Privacy Policy

Welcome to Lawqet. This Privacy Policy outlines the practices and policies of Grahmur Innovations Private Limited (collectively referred to as "Lawqet", "we", "us", or "our") regarding the collection, storage, processing, transfer, and protection of personal data and confidential legal information obtained through:

• The Lawqet Mobile Application (iOS & Android);
• The Lawqet Web Platform, Legal Search Console, and APIs (accessible via lawqet.app and associated sub-domains);
• Our advocate utilities, including the Case Tracker, Court Fee Calculator, Criminal Law Mapper (IPC/CrPC/IEA to BNS/BNSS/BSA), Police Station Finder, and Bare Acts Repository.

This Privacy Policy is published in strict compliance with the provisions of the Digital Personal Data Protection Act, 2023 (DPDPA), the Information Technology Act, 2000 (IT Act), and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (SPDI Rules).

We recognize that advocates and legal practitioners handle matters of the utmost sensitivity protected by statutory professional privilege under Sections 126 through 129 of the Indian Evidence Act, 1872 and corresponding provisions of the Bharatiya Sakshya Adhiniyam, 2023 (BSA).

We adhere strictly to the principle of Data Minimisation. We only collect information that is strictly required to provide our legal intelligence, cause-list tracking, and practice management features:

When you interact with the Lawqet Legal Search Agent, submit case facts, or query legal interpretations:

• No Foundation Model Training: Your prompts, case facts, document snippets, and search history are never used to train, fine-tune, or reinforce public or foundation Large Language Models (LLMs).
• Zero Web Hallucination Pipeline: Our retrieval architecture indexes authentic government gazettes, Supreme Court of India judgments, High Court orders, and statutory India Code enactments. Legal search outputs are grounded directly in authoritative statutory citations.
• Isolated Runtime Sockets: AI inference executes inside isolated execution boundaries with stateless request processing. Once your query response is rendered, the raw inference buffer is purged.

Under Section 4 and Section 6 of the Digital Personal Data Protection Act, 2023, Lawqet processes personal data under the following legitimate and lawful grounds:

1. Contractual Performance: Processing required to fulfill our service commitments to you, such as tracking your court cases, delivering cause list alerts, and managing your active subscription.
2. Consent: Clear and affirmative consent provided by you when registering, opting in to push notifications, or submitting contact inquiries. You hold the right to withdraw consent at any time.
3. Legitimate Uses & Legal Compliance: Compliance with statutory tax laws (GST invoicing), prevention of unauthorized platform intrusion, cyber security incident mitigation, and adherence to lawful judicial orders.

Lawqet implements stringent organizational and technical safeguards compliant with ISO/IEC 27001 standards and CERT-In guidelines:

• Indian Sovereign Data Residency: All core database records, advocate case workspaces, and authentication credentials are hosted and stored within secure, Tier-IV data centers located within the territory of India.
• In-Transit Encryption: All data transmitted between your device and Lawqet servers is encrypted using modern Transport Layer Security (TLS 1.3) protocols.
• At-Rest Encryption: All persistent database volumes, client case notes, and backup snapshots are encrypted using AES-256 bit military-grade encryption.
• Biometric App Shield: The Lawqet mobile application provides local biometric authentication (Face ID / Fingerprint) to guard against unauthorized access on physical devices.

We do not share your personal data with third-party advertisers or data brokers. We engage a restricted set of audited technical sub-processors solely for infrastructure operations:

• Cloud Infrastructure: Cloud hosting providers with Indian data regions (e.g., Google Cloud India / Amazon Web Services India) under strict Data Processing Addenda.
• Push Notification & Analytics: Firebase Cloud Messaging (Google LLC) for push notifications and anonymous performance telemetry.
• Payment Aggregators: RBI-licensed payment gateways (e.g., Razorpay / Cashfree / Stripe India) operating in compliance with PCI-DSS standards.
• Statutory Disclosures: We will only disclose specific user data if mandated by a binding judicial warrant, court order, or formal directive issued under Section 69 of the Information Technology Act or Section 91 of the CrPC / Section 94 of the Bharatiya Nagarik Suraksha Sanhita (BNSS), 2023.

We retain personal data only for the period necessary to serve the operational purposes outlined herein:

• Active Accounts: Case tracking records, saved statutes, and user preferences are retained throughout the active tenure of your account.
• Account Deletion ("Right to be Forgotten"): You may delete your account at any time directly through the app settings, via our online Account Deletion Request Portal, or by writing to privacy@lawqet.app. Upon deletion, your private case diary, notes, and search trails are permanently scrubbed within thirty (30) days.
• Statutory Tax Retention: Invoices, transaction logs, and GST records are preserved for the statutory period of seven (7) years as mandated by the Central Goods and Services Tax Act, 2017 and Income Tax Act, 1961.

As a Data Principal under the Digital Personal Data Protection Act, 2023, you are entitled to the following statutory rights:

1. Right to Access: You may request a summary of personal data held by Lawqet, including the processing activities undertaken.
2. Right to Correction & Erasure: You have the right to rectify outdated or inaccurate data, update your Bar credentials, or request complete erasure of your workspace.
3. Right of Grievance Redressal: You have the right to register complaints regarding data handling with our designated Grievance Officer and subsequently with the Data Protection Board of India.
4. Right to Nominate: You have the right to designate a representative who shall exercise your data rights in the event of death or incapacity.

To exercise any of these statutory rights, please send an email request from your registered email address to grievance@lawqet.app.

Our website uses essential and functional cookies to maintain your login session, remember your theme preference (Light/Dark mode), and optimize page load speeds. We do not deploy cross-site behavioral advertising cookies or sell cookie tracking data to third-party ad networks. You may disable cookies through your browser settings, though certain interactive features of the web platform may experience reduced functionality.

Lawqet is a professional platform designed for practicing advocates, law firm counsels, corporate legal departments, and law students aged 18 and above. We do not knowingly solicit or collect personal information from individuals under 18 years of charge. If we become aware that personal data of a minor has been collected without verified parental consent, we take immediate steps to purge such data from our databases.

In accordance with Rule 3(2) of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 and Section 12 of the Digital Personal Data Protection Act, 2023, the details of our designated Grievance Officer are as follows:

Any material revisions to this Privacy Policy will be notified via email or displayed prominently on the Lawqet app and website prior to taking effect. Continued use of Lawqet following such updates constitutes acknowledgment and acceptance of the revised terms.