Privacy Policy

Smart AI Technology Solutions ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard personal data when you use our legal technology platform (currently offered to advocates, law firms, and their authorized representatives). We comply with India's Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 in handling your data.

Our platform provides AI-assisted legal research, drafting, translation, calendar event management, case management, and subscription services. These AI tools are designed to assist your practice, not replace your professional judgment.

Please read this policy carefully to understand our practices. By using our services, you agree to the collection and use of information as described here. We present this policy in clear, plain language, as required by law.

We collect personal information that you provide and data generated during your use of our services.

Information You Provide: When you register or subscribe, we collect contact and account details such as your name, email, organization (law firm name), professional role, and login credentials. You may also enter case-related or client information into our platform (for example, case titles, notes, and calendar entries), for which you confirm you have authority or consent to provide.

Usage Data: We gather information on how you use our platform, such as search queries, documents uploaded, features accessed, time spent, and click actions. We also collect technical information like IP address, device type, browser type, and operating system through cookies and similar technologies.

Cookies and Automated Collection: Our website uses cookies to remember preferences and gather analytics on usage (see Cookies section). We do not intentionally collect sensitive personal data unless you choose to provide it through use of our services. Our platform is intended for adult legal professionals; we do not knowingly collect data from anyone under 18.

We use the collected data to operate, provide, and improve our services.

Providing Services: Your personal data is primarily used to deliver the platform's features you subscribe to - for example, legal research queries, AI-assisted drafting and translation, case management, calendar operations, account authentication, and service communications.

AI-Powered Tools: We utilize your inputs (such as search queries or drafting prompts) to run our artificial intelligence features and return results to you. These AI features are intended as a helpful aid in legal work and not as a substitute for your own professional expertise and judgment. We do not guarantee AI output accuracy or legal adequacy, and decisions based on AI output remain your responsibility.

Improving and Enforcing Services: We may use usage data and feedback to improve user experience, analyze feature adoption, fix issues, and develop capabilities. We may also monitor usage to enforce terms and subscription limits, such as preventing unauthorized sharing or excessive use beyond plan entitlements.

No AI Model Training or Unauthorized Sharing: We do not use your personal data to train our AI models. Content you input and outputs generated are not fed into model learning datasets, and we do not share personal data with third-party AI platforms for model training.

Other Uses: We may communicate with you about administrative matters, billing, platform updates, and customer support. We do not use personal information for advertising profiling or sell data to marketers. Data sharing with third parties is limited to trusted service providers operating under strict contractual and legal protections, or where required by law.

We process personal data on the basis of your consent and other lawful grounds permitted by law.

By creating an account or using our platform, you consent to collection and use of your personal data as explained in this policy. We obtain consent in a clear and affirmative manner and do not bundle unrelated consents together.

You have the right to withdraw your consent at any time. If you withdraw consent for data processing that is necessary to provide services, we may be unable to continue offering some or all features. Once consent is withdrawn, we will cease processing and erase data unless retention is required by law.

In specific situations, we may process personal data without consent if another lawful basis applies - for example, to comply with legal obligations, fulfill contractual duties, or legitimate uses permitted under applicable law.

By continuing to use our services, you also imply consent to necessary cookies as described in this policy. We will not make any use of your personal data that is not reasonably expected without obtaining permission where required.

We take the security of your personal data very seriously.

Technical Measures: We implement appropriate technical safeguards to protect information from unauthorized access, loss, or misuse, including encryption in transit, encryption at rest, secured servers, firewalls, and access controls.

Organizational Measures: Access to personal data is restricted to authorized personnel and service providers who need it to perform services, and who are bound by confidentiality obligations. We regularly review and strengthen our data handling practices.

Data Infrastructure Control: We maintain control over core data infrastructure and do not outsource data handling without ensuring equivalent security standards. Your data remains in systems that we manage directly or rigorously vet.

Monitoring and Testing: We continuously monitor systems for vulnerabilities and threats, and maintain incident response processes. If a personal data breach likely to cause harm occurs, we will notify users and authorities as required by law.

No Guarantee: No method of internet transmission or electronic storage is fully secure. While we use reasonable and evolving safeguards, absolute security cannot be guaranteed.

We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy or as required by law.

In general, this means data is retained while your account is active and for a reasonable period afterward to handle post-termination issues or legal compliance. When retention is no longer justified, data is deleted, anonymized, or de-identified.

If you withdraw consent or request deletion, we will erase the data you have provided (and require our processors to do the same), unless retention is legally required - for example, for tax, accounting, audit, or statutory compliance obligations.

We may retain minimal records after account closure for dispute resolution, enforcement of agreements, legal reporting, and disaster recovery backups for limited periods. Retained data remains access-restricted and is not reused for unrelated purposes.

We also apply data minimization principles and avoid storing more data than required. Aggregated or irreversibly anonymized information may be retained for long-term analytics and service improvement.

You have rights regarding your personal data that we respect and uphold.

Right to Access: You may request information about personal data we hold, how it is processed, and with whom it is shared.

Right to Correction: If your personal data is inaccurate, incomplete, or outdated, you may request correction or completion.

Right to Erasure: You may request deletion of personal data no longer required for the purposes for which it was collected, subject to legal retention requirements.

Right to Withdraw Consent: Where processing is based on consent, you may withdraw consent at any time.

Right to Grievance Redressal: You have the right to raise complaints regarding handling of personal data and receive timely grievance resolution.

Right to Nominate: Under applicable law, you may nominate another person to exercise rights on your behalf in specified circumstances.

Exercising Your Rights: Most profile information can be updated directly in your account settings. For formal requests, contact us using the details in this policy. We may verify identity before actioning sensitive requests and respond within timelines required by law.

Our platform uses cookies and similar technologies to ensure functionality, improve security, and understand user experience.

What Are Cookies: Cookies are small text files stored on your device when you visit a website. They help remember preferences and improve continuity across sessions.

Types of Cookies We Use: We use limited categories of cookies designed to support platform operation and service quality.

We may revise this Privacy Policy from time to time to reflect service changes, legal developments, or improved data protection practices.

Policy Changes: For significant updates, we will notify users through platform notices, website announcements, or email where appropriate. We will update the "Last Updated" date accordingly.

Consent to Updates: Your continued use of the platform after changes become effective constitutes acknowledgment of the revised policy, to the extent permitted by law.

Service Evolution: As legal technology services evolve, new processing activities may be introduced. Any such changes will be implemented in accordance with applicable law and transparently reflected in this policy.

We have established a grievance redressal and contact mechanism for concerns regarding personal data or this Privacy Policy.

Grievance Officer & Contact Details: If you have complaints, concerns, or requests about your personal data, please contact us at: Smart AI Technology Solutions, 6th Cross, 3rd Block, Nagarbhavi 1st Stage, Bengaluru - 560072, India. Email: complaints@lawworld.ai

Please include "Privacy Request" or "Data Complaint" in your subject line and provide relevant details so we can support you promptly. If unresolved, you may approach the Data Protection Board of India as permitted under law.

Jurisdiction for Disputes: Disputes relating to this Privacy Policy are subject to dispute resolution mechanisms agreed under our Terms of Service. Unless otherwise agreed, arbitration shall be seated in Bengaluru, India, and courts in Bengaluru, Karnataka will have jurisdiction for matters requiring court intervention.

Governing Law: This Privacy Policy is governed by the laws of India.