1. Scope
This Privacy Policy describes how Law Tarazoo Technologies LLP (“we”) collects, uses, stores and shares personal data when you use Case Diary by Law Tarazoo (the “Service”). It is intended to comply with the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and other applicable Indian laws.
2. Who is the Data Fiduciary
For personal data you upload about your clients, opposing parties or witnesses, you(the advocate or firm using Case Diary) are the Data Fiduciary and we act as your Data Processor. For your own account and billing information (advocate name, email, phone, subscription data), we are the Data Fiduciary.
3. Data we collect
- Account data: name, email, phone, firm name, advocate name, profile settings.
- Case data: CNR, party names, court, judge, filing details, hearings, orders, notes, and any files you upload.
- Client data: names, phone numbers, email and notes you save under Clients.
- Court records: case metadata, orders and cause-list entries fetched from public court sources on your behalf.
- Billing data: plan, billing cycle, invoices, payment status, mandate metadata. We do not store card numbers, UPI IDs or bank credentials; Cashfree handles those directly.
- Usage data: logs of app usage, IP address, device information, and diagnostic events used to keep the Service reliable and secure.
4. How we use data
- To provide, personalise and support the Service.
- To send you transactional email and in-app notifications (hearings, orders, trial/renewal, receipts).
- To process subscription payments via Cashfree and reflect status in your account.
- To detect abuse, secure the Service and comply with law.
- To send optional product updates. You can opt out of non-transactional email at any time.
5. Legal basis
We process personal data on the basis of your consent, the performance of the contract with you, and legitimate use for the purposes for which you volunteered the data, in each case as recognised by the DPDP Act.
6. Sharing with third parties
- Cashfree Payments India Pvt. Ltd. — subscription payments and e-mandates.
- Resend — transactional email delivery.
- Supabase / Lovable Cloud — managed hosting, database and file storage.
- Court data providers (eCourts / third-party API vendors) — used only to fetch data you have asked us to fetch.
- Meta / WhatsApp Business API — when you send a message to your client from within the Service.
- AI service providers — when you use AI-assisted features (order summaries, ask-diary). Prompts and case text you enable are sent to the AI provider for that request only.
We share the minimum information necessary and only for the stated purpose. We do not sell your data or your clients’ data.
7. Data location and security
Data is stored on managed cloud infrastructure with encryption in transit (TLS) and at rest. Access to production data is restricted to authorised personnel under confidentiality. Some sub- processors listed above may process data outside India in accordance with the DPDP Act.
8. Retention
- Case, client and billing data is retained while your account is active.
- Deleted rows are held in soft-deleted form for up to 30 days to enable restore, after which they are queued for permanent deletion.
- Financial records (invoices, receipts) may be retained for the period required by Indian tax law even after account closure.
- Diagnostic logs are retained for up to 90 days.
9. Your rights under the DPDP Act
Subject to applicable law, you have the right to:
- access and obtain a copy of the personal data we hold about you;
- correct or update inaccurate or outdated personal data;
- request erasure of your personal data;
- nominate another person to exercise your rights in the event of death or incapacity; and
- raise a grievance with our Grievance Officer.
Owners can exercise the right to Access and the right to Erasure directly from within the app under More → Privacy & security → Export my firm’s data and Delete my account & firm data. For other requests, write to us at casediary@lawtarazoo.com.
10. Grievance Officer
In accordance with the DPDP Act and the Information Technology Act, 2000, our Grievance Officer is:
- Name: Shweta Tungare
- Email: casediary@lawtarazoo.com
- Address: 14, 3rd Asha Nagar, 1A, Borivli (East), Mumbai - 400066, Maharashtra
We will acknowledge grievances within a reasonable period and resolve them within the timelines mandated by law.
11. Children
The Service is intended for use by advocates and law firms. It is not directed at children.
12. Changes to this Policy
We may update this Policy from time to time. Material changes will be notified by email or in-app.
13. Contact
Write to casediary@lawtarazoo.com.