Privacy Policy

Last updated: January 2025

1. Overview

NyayaSetu ("we", "us", "our") is committed to protecting your privacy in accordance with the Digital Personal Data Protection Act, 2023 (DPDP Act) and applicable Indian laws.

2. Data We Collect

  • Phone Number — used solely for OTP-based authentication
  • Search Queries — stored to provide search history functionality (only when signed in)
  • Bookmarks — saved to your account for quick access
  • Usage Analytics — anonymous, aggregate usage patterns to improve the platform

3. How We Use Your Data

  • To authenticate your account via OTP
  • To provide personalized features (bookmarks, history)
  • To improve search quality and platform performance
  • We do NOT sell, share, or monetize your personal data

4. Data Storage & Security

All data is stored securely on Indian servers. Passwords are not stored — authentication uses one-time passwords. JWT tokens are used for session management with short-lived access tokens (15 minutes) and longer refresh tokens (30 days).

5. DPDP Act Compliance

  • Consent — We obtain explicit consent before processing personal data
  • Right to Access — You can view all your personal data from the Settings page
  • Right to Erasure — You can delete your account and all associated data
  • Right to Withdraw Consent — You can revoke data processing consent from Settings
  • Data Minimization — We only collect data necessary for the platform's functionality

6. AI/LLM Processing

When you use AI features (summaries, case briefs, chat), your queries are sent to an LLM provider. These queries contain only legal text and your question — no personal data is included. AI responses are not legal advice.

7. Third-Party Services

We use LLM APIs for AI features. No other third-party services receive your personal data. All search indexing and vector storage is self-hosted.

8. Cookies

We use localStorage for authentication tokens and consent status. No tracking cookies are used.

9. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via a notification on the platform.

10. Contact

For privacy-related queries, write to us at privacy@nyayasetu.in.