Privacy Policy
Effective Date: 1 January 2026 | Last Updated: 30 March 2026
Tandsol Private Limited ("Company", "we", "us") operates simplifylaw.in ("Platform"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Platform, in compliance with the Information Technology Act, 2000, the Digital Personal Data Protection Act, 2023 (DPDPA), and GDPR principles where applicable.
1. Information We Collect
1.1 Information You Provide
- Triage Data: Descriptions of your legal situation, answers to follow-up questions during AI triage sessions
- Contact Information: Email address (when saving triage results or contacting lawyers), name, phone number
- Document Data: Information provided for document generation (names, addresses, facts of the case)
- Uploaded Files: Documents uploaded for AI analysis
- Lawyer Registration: Name, email, phone, Bar Council number, city, practice areas, and professional details
1.2 Information Collected Automatically
- Session Cookies: A random session identifier stored in your browser
- IP Address: Collected and stored as a one-way hash (we do not store your actual IP address)
- Device Information: Browser type, operating system, device type (for analytics only)
- Usage Data: Pages visited, features used, session duration
2. How We Use Your Information
- AI Triage: Your legal situation description and answers are sent to Google Gemini AI for analysis. This data is processed in real-time and not permanently stored by the AI provider.
- Document Generation: Your input data is used to generate legal documents via AI. Generated documents are stored temporarily for download.
- Lawyer Matching: If you contact a lawyer through the Platform, your basic lead information is shared with the selected lawyer.
- Service Improvement: Aggregated, anonymized data may be used to improve AI accuracy and Platform features.
- Communication: Email addresses are used solely for sending saved triage results or account-related notifications.
3. AI Processing & Data Handling
- AI triage sessions are processed through Google Gemini API. Your inputs are sent to Google's servers for processing.
- Google's AI API operates under their data processing terms, which prohibit using API inputs for model training.
- Triage session data is stored in our database for the duration of the session. Session outputs are retained for up to 90 days for result retrieval, after which they are purged.
- Uploaded documents for analysis are stored temporarily (maximum 24 hours) and then permanently deleted from our servers.
- We do not use your personal triage data to train AI models.
4. Data Retention
- Triage Sessions: Session data retained for 90 days, then purged
- Generated Documents: Retained for 30 days for download, then deleted
- Uploaded Files: Deleted within 24 hours of processing
- Lawyer Profiles: Retained while the account is active
- Payment Records: Retained for 7 years as required by Indian tax law
- Aggregated Analytics: Retained indefinitely in anonymized form
5. Data Sharing & Third-Party Services
5.1 Third-Party Service Providers
- Google Gemini AI: Processes triage queries and generates documents. Subject to Google's Cloud Data Processing Terms.
- Razorpay: Processes payments for lawyer subscriptions. Subject to Razorpay's privacy policy. We do not store your payment card details.
- Hosting Provider: Our servers are hosted in India-based data centres.
5.2 We Do Not
- Sell your personal data to third parties
- Share your triage data with advertisers
- Use your data for targeted advertising
- Share your information with other users unless you explicitly initiate contact (e.g., contacting a lawyer)
6. Cookies
- Session Cookie (ls_session): A randomly generated identifier used to maintain your triage session. Expires after 30 days. Essential for Platform functionality.
- We do not use third-party tracking cookies.
- We do not use advertising or remarketing cookies.
- You may disable cookies in your browser settings, but this may impair Platform functionality.
7. Your Rights
Under the DPDPA 2023 and GDPR (for EU users), you have the right to:
- Access: Request a copy of the personal data we hold about you
- Correction: Request correction of inaccurate personal data
- Erasure: Request deletion of your personal data (subject to legal retention requirements)
- Portability: Receive your data in a structured, machine-readable format
- Withdraw Consent: Withdraw consent for data processing at any time
- Grievance: Lodge a complaint with the Data Protection Board of India or your local supervisory authority
To exercise any of these rights, contact us at privacy@simplifylaw.in. We will respond within 30 days.
8. Data Security
- All data in transit is encrypted using TLS 1.2+
- IP addresses are stored as SHA-256 hashes, not in plain text
- Database access is restricted to authorized personnel only
- Lawyer passwords are stored using bcrypt hashing
- API endpoints are protected by rate limiting and input validation
- Regular security reviews are conducted
9. Children's Privacy
The Platform is not intended for use by individuals under 18 years of age. We do not knowingly collect personal data from minors. If we become aware of such collection, we will delete the data promptly.
10. International Users
The Platform is primarily designed for users in India. If you access the Platform from outside India, your data may be transferred to and processed on servers located in India. By using the Platform, you consent to this transfer.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. Continued use of the Platform after changes constitutes acceptance.
12. Data Protection Officer
Tandsol Private Limited
Email: privacy@simplifylaw.in
We will acknowledge your request within 48 hours and resolve it within 30 days.
13. Contact
For privacy-related questions or concerns: privacy@simplifylaw.in