Privacy policy
ADVOC
Privacy Policy
Legis Technologies Private Limited
This Privacy Policy ("Policy") governs the manner in which Legis Technologies ("we," "us," "our," or the "Company") collects, uses, discloses, and safeguards your information when you access or use Advoc — our legal practice management platform and all related applications, features, and services (collectively, the "Platform" or "Services"). This Policy is binding on all users of the Platform ("you," "your," or "User").
By accessing or using the Platform, you acknowledge that you have read, understood, and agree to be bound by this Policy. If you do not agree with the terms described herein, you must immediately discontinue use of the Platform and our Services.
1. Definitions
The following terms shall have the meanings ascribed to them below throughout this Policy:
Personal Data
Any information that relates to an identified or identifiable individual, including name, email address, phone number, professional credentials, or any combination of data that can be used to identify a person.
User Content
Any information, documents, data, or materials that you upload, submit, or generate while using the Platform, including case notes, client records, legal documents, and queries submitted to Platform features.
Services
The Advoc platform and all related tools, applications, features, modules, and services made available by Legis Technologies.
Data Fiduciary
An entity that determines the purpose and means of processing personal data. Legis Technologies acts as the Data Fiduciary under applicable Indian law.
Data Principal
The individual whose personal data is being collected and processed — i.e., you, the User.
Third-Party Service Provider
External entities, vendors, or technology partners engaged by Legis Technologies to support, power, or deliver specific components or functionalities of the Platform.
Processing
Any operation or set of operations performed on Personal Data, including collection, storage, use, transfer, or deletion.
Intelligent Features
Automated and technology-assisted capabilities within the Platform, including but not limited to document analysis, workflow automation, smart search, and recommendation systems, which may be powered by underlying computational technologies provided by third parties.
2. Scope and Applicability
This Policy applies to:
All Users who access or use the Advoc Platform, including registered subscribers, trial users, and administrators.
All personal data collected through our website, web application, mobile application, and any other touchpoints associated with the Platform.
Any interactions between Users and Legis Technologies through support channels, communications, or feedback mechanisms.
This Policy does not apply to third-party websites, applications, or services that may be linked from within our Platform. We encourage you to review the respective privacy policies of any third-party services you access through links on the Platform. We are not responsible for their privacy practices.
3. Information We Collect
3.1 Information You Provide Directly
We collect Personal Data that you voluntarily provide when you interact with the Platform, including when creating an account, using our Services, or communicating with us. This includes:
Account Information: Your full name, email address, contact number, professional designation, bar registration or enrolment number, law firm or organisation name, and account credentials.
Profile Information: Details about your professional experience, domain of practice, language preferences, and any other information you voluntarily add to your profile.
Client and Case Data: Information you enter or upload in connection with your legal practice management activities, including client names, case details, hearing schedules, documents, and related records.
Communication Information: The contents of messages, queries, or feedback you submit to us through support channels, contact forms, or in-platform communication tools, along with your name and email address.
Payment and Billing Information: Subscription plan details and transaction records. We do not store full financial information such as complete credit card numbers on our servers; payment processing is handled securely by our third-party payment partners.
3.2 Information Collected Automatically
We collect certain information automatically when you access and use the Platform:
Log Data: Your Internet Protocol (IP) address, browser type and version, operating system, date and time of access, pages visited, and interaction patterns. Log data is retained for a maximum of twelve (12) months, after which it is anonymised or deleted.
Usage Data: Metadata relating to how you use the Platform, including features accessed, frequency and duration of sessions, volume of queries submitted, and general interaction patterns.
Device Information: Device type, model, operating system version, device identifiers, and browser information collected when you access the Platform on a computer or mobile device.
Cookies and Similar Technologies: We use authentication and session cookies that are essential for the functioning and security of the Platform. These expire in accordance with their designated session parameters. We do not use cookies for marketing or advertising tracking purposes. You may configure your browser to reject cookies, though this may affect certain functionalities of the Platform.
3.3 Information from Integrated External Sources
To deliver and enhance certain features of the Platform, we may, in accordance with your instructions and the relevant permissions you grant, retrieve and process information obtained from external data sources and integrations. Such information is used solely for the purpose of providing the Services to you and is handled in accordance with this Policy and any applicable terms governing such external sources.
4. How We Use Your Information
We collect and process your Personal Data only where we have a lawful basis to do so, including your explicit consent, the performance of a contract, our legitimate business interests, or compliance with applicable legal obligations. We use your information for the following purposes:
To create, verify, maintain, and administer your account and subscription.
To provide, operate, and improve the Platform and its features.
To enable Intelligent Features and technology-assisted capabilities within the Platform based on your usage and inputs.
To send you service-related communications, including notifications, reminders, account updates, and product announcements.
To respond to your queries, support requests, and complaints.
To analyse usage trends and Platform performance for the purpose of fixing bugs, improving stability, and developing new features.
To detect, investigate, and prevent fraudulent activity, security incidents, or violations of our Terms of Service.
To process payments and manage subscription billing.
To comply with applicable legal obligations and protect the rights, property, and safety of the Company, its Users, and the public.
We are committed to protecting your privacy. We do not sell, rent, or lease your Personal Data or User Content to any third party for commercial gain.
Free Plan Users: If you are using Advoc's free service tier, you explicitly agree and consent to our use of your anonymised and de-identified User Content and Usage Data to improve and develop Platform features and capabilities. This provision does not apply to paid subscription tiers.
5. How We Share Your Information
We share your Personal Data only in the circumstances described below. We do not share your data for advertising or marketing purposes, and we do not sell your data.
5.1 Affiliates
We may share Personal Data with our corporate affiliates for the purpose of operating our business, including fraud prevention, payment processing, customer support, and account administration. Any such sharing is subject to the protections described in this Policy.
5.2 Trusted Technology and Service Partners
We engage carefully selected third-party technology partners and service providers to help us operate, maintain, and deliver the Platform. These partners may have limited exposure to your data solely for the purpose of performing agreed services on our behalf. They are bound by strict confidentiality obligations and are contractually prohibited from using your data for any other purpose.
Categories of third-party service providers we work with include:
Cloud infrastructure and data hosting providers.
Payment gateway and billing service providers.
Analytics and performance monitoring services.
Customer support and communication tools.
Technology providers that power Intelligent Features and automated processing capabilities within the Platform.
Where our third-party technology partners process Personal Data or User Content on our behalf, we ensure that such arrangements are governed by formal agreements that include applicable data protection commitments, including restrictions on the use of your data for any purpose other than providing the agreed service to us.
5.3 Legal Compliance and Regulatory Requirements
We may disclose your Personal Data where required to do so by law, or in the good-faith belief that such disclosure is necessary to:
Comply with a legal process, court order, or regulatory requirement served on us.
Protect and defend the rights or property of Legis Technologies, the Platform, or its Users.
Act under exigent circumstances to protect the personal safety of our Users or the public.
Share information with professional advisors, such as auditors or legal counsel, for the purpose of obtaining advice, subject to confidentiality obligations.
5.4 Cross-Border Data Transfers
Your Personal Data and User Content may be stored on and processed by servers located outside India, including in the United States and other jurisdictions. By using the Platform, you consent to such transfers, provided that adequate contractual and technical safeguards are in place to protect your data in accordance with applicable laws.
5.5 Third-Party Service Provider Overview
Cloud Infrastructure Provider
Purpose: Application hosting, data storage, security, and networking.
Payment Gateway Provider
Purpose: Subscription billing and payment processing.
Intelligent Feature Technology Provider
Purpose: Powering automated and AI-assisted capabilities within the Platform.
Document Processing Provider
Purpose: Document analysis, extraction, and processing features.
Analytics Provider
Purpose: Usage analytics and Platform performance monitoring.
6. Data Retention and Deletion
We retain your Personal Data only for as long as is necessary to provide the Services, fulfil legitimate business purposes, or comply with our legal obligations.
Log Data is retained for a maximum of twelve (12) months from collection, after which it is anonymised or permanently deleted.
Account information and User Content associated with active accounts are retained for the duration of your subscription and for a reasonable period thereafter.
Backup data is maintained on a regular frequency and stored securely, with retention periods aligned with our legal and operational requirements.
If you wish to request the deletion of your account and associated Personal Data, you may do so by contacting us at the details provided in the Contact section below. Please note that we may retain certain information where required for legitimate business interests such as fraud prevention, security, or where retention is mandated by applicable law.
7. Data Security
We employ commercially reasonable technical, administrative, and organisational security measures to protect your Personal Data from unauthorised access, loss, misuse, disclosure, alteration, or destruction.
Our security measures include:
Encryption of data in transit using the HTTPS/TLS protocol across the Platform and all third-party API integrations.
Encryption of data at rest within our infrastructure.
Access controls and authentication mechanisms to restrict access to Personal Data to authorised personnel only.
Regular security assessments and monitoring of our systems and third-party integrations.
Notwithstanding these measures, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security, and you should exercise discretion regarding the nature of information you submit through the Platform. In particular, please avoid entering highly sensitive information that you would not want a third-party reviewer to access.
8. Your Privacy Rights
As a Data Principal under applicable law, including the Digital Personal Data Protection Act, 2023 (DPDPA), you have the following rights with respect to your Personal Data:
Access and Correction
You may request access to the Personal Data we hold about you and request correction of any inaccuracies. You are responsible for keeping your information current and accurate.
Deletion (Right to Erasure)
You may request the deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, or where you have withdrawn consent and no other legal basis for processing applies.
Withdraw Consent
You may withdraw your consent to processing at any time by contacting us. Withdrawal of consent may affect your ability to use certain features of the Platform and may result in the termination of your subscription.
Grievance Redressal
You have the right to raise a complaint or grievance regarding the processing of your Personal Data through our designated grievance mechanism.
Nomination
Under the DPDPA, you may nominate another individual to exercise your data rights on your behalf in the event of your death or incapacity.
Opt-Out of Sale or Sharing
We do not sell or share your Personal Data for third-party marketing purposes. This right is therefore inherently protected by our practices.
To exercise any of the above rights, please contact us at the details set out in the Contact section below. We will review and respond to your request within a reasonable timeframe and in accordance with applicable law.
9. Subscription and Billing Information
For subscription-based Services, we collect payment information and transaction records to facilitate billing and account management. We do not store complete financial data such as full credit or debit card numbers on our own servers. All payment transactions are processed securely through our third-party payment partners, who operate in compliance with applicable financial regulations and security standards.
10. Children's Privacy
Our Services are intended solely for use by licensed legal professionals and individuals engaged in the legal industry. The Platform is not directed at, nor is it intended for use by, persons under the age of eighteen (18) years. We do not knowingly collect Personal Data from minors. If you believe that a minor has provided Personal Data to us without appropriate parental or guardian consent, please contact us immediately at the details below, and we will take prompt steps to delete such information from our systems.
11. Limitations of Platform Features
Certain features of the Advoc Platform incorporate automated and intelligent processing capabilities to assist with legal practice management. By using these features, you acknowledge and agree to the following:
Outputs generated by automated or intelligent features are for informational and operational assistance purposes only. They do not constitute legal advice, legal opinion, or a substitute for the independent professional judgment of a qualified legal practitioner.
You should not submit highly confidential, sensitive, or privileged information through Platform features where such information would not be appropriate for review by a third-party system or reviewer.
Legis Technologies does not warrant the accuracy, completeness, or fitness of any output generated through such features for any specific legal matter.
Users are strongly encouraged to independently verify any outputs and apply their own professional judgment before relying on them in any legal context.
12. Third-Party Links and Integrations
The Platform may contain links to or integrations with third-party websites, tools, or services that are not owned or controlled by Legis Technologies. We are not responsible for the privacy practices, content, or security of any such third-party sites or services. We encourage you to review the privacy policies of any third-party platforms you access through our Services.
13. Indemnification
To the maximum extent permitted by applicable law, you agree to indemnify, defend, and hold harmless Legis Technologies, its directors, officers, managers, shareholders, employees, affiliates, and agents from and against any claims, liabilities, damages, losses, and expenses — including reasonable legal fees — arising out of or in connection with your use of the Platform, your violation of this Policy, or your violation of any applicable law or third-party rights.
14. Disclaimer of Warranties and Limitation of Liability
Your access to and use of the Platform is at your sole risk. Legis Technologies does not warrant that the Services will be uninterrupted, error-free, or completely secure. We disclaim all liability for the accuracy or reliability of any content available through the Platform.
To the maximum extent permitted by law, Legis Technologies, its directors, officers, employees, shareholders, and affiliates shall not be liable for any direct, indirect, incidental, consequential, or punitive damages of any kind arising out of or in connection with your use of the Platform. If you are dissatisfied with any aspect of the Platform or this Policy, your sole remedy is to discontinue use of the Services.
15. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, applicable law, or the nature of our Services. Any changes will be effective upon posting the revised Policy on this page with an updated effective date. For material changes, we will make reasonable efforts to notify you by email or through a prominent notice within the Platform. We encourage you to review this Policy periodically. Your continued use of the Platform following the posting of changes constitutes your acceptance of the revised Policy.
16. Governing Law and Jurisdiction
This Privacy Policy is governed by and shall be construed in accordance with the laws of India, including the Digital Personal Data Protection Act, 2023 (DPDPA), the Information Technology Act, 2000.
Any disputes arising in connection with this Policy shall be subject to the exclusive jurisdiction of the competent courts of India.
17. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, or if you wish to exercise any of your privacy rights, please contact us at:
Legis Technologies
Product: Advoc
Email: Support@advoc.in
Website: www.advoc.in