Legal
Privacy Policy
Last updated: 1 April 2025 · Effective: 1 April 2025
NyayVichar is fully compliant with India's Digital Personal Data Protection (DPDP) Act, 2023. Your data belongs to you.
Who We Are
NyayVichar Technologies Private Limited ("Company", "we", "us") operates the NyayVichar platform at nyayvichar.in. We are the Data Fiduciary under the DPDP Act, 2023, responsible for processing your personal data.
Registered Address: [Address], Mumbai, Maharashtra – 400001
Grievance Officer: See our Grievance Officer page
Data We Collect
We collect the following categories of personal data:
<strong class="text-slate-800">Account Data</strong> — Name, email address, mobile number, gender, city/state/pincode when you register.
<strong class="text-slate-800">Case Data</strong> — The legal problem description, clarification answers, documents, and any other information you voluntarily provide when submitting a case.
<strong class="text-slate-800">Payment Data</strong> — Transaction records, Razorpay order and payment IDs. We do not store card numbers or UPI credentials.
<strong class="text-slate-800">Usage Data</strong> — IP address, browser type, pages visited, and activity logs for security and analytics.
<strong class="text-slate-800">Communications</strong> — Messages sent through the Platform between you and Lawyers.
How We Use Your Data
We process your personal data for the following purposes:
• <strong class="text-slate-800">Service Delivery</strong> — To provide case analysis, lawyer matching, and consultation facilitation
• <strong class="text-slate-800">Payments</strong> — To process booking fees and issue platform credits
• <strong class="text-slate-800">Verification</strong> — To verify Lawyer credentials and maintain platform integrity
• <strong class="text-slate-800">Safety & Security</strong> — To detect fraud, abuse, and unauthorised access
• <strong class="text-slate-800">Legal Compliance</strong> — To comply with applicable Indian laws and court orders
• <strong class="text-slate-800">Notifications</strong> — To send transactional emails/SMS about your cases and consultations
• <strong class="text-slate-800">Platform Improvement</strong> — To improve our AI models (using anonymised data only)
Data Sharing
We share your data only in the following circumstances:
• <strong class="text-slate-800">With Lawyers</strong> — Only when you initiate a contact request and only the information you consent to share
• <strong class="text-slate-800">With Payment Processors</strong> — Razorpay receives transaction data to process payments; governed by Razorpay's privacy policy
• <strong class="text-slate-800">With Service Providers</strong> — Hosting, email delivery, and analytics providers under strict data processing agreements
• <strong class="text-slate-800">Legal Requirements</strong> — When required by law, court order, or government authority
We never sell your personal data to advertisers or data brokers.
Anonymous Submissions
You may submit a legal case without creating an account or revealing your identity. In anonymous mode:
• Your name and contact information are not required
• You receive an anonymous handle for case discussions
• Identity is only revealed to a Lawyer when you explicitly choose to share it
• Every identity reveal is logged and auditable by you
Data Retention
We retain your data for as long as your account is active, plus:
• <strong class="text-slate-800">Account data</strong> — 3 years after account closure
• <strong class="text-slate-800">Case & consultation records</strong> — 7 years (for legal compliance)
• <strong class="text-slate-800">Payment records</strong> — 8 years (as required by Indian tax law)
• <strong class="text-slate-800">Activity logs</strong> — 90 days
On receiving a verified data deletion request, we delete or anonymise your data within 30 days, except where retention is required by law.
Your Rights under DPDP Act 2023
As a Data Principal, you have the following rights:
• <strong class="text-slate-800">Right to Access</strong> — Request a summary of your personal data and how it is processed
• <strong class="text-slate-800">Right to Correction</strong> — Request correction of inaccurate or incomplete data
• <strong class="text-slate-800">Right to Erasure</strong> — Request deletion of your personal data (subject to legal retention requirements)
• <strong class="text-slate-800">Right to Grievance Redressal</strong> — File a complaint with our Grievance Officer
• <strong class="text-slate-800">Right to Nominate</strong> — Nominate another individual to exercise your rights in the event of death or incapacity
Exercise your rights via the Data Deletion Request page or by contacting privacy@nyayvichar.in.
Cookies & Tracking
We use essential cookies for session management and security. We use analytics cookies to understand platform usage (anonymised). You can disable non-essential cookies in your browser settings without affecting core functionality.
Security
We protect your data using:
• TLS/HTTPS encryption for all data in transit
• AES-256 encryption for sensitive files at rest
• Private, access-controlled storage for case documents
• Regular security audits and vulnerability assessments
• Multi-factor authentication for administrative access
Children's Privacy
NyayVichar is not intended for individuals under 18 years of age. We do not knowingly collect personal data from minors. If you believe a minor has provided data, contact us immediately at privacy@nyayvichar.in.
Changes to this Policy
We may update this Privacy Policy. Material changes will be communicated via email to registered Users and prominently displayed on the Platform. Your continued use after notification constitutes acceptance.
Contact & Grievances
For privacy-related queries or to exercise your rights:
Email: privacy@nyayvichar.in
Grievance Officer: See Grievance Officer page
Response Time: Within 72 hours for acknowledgement; 30 days for resolution