Privacy Policy

How we collect, use, store, and protect your information — including sensitive legal details.

Last updated: May 2026

1. Who we are

Legal Setu ("we", "us", "our") is a technology platform that provides AI-assisted legal information and connects users with verified, independent advocates. We are not a law firm. Our registered address is EG-62, III Floor, Inderpuri, New Delhi — 110012. For privacy queries, write to hello@legalsetu.co.in.

2. What information we collect

We may collect the following categories of information depending on how you use the platform:

• Identity information: Your name, as provided in booking, contact, or document generation forms
• Contact information: Phone number, email address, and city or state where relevant to your legal matter
• Legal issue details: The facts, circumstances, and background you share with us through the AI chat, lawyer booking form, document generation form, or contact form. This may include sensitive personal information about disputes, employment, family, housing, criminal matters, or financial situations.
• Document content: Where you use a document generation form, the details you enter to generate the document (parties' names, dates, terms, etc.)
• Payment information: Transaction reference data processed via Razorpay for the ₹99 booking token or document fees. We do not store full card or bank account details — these are handled by Razorpay.
• Technical data: IP address, browser type, device information, pages visited, and session data collected via cookies and analytics tools (including Firebase Analytics or Google Analytics)

3. Why we collect your information

We collect and use your information for the following purposes:

• To provide AI-assisted legal information in response to your queries
• To generate legal documents based on your inputs
• To connect you with a verified advocate for a consultation
• To confirm bookings and communicate with you via WhatsApp, email, or phone regarding your matter
• To prepare an AI-generated case brief for the advocate assigned to your consultation
• To process payments via Razorpay and manage refunds
• To improve the reliability, safety, and quality of our platform
• To comply with applicable legal or regulatory requirements, respond to lawful requests, or prevent fraud

4. Chat and form data — what we store

We may store limited chat conversation data and form submission content where this is necessary to:

• Deliver the service you requested (for example, to prepare a case brief for a booked lawyer)
• Maintain continuity of your experience if you return to the platform
• Improve the accuracy and relevance of AI responses over time
• Investigate complaints or quality concerns
• Comply with legal or regulatory obligations

We aim to limit what we store to what is genuinely necessary. We do not use your private chat content to train publicly available AI models. Your conversations are processed by our AI provider (currently OpenAI) under contractual data-protection terms — they do not use your content for general model training.

5. Sharing your information

We do not sell your personal data. We may share your information in the following limited circumstances:

• With verified advocates: When you book a consultation, we share relevant details — your name, contact information, and the AI-prepared case brief — with the assigned advocate to enable the consultation. This sharing is limited to what is necessary for the engagement.
• With service providers: We use third-party providers including Firebase (authentication and data), OpenAI (AI responses), Razorpay (payments), and analytics services. These providers process data on our behalf under appropriate data-protection terms.
• When required by law: We will disclose information where required to do so by Indian law, court order, or a lawful request from a government authority.
• With your consent: In any other circumstance, only with your explicit consent.

6. Data retention

We retain your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by law. In practice:

• Booking and consultation records are retained for a reasonable period to support dispute resolution, refund processing, and quality review
• Payment transaction references are retained as required by financial and tax regulations
• Technical logs are typically retained for a short operational period
• Where you request deletion, we will remove your data within a reasonable period subject to any legal retention obligations

7. Your rights

Under the Digital Personal Data Protection Act, 2023 and applicable Indian law, you have the right to:

• Access: Request a summary of the personal data we hold about you
• Correction: Ask us to correct inaccurate or incomplete data
• Deletion: Request that we delete your personal data, subject to legal retention requirements
• Grievance redressal: Raise a complaint if you believe your data has been mishandled

To exercise any of these rights, write to hello@legalsetu.co.in with the subject line "Data Request". We will respond within 30 days as required under applicable law.

8. AI processing — important limitations

9. Data security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or loss. These include HTTPS encryption, Firebase security rules, and access controls. However, no system is completely secure — if you believe your data has been compromised, please contact us immediately at hello@legalsetu.co.in.

10. DPDP Act 2023 alignment

Legal Setu aims to process personal data in accordance with the principles of the Digital Personal Data Protection Act, 2023 ("DPDP Act"), including:

• Purpose limitation: Data collected only for specified, clear purposes
• Data minimisation: Only data necessary for the purpose is collected
• Storage limitation: Data retained only as long as necessary
• Security safeguards: Appropriate technical and organisational measures
• Grievance redressal: A mechanism to respond to user requests and complaints

The DPDP Act's implementing rules are still being notified by the Government of India. We will update our practices as the regulatory framework develops.

11. Cookies and analytics

We use cookies and similar technologies for authentication (via Firebase), session management, and analytics. Analytics data is used in aggregate to understand how people use the platform and to improve it. You can disable cookies in your browser settings, though this may affect some features of the site.

12. Children's privacy

Our services are not directed at children under 18. We do not knowingly collect personal data from minors. If you believe a minor has submitted data through our platform, please contact us at hello@legalsetu.co.in and we will delete it promptly.

13. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top will reflect any changes. For significant changes, we will endeavour to notify users through the platform. Continued use of Legal Setu after a policy update constitutes acceptance of the revised policy.

14. Contact and grievance officer