PRIVACY POLICY

1. INTRODUCTION

1.1 This Privacy Policy explains how SmartVakheel.AI ("Platform", "We", "Us", "Company"), owned and operated by SNC (SmartNCode), collects, processes, stores, uses, and protects your information.

1.2 By using SmartVakheel.AI (web, mobile, APIs, Secure Vault, workflows, or AI tools), you ("User", "You") consent to this Policy.

1.3 This Policy is designed to comply with the Digital Personal Data Protection (DPDP) Act, 2023, applicable IT rules, and global data protection standards where relevant.

2. INFORMATION WE COLLECT

SmartVakheel.AI may collect and process the following categories of information:

2.1 Personal Information

  • Name, Email, Phone Number
  • Law Firm Name & Professional Details
  • Advocate Registration Number (if provided)
  • Organizational Role (Admin / Lawyer / Staff / Client)

2.2 System & Metadata

  • Login Time, IP Address, Device Type
  • Browser Information, OS Version
  • Usage Logs for security and analytics

2.3 Legal Data (Client Data)

  • Case details, parties involved, filings, client documents
  • Notes, evidence files, drafts, internal communication
  • Uploaded documents: PDF, DOC, JPEG, PNG, etc.

User retains ownership of all uploaded legal data, subject to Section 8 (Secure Vault).

2.4 Payment Information (PCI-DSS Compliant)

We collect:

  • Transaction ID, Payment Status
  • Masked Card Tokens, UPI IDs (non-sensitive)

We DO NOT store:

  • Card numbers
  • CVV
  • PIN
  • Bank passwords
  • UPI PIN

Payments are processed by RBI & PCI-DSS compliant gateways.

2.5 AI Interaction Data

  • Prompts entered by the User
  • Generated AI responses
  • Correction feedback (if provided by User)

Private legal data uploaded in Vault or case files is NOT used to train AI.

3. HOW WE USE YOUR INFORMATION

We use the collected data for:

  • Legal workflow automation
  • Draft generation & research enhancement
  • Subscription billing & renewal
  • User authentication & authorization
  • Customer support & security measures
  • Analytics to improve Platform efficiency
  • Detecting unauthorized access & misuse

No sale of personal or legal data.

4. CONSENT & USER RIGHTS (DPDP Act 2023)

Under the DPDP Act, Users have the right to:

  • Access their data
  • Correct inaccuracies
  • Request data export
  • Request account deletion
  • Withdraw consent where applicable

Requests may be sent via the Platform's Support Section. Deletion requests may limit access to services.

5. DATA SHARING & DISCLOSURE

Your data may be shared only with:

  • Payment processors (RBI/PCI compliant)
  • Cloud hosting partners
  • Email/SMS delivery providers
  • Legal authorities, if compulsory by law/court order

We do not sell, rent, outsource, or commercialize your data.

6. COOKIE POLICY

SmartVakheel.AI uses:

  • Session Cookies (login/security)
  • Functional Cookies (preferences)
  • Analytics Cookies (performance)

We DO NOT use:

  • Advertising/marketing trackers
  • Third-party ad cookies

Users may disable cookies, but key features may stop working.

7. AI DATA HANDLING

7.1 AI outputs are automatically generated and may contain inaccuracies.

7.2 Private documents and Vault data are NOT fed into AI training.

7.3 Prompts may be temporarily analyzed to:

  • Fix bugs
  • Improve response accuracy
  • Prevent misuse (e.g., illegal queries)

Analysis is bounded by strict confidentiality and NOT used to build legal datasets.

8. SECURE VAULT POLICY

8.1 Legal documents uploaded to Secure Vault are:

  • AES-256 encrypted at rest
  • HTTPS encrypted in transit
  • Stored on secure cloud servers

8.2 SmartVakheel.AI cannot access Vault data without explicit written consent, except when required by law enforcement.

8.3 Deleted Vault data will be permanently removed within 90 days, including backups.

9. DATA RETENTION

We retain:

  • Account records as long as User is active
  • Payment data for mandatory tax compliance
  • Access logs for fraud/security audit and legal requirements
  • Deleted user account logs only for compliance enquiries

Users requesting account deletion must clear outstanding dues.

10. SECURITY PRACTICES

We use:

  • Multi-layered encryption
  • Role-based access controls
  • Zero-trust authentication
  • Tokenization for payments
  • Firewall & network monitoring
  • Regular security auditing

No digital transmission is 100% secure. Users must use strong passwords & protect their devices.

11. THIRD-PARTY LINKS

Court websites, legal sources, and government portals may be linked. We are not responsible for:

  • Data accuracy
  • Content changes
  • Security issues on external sites

12. CHILDREN'S PRIVACY

SmartVakheel.AI is for professional legal use only.

We do not knowingly collect data from users under 18 years.

13. INTERNATIONAL TRANSFER

If data is stored outside India via cloud providers, it will be subject to:

  • Contractual Security Clauses
  • DPDP Act Adequacy Provisions
  • Industry-standard encryption

14. CHANGES TO POLICY

We may update this Policy to stay compliant. Continued use after update implies acceptance.

15. GOVERNING LAW & DISPUTE RESOLUTION

15.1 Governed by the laws of India.

15.2 Disputes will first be resolved via Arbitration under the Arbitration & Conciliation Act, 1996.

15.3 Seat & Venue: Hyderabad, Telangana, India.

15.4 Arbitrator: Single arbitrator mutually appointed.

15.5 Courts in Hyderabad will have exclusive jurisdiction only after arbitration.