Privacy policy
This policy explains how Nyay Apex handles personal data of advocates, chamber staff, clients invited to the client portal, and visitors to this website. It is written to meet the Digital Personal Data Protection Act, 2023 ("DPDP Act").
What we collect
- Account details: name, email, mobile number, Bar enrolment and AOR details you enter, role in your chamber, preferences.
- Your work: matters, documents you upload, notes, tasks, messages, drafts and the results of analysis.
- Records of use: sign-ins, document access, AI requests and answers (the AI register), and errors — for security, audit and billing.
- Contact form: what you write to us and the details you give.
We do not use advertising or third-party tracking. The only cookie is the one that keeps you signed in.
Why we use it
- To provide the service you asked for: research, analysis, drafting, matter management and alerts.
- To keep it secure and auditable, including the records that the Supreme Court's draft AI regulations expect.
- To reply to you and to send the alerts you have switched on (in the app, and on WhatsApp or email if you choose).
We ask for your consent when you create an account and you can withdraw it by closing the account.
Who processes it
- Our servers store your account, matters and documents. Uploaded files are encrypted at rest.
- AI provider (Anthropic): when you use an AI feature, the passages needed for that request are sent, with phone numbers, email addresses, Aadhaar and PAN numbers replaced by placeholders. This processing takes place outside India.
- Messaging: one-time codes and alerts on WhatsApp go through our WhatsApp business messaging provider; email alerts through our mail service.
We do not sell personal data. A chamber's matters and documents are visible only to that chamber, and to a client only what the chamber shares.
How long we keep it
For as long as your account is active, and afterwards only as long as needed for legal, audit or security reasons. Backups are kept for up to 30 days.
Your rights
Under the DPDP Act you may ask to access, correct, complete or erase your personal data, withdraw consent, and nominate someone to exercise these rights. Write to us through the contact page (choose "Privacy or data request"). Data in a chamber's matters may belong to the chamber; we will act on such requests with it. You may also complain to the Data Protection Board of India.
Changes
We will post any change here with a new date, and tell account holders in the app of material changes.