What changed in this version: we have added Section 7, “Google Calendar and Microsoft Outlook sync”, and Section 10, earlier version of this Policy does not cover it. AI-assisted features stay switched off for every user until that separate notice is shown and accepted in-app.
1. Scope
This Privacy Policy describes how Law Tarazoo Technologies LLP (“we”) collects, uses, stores and shares personal data when you use Case Diary by Law Tarazoo (the “Service”). It is intended to comply with the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and other applicable Indian laws.
2. Who is the Data Fiduciary
For personal data you upload about your clients, opposing parties or witnesses, you(the advocate or firm using Case Diary) are the Data Fiduciary and we act as your Data Processor. For your own account and billing information (advocate name, email, phone, subscription data), we are the Data Fiduciary.
3. Data we collect
- Account data: name, email, phone, firm name, advocate name, profile settings.
- Case data: CNR, party names, court, judge, filing details, hearings, orders, notes, and any files you upload.
- Client data: names, phone numbers, email and notes you save under Clients.
- Court records: case metadata, orders and cause-list entries fetched from public court sources on your behalf.
- Billing data: plan, billing cycle, invoices, payment status, mandate metadata. We do not store card numbers, UPI IDs or bank credentials; Cashfree handles those directly.
- Usage data: logs of app usage, IP address, device information, and diagnostic events used to keep the Service reliable and secure.
4. How we use data
- To provide, personalise and support the Service.
- To send you transactional email and in-app notifications (hearings, orders, trial/renewal, receipts).
- To process subscription payments via Cashfree and reflect status in your account.
- To detect abuse, secure the Service and comply with law.
- To send optional product updates. You can opt out of non-transactional email at any time.
5. Legal basis
We process personal data on the basis of your consent, the performance of the contract with you, and legitimate use for the purposes for which you volunteered the data, in each case as recognised by the DPDP Act.
6. Sharing with third parties
- Cashfree Payments India Pvt. Ltd. — subscription payments and e-mandates.
- Resend — transactional email delivery.
- Supabase / Lovable Cloud — managed hosting, database and file storage.
- Court data providers (eCourts / third-party API vendors) — used only to fetch data you have asked us to fetch.
- Meta / WhatsApp Business API — when you opt in to receive your daily cause list on WhatsApp.
- Google (Gemini 2.5 Flash) via the Lovable AI Gateway — when you use AI-assisted features (order summaries, ask-diary). Prompts and case text you enable are sent to the AI provider for that request only.
We share the minimum information necessary and only for the stated purpose. We do not sell your data or your clients’ data.
7. Google Calendar and Microsoft Outlook sync (optional)
If you choose to connect a calendar, we request permission to create and update calendar events in your account. We use this access solely to write your own hearing dates and task deadlines from Case Diary into your calendar, and to update or remove those same events when the underlying hearing changes. We create and update only events that Case Diary itself created; we do not read, modify or delete any other event in your calendar. We store an access token, a refresh token and the email address of the connected account so the sync can continue without repeated sign-in. These are held encrypted and are deleted when you disconnect the calendar or delete your account. Calendar content is never used to train any model, is never sold, and is never shared with any third party.
Case Diary's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
8. Data location and security
Data is stored on managed cloud infrastructure with encryption in transit (TLS) and at rest. Access to production data is restricted to authorised personnel under confidentiality. Some sub- processors listed above may process data outside India in accordance with the DPDP Act.
9. Retention
- Case, client and billing data is retained while your account is active.
- Deleted rows are held in soft-deleted form for up to 30 days to enable restore, after which they are queued for permanent deletion.
- Financial records (invoices, receipts) may be retained for the period required by Indian tax law even after account closure.
- Diagnostic logs are retained for up to 90 days.
10. AI-assisted features
Case Diary offers optional AI-assisted features (for example the case story, order insights, deadline extraction, the prep brief and “ask your diary”). This section is the notice required under Section 5 of the DPDP Act for that purpose of processing. It is given to you at or before collection, in-app, and your consent to it is separate from your acceptance of the rest of this Policy.
10.1 What is processed
- the question or instruction you type;
- the case records needed to answer it — case metadata, orders, hearings, notes and tasks from your own firm only; and
- the contents of any document you upload for the assistant to read.
10.2 Who processes it
Processing is carried out by Law Tarazoo Technologies LLP as Data Fiduciary. We use Google’s Gemini 2.5 Flash model, accessed through the Lovable AI Gateway. Both Lovable and Google act as our Data Processors under written agreement and process the material only on our documented instructions and for no other purpose.
10.3 Where it is processed
The AI provider may process this data outside India. We do not transfer personal data to any country or territory restricted under Section 16 of the DPDP Act.
10.4 No training on your data
Nothing you send through AI-assisted features — your questions, your case records or your uploaded documents — is used to train or fine-tune AI models, by us or by the provider.
10.5 Retention
A document you upload solely so the assistant can extract case details is processed and then deleted; the deletion is performed in code immediately after extraction, not merely promised here. If you choose to attach the document to a case, it is retained with that case under Section 8 above. Generated answers are stored with the case so you can see them again, and are deleted with the case.
10.6 What the assistant will not do
The assistant does not give legal advice, and its output must be verified against the record before you rely on it. It never changes, deletes or sends anything from your diary without your explicit confirmation.
10.7 Confidentiality and privilege
Material you upload may be confidential or privileged. Before uploading, please satisfy yourself that doing so is consistent with your professional obligations under the Advocates Act, 1961, the Bar Council of India Rules and your duty of confidentiality to your client, including any client instructions or undertakings that restrict disclosure to third parties.
10.8 Optional, and withdrawable
AI-assisted features are entirely optional. They remain switched off until you give consent through a clear affirmative action on the in-app consent screen. We record your consent with your user account, the date and time, and the version of this Policy you consented to. You may withdraw your consent at any time, as easily as you gave it, at More → AI-assisted features. Withdrawal stops all further AI calls for your account immediately. Withdrawal does not affect the lawfulness of processing carried out before withdrawal, and the rest of Case Diary continues to work normally.
10.9 Your rights in relation to this processing
In respect of AI-assisted features, as with all other processing, you have the right to obtain information about and access your personal data, the right to correction and erasure, the right to nominate another individual to exercise your rights in the event of your death or incapacity, the right of grievance redressal with our Grievance Officer named in Section 12, and the right to complain to the Data Protection Board of India if your grievance is not resolved satisfactorily.
11. Your rights under the DPDP Act
Subject to applicable law, you have the right to:
- access and obtain a copy of the personal data we hold about you;
- correct or update inaccurate or outdated personal data;
- request erasure of your personal data;
- nominate another person to exercise your rights in the event of death or incapacity; and
- raise a grievance with our Grievance Officer.
Owners can exercise the right to Access and the right to Erasure directly from within the app under More → Privacy & security → Export my firm’s data and Delete my account & firm data. For other requests, write to us at shweta@lawtarazoo.com.
12. Grievance Officer
In accordance with the DPDP Act and the Information Technology Act, 2000, our Grievance Officer is:
- Name: Ms. Shweta Tungare
- Entity: Law Tarazoo Technologies LLP
- Email: shweta@lawtarazoo.com
- Address: 14, 3rd Asha Nagar, 1A, Borivli (East), Mumbai - 400066, Maharashtra
We will acknowledge grievances within a reasonable period and resolve them within the timelines mandated by law.
13. Children
The Service is intended for use by advocates and law firms. It is not directed at children.
14. Changes to this Policy
We may update this Policy from time to time. Material changes will be notified by email or in-app.
15. Contact
Write to shweta@lawtarazoo.com, or to our named Grievance Officer Ms. Shweta Tungare, Law Tarazoo Technologies LLP, 14, 3rd Asha Nagar, 1A, Borivli (East), Mumbai - 400066, Maharashtra.