Information We Collect
We collect information in three categories:
Account information — your name, email address, phone number (if provided), and the organisation you represent. You give us this information when you sign up.
Usage information — which features you use, how often, and basic analytics about page visits and queries. We use this to improve the product.
Content you upload or generate — case files, briefs, statutes, notes, drafts, and queries you submit. This is yours; we hold it on your behalf.
We do not collect data from public sources to build profiles about you, and we do not buy data from third parties.
How We Use Your Information
We use your information to:
- Provide the Vidhi service — running searches, generating summaries and drafts, validating citations
- Maintain your personal document library
- Authenticate you and secure your account
- Communicate with you about service updates, billing, and support
- Improve the product through aggregated, de-identified usage analytics
- Comply with legal obligations under Indian law
We do not use the content you upload or generate to train AI models — yours or anyone else’s.
Sharing of Information
We share information only in these limited cases:
- AI model providers — when you submit a query or document for processing, we send the relevant text to advanced AI models we use under the hood. These providers process it and return a result. They are contractually prohibited from training on your data.
- Infrastructure providers — cloud hosting, database, email delivery, and payment processing partners who need limited access to operate the service.
- Legal requirements — if required by a valid order from an Indian court or law-enforcement authority, or to protect rights, safety, or property.
We do not sell your personal information.
Data Storage and Security
We store data on cloud infrastructure with encryption at rest and in transit. Access to production systems is restricted to authorised personnel. We follow industry-standard security practices including least-privilege access, audit logging at the infrastructure level, and regular review of access.
Your Rights
Under the Digital Personal Data Protection Act, 2023 and other applicable Indian law, you have the right to:
- Access — request a copy of the personal data we hold about you
- Correct — ask us to fix inaccurate information
- Delete — request deletion of your account and associated personal data
- Withdraw consent — for any processing that depends on your consent
- Grievance redressal — escalate concerns to our Grievance Officer (contact below)
To exercise any of these rights, email us at [email protected]. We respond within a reasonable time, typically within 30 days.
Data Retention
We retain account and content data while your subscription is active and for a reasonable period thereafter to comply with legal and accounting requirements. On account deletion, we remove personal data within 30 days, except where retention is required by law (for example, financial records).
Children
Vidhi is intended for legal professionals and is not directed at children under 18. We do not knowingly collect data from minors.
Changes to This Policy
We may update this policy from time to time. Material changes will be notified by email or through an in-product notice before they take effect.
Grievance Officer
For privacy-related grievances, contact:
Grievance Officer, Case Craft Pvt Ltd Email: [email protected]