1. Overview
The short version: We collect only what is necessary, we never sell your data, and you are always in full control of everything we hold about you.
This Privacy Policy applies to Vakil Sarthi ("we", "our", "the platform"), a digital practice management application operated for Advocates and Legal Professionals. It governs all data collected via the mobile application, web application, and this website.
By creating an account or using Vakil Sarthi, you acknowledge and agree to the practices described in this Policy.
2. Data We Collect
Account and Identity Data
- Full name and email address provided at registration
- Professional information such as Bar Council number and court selections
- Profile photograph (optional)
- Authentication credentials (stored as secure hashes — never in plain text)
Case and Practice Data
- Case names, matter numbers, hearing dates, and notes you enter manually
- Documents you choose to upload within the application
- Court selections and practice area configurations
Device and Usage Data
- Device type, operating system version, and app version
- Session timestamps and feature interaction data for performance monitoring
- IP address (retained for a maximum of 30 days for fraud detection only)
Payment Data
Payment transactions are processed exclusively through our VSPay portal and its partner gateways (Razorpay, Stripe, PayU, PhonePe). Vakil Sarthi does not store card numbers, CVV codes, or bank account details on its own servers.
3. How We Use Your Data
We use the data we collect for the following purposes only:
- To create and manage your Vakil Sarthi account
- To provide core features including case management, cloud backup, and multi-device sync
- To process subscription payments through VSPay
- To send transactional emails such as hearing reminders and account notifications
- To diagnose technical problems and improve platform stability
- To comply with applicable legal obligations
We do not use your data for behavioural advertising, profiling for third parties, or any purpose not listed above.
4. Storage and Security
All data is stored on servers located in India and is encrypted at rest using AES-256 and in transit using TLS 1.3. Encryption keys are managed by an isolated Hardware Security Module. Our infrastructure undergoes daily automated vulnerability scanning and annual third-party security audits.
Backups are performed daily and stored in geo-redundant locations within India. Backup data is subject to the same encryption standards as primary data.
For a full description of our technical security measures, please refer to our Security page.
5. Data Sharing
We do not sell your data. We do not share your data with advertisers. Period.
We may share limited data with the following categories of third parties solely to operate the platform:
- Payment processors (Razorpay, Stripe, PayU, PhonePe) for transaction handling only
- Cloud infrastructure providers under strict data processing agreements
- Analytics tools limited to anonymised, aggregated technical performance data
We may disclose data to law enforcement or regulatory bodies only when required by a valid court order or applicable Indian law. We will notify you of any such disclosure where legally permitted.
6. Your GDPR Rights
If you are located in the European Union or the United Kingdom, or if you invoke GDPR protections as available under applicable law, you hold the following rights with respect to your personal data:
- Right of Access — obtain a complete copy of your personal data in a portable format
- Right to Rectification — correct any inaccurate personal data held about you
- Right to Erasure — request permanent deletion of your account and all associated data
- Right to Portability — receive your data in a structured, machine-readable format (JSON or PDF)
- Right to Restriction — request that we limit processing of your data in certain circumstances
- Right to Object — object to processing based on legitimate interests
To exercise any of these rights, contact us at privacy@vakilsarthi.techvedx.in. All requests will be acknowledged within 48 hours and resolved within 30 days.
7. Cookie Policy
The Vakil Sarthi website uses a minimal set of cookies for the following purposes:
- Essential Cookies — required for session management and authentication. These cannot be disabled.
- Preference Cookies — store your language selection and display preferences.
- Analytics Cookies — anonymised, aggregate data to understand how pages are used. No personal identifiers are stored.
We do not use advertising cookies, tracking pixels, or third-party retargeting cookies of any kind. You may manage non-essential cookies through your browser settings at any time.
8. Children's Privacy
Vakil Sarthi is a professional tool intended exclusively for practising Advocates and Legal Professionals who are adults. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that data has been collected from a minor without appropriate consent, it will be deleted immediately.
9. Policy Changes
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform features. When we make material changes, we will notify you via in-app notification and email at least 14 days before the changes take effect.
Continued use of Vakil Sarthi after the effective date of any updated policy constitutes acceptance of the revised terms.
10. Contact Us
For any privacy-related queries, requests, or concerns:
- Email: privacy@vakilsarthi.techvedx.in
- Response time: within 48 hours on business days
- Data Protection Officer contact available upon written request
For general enquiries, please use our Contact page.