Privacy Policy

1. Information we collect

1.1 Information you give us directly

• Account details: full name, email address, mobile number, and professional role (advocate, judge, researcher, etc.) provided at sign-up.
• Profile preferences: subject areas, preferred courts, language preference.
• Subscription details: plan selected and billing history (full payment instrument details are handled by our payment processor and are not stored by us).
• Support correspondence: any messages you send to support@pljronline.com.
• Content you create in-app: bookmarks, briefcases, personal notes, saved searches.

1.2 Information we collect automatically

• Sign-in session data: secure session information stored on your device to keep you signed in between visits.
• Usage data: judgments you view, searches you run, features you use, and time spent in the app, used to deliver and improve the Service.
• Device and technical information: device model, operating system version, app version, language, time zone, network type, and approximate location derived from your network address, used for security and analytics.
• Notification identifier: a unique device identifier used by our push notification provider to deliver alerts to your device.
• Diagnostic data: when the app encounters an error, anonymised technical information may be collected to help us fix bugs.

1.3 Information from third parties

• Payment confirmations from our payment processor.
• Message delivery confirmations from our SMS gateway.

We do not collect sensitive personal information such as biometric data, health information, racial or ethnic data, religious beliefs, or political opinions. We do not collect data from children under 18; the Service is intended for legal professionals and adult researchers.

2. How we use your information

We use your information to:

• Create and authenticate your account, including verifying your mobile number via one-time password.
• Deliver the Service: serve search results, render judgments, generate PDFs, and provide personalised features.
• Process payments and manage your subscription.
• Send transactional messages (OTPs, payment confirmations, account alerts) via SMS, email, push notification, or WhatsApp.
• Send service announcements and updates about new features. You can opt out of non-essential notifications in the app settings.
• Improve the Service by analysing aggregate usage patterns, fixing bugs, and developing new features.
• Comply with legal obligations and respond to lawful requests from courts or regulators.
• Detect and prevent fraud, abuse, and security threats.

We do not use your information to train AI models on individual content. Our AI features (Smart View, Argument Lab, Judicial Lab) process judgments published in our editorial repositories, not your personal data.

We do not sell your personal information to anyone.

3. How we share your information

We share information only in the limited circumstances below.

3.1 Service providers

We use the following third-party processors to operate the Service. Each is bound by contractual confidentiality and data-protection obligations:

• Supabase — database and authentication infrastructure (hosted in India).
• Railway — backend application hosting.
• Vercel — frontend website hosting.
• Razorpay — payment processing. Your payment instrument details are handled by Razorpay; we do not receive them.
• MSG91 — SMS gateway for one-time passwords and transactional messages within India.
• Meta WhatsApp Cloud API — WhatsApp messaging for our search bot. Your WhatsApp interactions are also subject to Meta's privacy policy.
• OneSignal — push notification delivery.
• OpenAI — AI summarisation of judgments. We send judgment text (not your personal data) for processing.

3.2 Legal and safety disclosures

We may disclose information if required by law, court order, or government request, or where we believe in good faith that disclosure is necessary to:

• Comply with applicable law or legal process.
• Protect the rights, property, or safety of PLJR WEB, our users, or the public.
• Detect, prevent, or respond to fraud, abuse, or security incidents.

3.3 Business transfers

If PLJR WEB is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.

We do not share your information with advertisers. There are no advertising networks or third-party analytics SDKs that profile you across applications.

4. Data storage and security

Your data is stored primarily on infrastructure located in India. Some service providers may process data outside India in the course of providing their services (for example, push notification delivery and AI summarisation may be processed in other jurisdictions). We use providers that maintain industry-standard safeguards.

We apply reasonable technical and organisational measures designed to protect your information, including encryption in transit and at rest, secure password handling, and access controls limiting which personnel can view production data. We review our security practices periodically.

No system is perfectly secure. While we take reasonable precautions, we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential and for signing out on shared devices.

5. How long we keep your data

We retain your data for as long as your account is active, plus a reasonable period afterward to:

• Comply with legal obligations (e.g., tax records retained for the period required under Indian tax law).
• Resolve disputes and enforce our agreements.
• Maintain backups for disaster-recovery purposes.

When you delete your account, we delete or anonymise your personal data within 90 days, subject to the retention periods above. Aggregate statistical data that cannot identify you may be retained indefinitely.

6. Your rights

Under the Digital Personal Data Protection Act 2023 (India) and other applicable laws, you have the following rights regarding your personal data:

• Right to access: request a copy of the personal data we hold about you.
• Right to correction: update any inaccurate or incomplete personal data.
• Right to erasure: request deletion of your personal data, subject to legal retention requirements.
• Right to grievance redressal: raise concerns with our Grievance Officer (see Section 10).
• Right to withdraw consent: opt out of non-essential processing, including marketing communications.
• Right to nominate: designate another person to exercise your rights in the event of your death or incapacity.

To exercise any of these rights, contact us at support@pljronline.com with your registered email address and a description of your request. We will respond within 30 days.

7. Cookies and similar technologies

The mobile app stores a small amount of data locally on your device for the Service to function, including sign-in session data, app preferences (theme, font size, recent searches), and cached content for offline viewing.

The website (pljronline.com) uses essential cookies for authentication and session management. We do not use third-party advertising cookies or cross-site tracking.

You can clear cached data at any time by signing out, or by clearing app data in your device's system settings.

8. Children

The Service is intended for adult legal professionals, judges, and researchers. We do not knowingly collect data from anyone under 18. If you believe a minor has provided us with personal data, please contact us and we will delete it promptly.

9. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will:

• Update the “Last Updated” date at the top of this page.
• Notify you of material changes via in-app notice, email, or push notification at least 30 days before the changes take effect.

Your continued use of the Service after the changes take effect constitutes your acceptance of the updated policy.

10. Contact us

For any questions about this Privacy Policy, your data, or to exercise any of the rights described above:

We will acknowledge your grievance within 24 hours and resolve it within 15 days of receipt.

11. Jurisdiction

This Privacy Policy is governed by the laws of India. Any disputes arising from it are subject to the exclusive jurisdiction of the courts at Patna, Bihar.