Privacy Policy

1 Overview

Defend.ink ("we", "our", "us") operates the website defend.ink and the associated SaaS platform for legal professionals in India. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our platform.

By accessing or using Defend.ink, you agree to the collection and use of information in accordance with this policy. If you do not agree, please discontinue use of our services.

2 Information We Collect

We collect the following categories of information:

A. Information you provide directly:

• Name, email address, phone number, and address when you register or submit a consultation request
• Professional credentials (Bar Council enrolment number, court details) for lawyer accounts
• Payment information processed through our payment partners (Razorpay) — we do not store full card or bank account details
• Messages, notes, and documents you upload or send through the platform
• Profile information such as profile picture and bio

B. Information collected automatically:

• IP address, browser type, device type, and operating system
• Pages visited, time spent, referrer URLs, and click paths
• Session data and authentication tokens stored in cookies
• Error logs and performance metrics for service improvement

C. Information from third parties:

• If you sign in using Google or LinkedIn OAuth, we receive your name, email, and profile picture as authorised by you
• Payment status and transaction IDs from Razorpay
• Instagram Direct Message metadata when you connect an Instagram business account

3 How We Use Your Information

We use the information we collect for the following purposes:

• Service delivery: Creating and managing your account, processing consultation bookings, and facilitating communication between lawyers and clients
• Payments: Processing subscription fees, consultation fees, and issuing invoices
• Communication: Sending account-related emails, consultation reminders, and service updates
• AI-assisted features: Powering the legal assistant bot and draft generation features using anonymised conversation context sent to our AI providers
• Analytics & improvement: Understanding how our platform is used so we can improve features and performance
• Security: Detecting and preventing fraud, abuse, and unauthorised access
• Legal compliance: Meeting our obligations under applicable Indian laws and regulations

We do not sell your personal data to third parties for marketing purposes.

4 Sharing of Information

We share your information only in the following circumstances:

• With lawyers on our platform: Client-provided information (name, phone, legal matter) is shared with the lawyer you book a consultation with
• Service providers: We share data with trusted third-party vendors who help us operate the platform — including Razorpay (payments), OpenAI (AI features), AWS/hosting providers, and email delivery services — under strict data processing agreements
• Legal requirements: We may disclose information to courts, law enforcement, or government authorities when required by law or a valid court order
• Business transfers: If Defend.ink merges with or is acquired by another entity, your data may be transferred as part of that transaction, with notice to you
• With your consent: In any other circumstance, only with your explicit prior consent

5 Cookies & Tracking

We use cookies and similar tracking technologies to maintain your session and improve your experience. The types of cookies we use:

• Essential cookies: Required for login sessions and security. Cannot be disabled without breaking core functionality.
• Preference cookies: Remember your settings (e.g., language, dashboard layout).
• Analytics cookies: Help us understand usage patterns using privacy-respecting analytics tools.

You can control cookie behaviour through your browser settings. Disabling essential cookies will affect your ability to log in and use the platform.

6 Data Retention

We retain your personal data for as long as your account is active or as needed to provide our services. Specifically:

• Account data is retained for the duration of your active account plus 2 years after account closure
• Consultation records and associated messages are retained for 5 years to comply with legal and professional obligations
• Payment transaction records are retained for 8 years as required by Indian tax and financial regulations
• Server and access logs are retained for 90 days

You may request deletion of your personal data (subject to legal retention requirements) by contacting us at support@defend.ink.

7 Your Rights

Under the Digital Personal Data Protection Act, 2023 and applicable rules, you have the following rights as a data principal:

• Right to access: Request a copy of the personal data we hold about you
• Right to correction: Request correction of inaccurate or incomplete personal data
• Right to erasure: Request deletion of your personal data (subject to legal retention obligations)
• Right to nominate: Nominate an individual to exercise your data rights in the event of your death or incapacity
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time — this does not affect the lawfulness of prior processing
• Right to grievance redressal: Raise a complaint with us, and subsequently with the Data Protection Board of India if unresolved

To exercise any of these rights, please write to us at privacy@defend.ink. We will respond within 30 days.

8 Security

We implement industry-standard technical and organisational measures to protect your data, including:

• HTTPS/TLS encryption for all data in transit
• AES-256 encryption for sensitive data at rest
• Role-based access controls limiting who can view personal data
• Regular security audits and vulnerability assessments
• Secure password hashing using bcrypt

While we take reasonable precautions, no method of transmission over the internet is 100% secure. If you suspect a security breach affecting your account, please contact us immediately at security@defend.ink.

9 Third-Party Links

Our platform may contain links to external websites or services not operated by us. We have no control over, and accept no responsibility for, the content or privacy practices of those sites. We encourage you to review the privacy policy of every website you visit.

10 Children's Privacy

Defend.ink is intended for use by adults (18 years and above). We do not knowingly collect personal data from persons under 18. If you believe a minor has provided us with personal data, please contact us at privacy@defend.ink and we will promptly delete it.

11 Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make material changes, we will notify you by:

• Posting the updated policy on this page with a new "Last updated" date
• Sending an email notification to registered users for significant changes

We encourage you to review this policy periodically. Continued use of our platform after changes are posted constitutes your acceptance of the updated policy.

12 Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact our Grievance Officer: