Privacy Policy

Introduction

Smart AI Technology Solutions (“we” or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard personal data when you use our legal technology platform (currently offered to advocates, law firms, and their authorized representatives). We comply with India’s Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 in handling your data. Our platform provides AI-assisted legal research, drafting, translation, calendar event management, case management, and subscription services. These AI tools are designed to assist your practice, not replace your professional judgment. Please read this policy carefully to understand our practices. By using our services, you agree to the collection and use of information as described here. (We present this policy in clear, plain language, as required by law.)

Data Collection

We collect personal information that you provide and data generated during your use of our services.

Information You Provide: When you register or subscribe, we collect contact and account details such as your name, email, organization (law firm name), professional role, and login credentials. You may also enter case-related or client information into our platform (e.g. case titles, notes, calendar entries), for which you confirm you have the authority or consent to input.

Usage Data: We gather information on how you use our platform, such as search queries, documents uploaded, features accessed, time spent, and click actions. We also collect technical data like your IP address, device type, browser type, and operating system through cookies and similar technologies. This data helps us ensure the service functions correctly and is optimized for your needs.

Cookies and Automated Collection: Our website uses cookies to remember your preferences and gather analytics on usage (see Cookies below for details). Any information that qualifies as “personal data” under law is treated in accordance with this policy. We do not intentionally collect sensitive personal data unless you choose to provide it through using our services. Our platform is meant for adult legal professionals; we do not knowingly collect data from anyone under 18. If you provide personal data about others (for example, client information), you must ensure you have their consent or another lawful basis to do so. All the personal data we collect is itemized and used only for the purposes described in this policy.

Data Use

We use the collected data to operate, provide, and improve our services.

Providing Services: Your personal data is primarily used to deliver the platform’s features you subscribe to – for example, to perform legal research queries, generate AI-assisted drafts or translations based on your inputs, manage your case records and calendar, and maintain your account and subscription. We process your data to authenticate you when you log in, to save your settings or bookmarks, and to send you service communications (like important updates or reminders).

AI-Powered Tools: We utilize your inputs (such as search queries or drafting prompts) to run our artificial intelligence features and return results to you. These AI features are intended as a helpful aid in your legal work – not as a substitute for your own professional expertise and judgment. We strive to ensure the AI’s outputs are useful and relevant, but we do not guarantee their accuracy or legal adequacy, and we strongly advise you to review and verify AI-generated content. Ultimately, any decisions or actions taken based on AI outputs are your responsibility, not the machine’s – the AI tool cannot be held accountable for errors; the legal professional using it is. Accordingly, we disclaim liability for any consequences of relying solely on AI-generated results.

Improving and Enforcing Services: We may use usage data and feedback to improve our platform’s functionality and user experience. This may include analyzing how features are used, fixing issues, and developing new capabilities as our services evolve. We may also monitor usage to enforce our terms and subscription limits – for example, to prevent unauthorized account sharing or excessive use beyond your subscription plan.

No AI Model Training or Unauthorised Sharing: Importantly, we do not use your personal data to train our AI models. The content you input and the results generated are not fed into our model’s learning set, and we do not share your personal data with any third-party AI platforms. Your data remains under our control strictly for providing you the services you signed up for.

Other Uses: We may use your information to communicate with you about administrative or billing matters, to send you updates about new features or changes in our services, or to provide customer support if you contact us. We do not use your personal information for any advertising targeting or sell your data to marketers. We only share personal data with third parties in very limited circumstances: for instance, with trusted service providers necessary to run our operations (such as secure cloud hosting or email delivery services), and only under strict data protection agreements; or where we are required by law to respond to legal process or government requests. Any such disclosures will be made in compliance with applicable law and with your privacy in mind. Aside from these purposes, we will not use or disclose your data without your consent.

Consent

We process personal data on the basis of your consent and other lawful grounds permitted by law.

By creating an account or using our platform, you consent to our collection and use of your personal data as explained in this policy. We obtain consent in a clear and affirmative manner (for example, you agree to this policy when signing up) and we do not bundle unrelated consents together.

You have the right to withdraw your consent at any time. If you withdraw consent for us to process personal data that is necessary for providing the service (such as your account information or case data), we may not be able to continue offering you some or all features of the platform – for example, withdrawing consent to use your data for generating AI drafts means we cannot provide those draft services to you. We will inform you if such withdrawal affects your use of the platform. The process for withdrawing consent is designed to be as easy as giving it (you can contact us at any time to request withdrawal). Once consent is withdrawn, we will cease processing your personal data and erase it, unless retention is required for legal reasons.

In some cases, we may process personal data without consent if another lawful basis applies – for instance, if required to comply with a legal obligation, to fulfill a contract with you, or under certain “legitimate uses” allowed by the DPDP Act. Where we rely on such an exception, we will ensure it is permitted by law. Otherwise, we will ask for your consent for any new uses of data beyond the scope of this Privacy Policy.

By continuing to use our services, you also imply consent to necessary cookies as described below (you can manage cookie preferences as noted). We will not make any use of your personal data that is not reasonably expected by you without your permission.

Security

We take the security of your personal data very seriously.

Technical Measures: We implement appropriate technical and organizational safeguards to protect your information from unauthorized access, loss, or misuse. This includes using encryption to protect data (for example, encrypting data at rest in our databases and using TLS encryption for data transmitted between your device and our platform). We employ secure servers and cloud infrastructure with robust firewalls and access controls.

Organizational Measures: We restrict access to personal data strictly to our authorized staff and service providers who need it to operate and improve the service. All such persons are bound by confidentiality obligations. We regularly review our information collection, storage, and processing practices to prevent unauthorized access or processing. We also follow industry best practices and required standards under Indian law for data security (such as reasonable security practices prescribed under the IT Act and DPDP rules).

Data Infrastructure Control: Our firm maintains control over the core data infrastructure. We do not outsource data handling to any party without ensuring equivalent security standards. This means your data is stored in environments that we manage or rigorously vet, and we have visibility and control over where your data resides and how it is protected.

Monitoring and Testing: We monitor our systems for potential vulnerabilities and attacks, and we employ up-to-date security technologies to detect and prevent breaches. We also have an incident response plan in place. If, despite our safeguards, a personal data breach occurs that is likely to harm you, we will notify you and the relevant authorities as required by law. We will also take immediate steps to mitigate the breach.

No Guarantee: While we are committed to protecting your information and use every reasonable means to do so, please note that no method of transmission over the Internet or electronic storage is 100% secure. Therefore, we cannot guarantee absolute security of data. However, we continuously update and improve our security measures to meet evolving threats. By using our platform, you acknowledge these security practices. We will never ask you for sensitive personal information via email. If you suspect any unauthorized access or disclosure of your account or data, please contact us immediately so we can assist.

Retention

We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy or as required by law.

In general, this means we keep your information for the duration of your account being active and for a reasonable period thereafter to handle any post-termination issues or legal obligations. Under the Digital Personal Data Protection Act, we must cease to retain personal data once it is reasonable to assume that the purpose for which it was collected is no longer being served. Accordingly, if you stop using the service or close your account, we will delete or anonymize the personal data associated with your account when it is no longer needed for the original purpose.

Specifically, if you withdraw your consent or request deletion of your data, we will erase the personal data you have provided (and ensure our processors do the same), unless retention is required for compliance with a legal obligation. For example, if we are required by tax or accounting laws to retain transaction records, or if an Indian law mandates keeping certain data for a minimum period, we will retain the necessary data for the period required by law and then delete it.

We may retain minimal information after account deletion for record-keeping (such as email address or transaction history) if needed to resolve disputes, enforce our agreements, or comply with legal reporting or auditing. We also keep backup copies for a limited time as part of routine disaster recovery, but these too are purged periodically. Even if data is retained for legal reasons, it will not be used for any other purpose and access will be restricted. We also honor the “data minimization” principle: we avoid storing more data than we need. If personal data is aggregated or anonymized such that it can no longer be linked to any individual, we may retain and use that information indefinitely for analytics or service improvements. We will provide you prior notice if we plan to delete your personal data as a result of inactivity or purpose being fulfilled, as required by law.

In summary, we do not keep your data forever – only as long as needed to serve you and as mandated by law – after which we delete or de-identify it.

Rights

You have several rights regarding your personal data that we respect and uphold. These include:

Right to Access: You can request information about the personal data we hold about you and how we use it. We will provide you with a summary of your personal data being processed and the purposes, as well as information on any other parties (such as service providers) with whom your data may have been shared. This way, you stay informed about your data.

Right to Correction: If any of your personal data we have is inaccurate, incomplete, or outdated, you have the right to ask us to correct, update, or complete it. For example, if your email or contact information changes, or you find a mistake in data like your profile details, you can have it rectified.

Right to Erasure: You have the right to request deletion of personal data that we no longer need or for which you have withdrawn consent. When you request erasure, we will delete your data unless we are required to keep it by law. For instance, if you decide to discontinue the service and want your data removed, you can ask us to erase it.

Right to Withdraw Consent: As noted in the Consent section, you can withdraw your consent to our processing of your data at any time. Once you withdraw consent, we will stop the processing for which consent was required.

Right to Grievance Redressal: You have the right to an effective grievance redressal mechanism. If you have any concerns or complaints about how we are handling your personal data, you can contact us (see Contact section below) and we will address your grievance promptly. We aim to resolve all user grievances expeditiously.

Right to Nominate: In the unfortunate event of your incapacity or death, you (or your legal heir) have the right under the DPDP Act to nominate another individual to exercise your data rights on your behalf. If you wish to designate such a nominee, please let us know in writing; we will facilitate the exercise of rights through that nominated person as allowed by law.

Exercising Your Rights: Most of your basic information can be accessed and corrected directly by you through your account settings. For any other requests (access, erasure, withdrawal, etc.), you can write to us at our contact email provided. We may need to verify your identity before fulfilling certain requests, to ensure that your data does not fall into the wrong hands. We will respond to your requests within a reasonable time and no later than any timeframe required by law. Please note that some rights may be subject to limitations or conditions under applicable law – for example, the right to erasure cannot override certain mandatory record-keeping requirements, and the rights to access, correction, and deletion apply mainly to data you have provided or consented to. If we cannot comply with your request fully for legal reasons, we will explain why. We do not charge any fee for processing reasonable requests to exercise your rights. By empowering you with these rights, we ensure transparency and control over your personal data. If you have any questions about your rights or how to use them, feel free to contact us.

Cookies

Our platform uses cookies and similar tracking technologies to ensure it functions securely and to help us understand how users engage with our services.

What Are Cookies: Cookies are small text files placed on your device (computer or mobile) when you visit a website. They allow the website to remember your actions or preferences over time.

Types of Cookies We Use: We use a few different categories of cookies, all intended to improve your experience and our service, without compromising your privacy. The categories include:

• Necessary Cookies: These cookies are essential for the operation of our site and services. For example, when you log into your account, we use cookies to keep you signed in and maintain your session. They also help with loading website content and user interface preferences. Without these cookies, the platform cannot function properly. Because they are strictly necessary, we assume your implied consent to use them when you decide to use our platform.
• Security Cookies: We use certain cookies to enhance the security of our platform and your account. These cookies help us detect suspicious or malicious activity – for instance, they can track repeated failed login attempts or remember your device to alert you of new device sign-ins. Security cookies also enable fraud prevention and protect your data from unauthorized access. These cookies are vital to protect both you and us, and they generally do not gather personal information beyond what is needed for their protective function.
• Analytics Cookies: These cookies collect information about how users interact with our platform, such as which pages are visited most often, how long users stay, and which features are used. We use analytics cookies to gather aggregate insights on usage patterns. This helps us understand what content or features are useful to our users and where we can improve the service. The information collected by these cookies is typically in an anonymous or pseudonymized form – we look at overall trends, not at individual browsing behavior. We treat analytics data as personal data if it can be linked to you.

We do not use advertising cookies or third-party tracking cookies that follow you across other websites, and we do not serve third-party ads on our platform. All the cookies we use are either first-party (set by us) or come from trusted service providers for the sole purpose of providing analytics or technical infrastructure. In our Privacy Policy, we clearly describe each category of cookies and their purpose in plain terms, in line with recommended practices.

Consent and Control: When you first visit our site, you will see a notification about our use of cookies. By continuing to use the site after seeing that notice, we infer that you consent to our use of cookies as described in this policy. This approach of implied consent means that your choice to continue using our website or services is taken as agreement to the placement of cookies, especially for the non-essential ones like analytics. We believe this provides a user-friendly experience, but you still have control if you prefer not to accept cookies. If you wish, you can disable or delete cookies through your browser settings. Most modern browsers allow you to refuse new cookies, see what cookies you have, and delete them. You can typically find these options under the “Settings” or “Privacy” menu of your browser. For example, you may turn off cookies from all sites, or from specific sites, or set your browser to notify you when cookies are being set.

Opt-Out Limitations: Please note that if you block or disable necessary or security cookies, certain parts of our platform might not work correctly or at all. For instance, you might not be able to log in or use core features without those cookies. Analytics cookies are optional – you can opt out of them (either by browser settings or using available tools like browser add-ons to block Google Analytics). If you disable analytics cookies, it will not affect the core functionality of our service; however, it will limit our ability to understand usage and improve our offerings. Currently, we do not offer a separate in-platform cookie management tool (a formal Consent Management Platform) for toggling cookie categories, but we may introduce more granular controls in future updates in line with evolving laws. In the meantime, your browser controls are the primary way to manage cookies. By using our site without disabling cookies, you consent to our use of cookies and similar technologies for the purposes stated above. We handle any data obtained via cookies in accordance with this Privacy Policy and applicable data protection laws. If you have questions about our cookie use, you can contact us for more information. We periodically review our use of cookies to ensure we are compliant with privacy regulations and that our practices reflect current best practices.

Updates

We may update or change this Privacy Policy from time to time to reflect changes in our services or to comply with new legal requirements.

Policy Changes: If we make significant changes, we will notify users either by an announcement on our website, through the platform, or via email (for critical changes) prior to the change becoming effective. We will also update the “Last Updated” date at the top of the policy. We encourage you to review this page periodically to stay informed about how we are protecting your information.

Consent to Updates: Your continued use of our platform after any modifications to the Privacy Policy will constitute your acknowledgment of the changes and consent to abide by the updated terms, to the extent permitted by law. If we propose to use your personal data for a new purpose not originally outlined, we will seek your consent if required. We will never reduce your rights under this Privacy Policy without your explicit consent.

Service Evolution: As our legal tech services grow and evolve, there may be new features or services that involve new uses of personal data. We reserve the right to update our data handling practices accordingly, but we will always do so in accordance with applicable privacy laws and will update this Policy to transparently explain any significant new practices. We will maintain archived versions of previous privacy policies for reference. By keeping our Privacy Policy up to date, we aim to keep you fully informed of how your data is handled, so you can continue to use our platform with confidence. This Privacy Policy is effective as of the date above and remains in effect until superseded by a revised version.

Contact

We have established a grievance redressal and contact mechanism to address any questions or concerns you might have regarding your personal data or this Privacy Policy.

Grievance Officer & Contact Details: If you have any complaints, concerns, or requests with respect to your personal data, you can reach out to our designated Grievance Officer at the following contact:

Smart AI Technology Solutions 6th Cross, 3rd Block, Nagarbhavi 1st Stage, Bengaluru – 560072, India. Email: complaints@lawworld.ai

Please include “Privacy Request” or “Data Complaint” in the subject line of your email to help us address your query promptly. When you contact us, kindly provide details of your concern along with any relevant information (like your account email or the specific issue) so that we can assist you effectively. We will acknowledge your complaint and strive to resolve it as soon as possible, within any timelines prescribed by law. If you are not satisfied with the initial response or resolution, you may escalate your complaint. Under the Digital Personal Data Protection Act, you have the right to approach the Data Protection Board of India if you believe your grievance has not been adequately resolved by us. We will cooperate with any inquiries or directions from the Board.

Jurisdiction for Disputes: Any disputes or legal issues arising from this Privacy Policy or our handling of your personal data will be subject to the dispute resolution mechanisms agreed in our Terms of Service. By default, we seek to resolve disputes through arbitration as per the Indian Arbitration and Conciliation Act, 1996. The seat and venue for such arbitration shall be Bengaluru, India. The arbitration proceedings will be conducted in English by a sole arbitrator (unless otherwise mutually agreed). The arbitrator’s award shall be final and binding, subject to any right of appeal under Indian law. Additionally, subject to the arbitration clause, the courts in Bengaluru, Karnataka have exclusive jurisdiction to adjudicate any matters that may require court intervention (such as injunctive relief) or any appeals or enforcement of arbitration awards. This choice of jurisdiction is made to provide certainty and convenience to all parties.

Governing Law: This Privacy Policy and any disputes arising out of it shall be governed by the laws of India. We hope that no dispute will arise and that our commitment to privacy will meet your expectations. By providing this contact and dispute resolution information, we reaffirm our commitment to transparency and accountability in our privacy practices. If you have any questions about this Privacy Policy or how we handle your data, please do not hesitate to contact us. We value your trust and will do our utmost to safeguard your privacy while providing you with cutting-edge legal tech services.