसे masking से पहले OCR के लिए AI provider पूरा पढ़ सकता है; AI प्रोसेसिंग Anthropic (US) के API से होती है और वे अपनी नीति के तहत सीमित समय के लिए डेटा रख सकते हैं; आपके संगठन का कोई owner कभी भी मैटर हटा सकता है और रसीद मिलती है; शिकायत के लिए uv@casefileai.in।
Written to the standard of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and prepared for the Digital Personal Data Protection Act, 2023 and its Rules.
1. What we collect
- Account: email address (login is by one-time code; we store no password), name if you give one, organisation/tenant name.
- Content you upload: case documents and the case file, chat and drafts derived from them.
- Operational: audit records of actions (who opened, confirmed, corrected, deleted what — identifiers only, no document content), server logs without document content.
2. Why (purpose)
To provide the service you asked for: build a case file from your documents, answer questions from them, prepare drafts for advocate review; to secure the service and to meet legal obligations. We do not use your content to train AI models, and we do not sell or share it for advertising.
3. Where your data is
Everything is stored in India. Uploaded files are stored in AWS Mumbai (ap-south-1). The Case File, chat and the pseudonymisation vault are in a managed database in Bangalore (DigitalOcean blr1); the vault's master key is held in AWS Mumbai. Encrypted at rest and in transit.
4. AI processing and what the provider sees
Before the text goes to any AI, nine kinds of identifier — phone numbers, email addresses, PAN, Aadhaar, account and IFSC numbers, UPI IDs, vehicle numbers and GSTIN — are replaced with tokens such as PHONE_1 or ACCT_A. Each is found by its written shape, so one that is misread or written differently is not caught. Names and addresses are tokenised only when written in a form the rules recognise — for example a party on your matter record, a name after Shri or Smt or beside s/o, or an address after r/o with a PIN code; any other name or address reaches the AI as written. The mapping between tokens and real values is stored separately, encrypted, and is never sent to the AI provider. A page that cannot be read from its own text — a scan, a photo, or a PDF page whose text cannot be extracted — can be sent in full to the AI provider for OCR before any masking; masking applies to the text read from it. Every other page is read from its own text.
Pseudonymised text is processed by Anthropic's API (United States) directly, with no intermediary. Anthropic may retain API inputs and outputs for a limited period under its commercial data-retention policy (https://platform.claude.com/docs/en/manage-claude/api-and-data-retention). We have not enabled a zero-data-retention arrangement at this stage.
5. Who can see your content
You and the other members of your organisation — every member can open every matter. The CaseFile AI team, who run the servers, can technically reach everything stored, including your uploaded files as uploaded; there is no separate approval step or reason log for that access.
6. Retention and deletion
Your content stays until you delete it. Deleting a matter removes its documents, case file, chat, drafts and encryption keys, and produces a receipt listing what was removed. Audit entries referencing the matter are deleted with it and counted in the receipt. A nightly copy of the database and the files is kept in AWS Mumbai, and the database provider keeps daily backups in Bangalore. Each copy is kept for about 7 days, then expires — so a deleted matter stays in backups until they expire.
Pilots, trials and plans: nothing is deleted when a pilot, a trial or a plan ends. Every matter stays until an owner in your organisation deletes it, and you can still read it and export its drafts; an owner can still delete it.
7. Your rights
Access, correction and erasure of your personal data; withdrawal of consent (withdrawal = deletion of the affected content); grievance redressal. Write to the Grievance Officer below. We respond within the time required by applicable law.
8. Security
Encryption at rest and in transit; per-organisation and per-matter isolation enforced at the database level; access logging; malware scanning of uploads; India-region hosting. We will notify affected users and the applicable authority of a personal-data breach as required by law.
9. Cookies
A session cookie for login and an organisation-selection cookie. No advertising or third-party analytics cookies.
10. Children
The service is for professionals and adults; we do not knowingly collect data of persons under 18.
11. Changes
We will post changes here with a new effective date.
12. Grievance Officer
Ujjawal Verma · uv@casefileai.in · Nurturflow Solutions Private Limited, Unit No. 213 & 214, 2nd Floor, Welldone Tech Park, Sector 48, Gurugram, Haryana 122001, India.