Privacy Policy & Terms of Service

1. Introduction and Acceptance of Terms

This document constitutes the Privacy Policy and Terms of Service (hereinafter, the "Policy" or the "Terms") governing the use of the web-based legal document processing application known as "Legal Case App" (hereinafter, the "Service"), operated by ScaleEdTech (hereinafter, the "Company", "we", "us" or "our"). The Service is accessed through the website and associated web application operated by the Company.

By accessing, browsing, registering for, or otherwise using the Service, the User (as defined in Clause 2) acknowledges that the User has read, understood and agreed to be bound by this Policy in its entirety. If the User does not agree to any part of this Policy, the User must immediately cease all use of the Service and refrain from uploading any documents.

This Policy is a legally binding agreement between the User and the Company. The User's continued use of the Service following the posting of any amendment to this Policy shall constitute the User's acceptance of such amendment, subject always to the provisions of Clause 22.

2. Definitions

In this Policy, unless the context otherwise requires:

"User" means any natural or legal person who registers an account with the Service, or who accesses or uses the Service in any manner, including but not limited to advocates, legal professionals, litigants, clerks, office staff and administrators of courts, tribunals and legal establishments.

"Uploaded Documents" means any document, image, photograph, scan, PDF file, text, data or other content that a User uploads to, submits to, or causes to be processed by the Service, including but not limited to court order sheets, roznamacha (रोजनामचा), plaints, written statements, petitions, document lists, receipts, agreements and other legal or quasi-legal records, together with any metadata associated therewith.

"Personal Data" means any data about an individual who is identifiable by or in relation to such data, as defined under the Digital Personal Data Protection Act, 2023 of India, including names, contact details, and any other information that can be used, directly or indirectly, to identify a natural person.

"Processing" means an operation or set of operations performed on Uploaded Documents or Personal Data, wholly or partly by automated means, including but not limited to collection, recording, organisation, structuring, storage, adaptation, alteration, retrieval, consultation, use, disclosure by transmission, dissemination, alignment or combination, restriction, erasure or destruction.

"Service" means the Legal Case App web application, its interfaces, features, application programming interfaces, and all associated software, databases, infrastructure and documentation.

"Platform" means the underlying technology infrastructure, including servers, cloud computing resources, software stacks and third-party services, upon which the Service is hosted and operated.

"Data Controller" means the entity which, alone or jointly with others, determines the purposes and means of the Processing of Personal Data and Uploaded Documents, namely ScaleEdTech.

"Processors" means third-party service providers, including cloud infrastructure providers, optical character recognition (OCR) service providers, artificial intelligence / large language model (LLM) API providers, and other technology vendors, engaged by the Company to process data on its behalf in connection with the operation of the Service.

"Grievance Officer" means the person appointed by the Company in accordance with the provisions of the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023, whose contact details are set out in Clause 23.

Words importing the singular shall include the plural and vice versa, and words importing any gender shall include all genders. Clause headings are inserted for convenience only and shall not affect the interpretation of this Policy.

3. Data Controller and Contact

The Service is owned and operated by ScaleEdTech ("ScaleEdTech"), which is the Data Controller in respect of all Personal Data and Uploaded Documents processed through the Service.

Any communication, request, grievance, or notice under this Policy, including any request for opt-out under Clause 9, may be addressed to the Company at the following email address: MNBHAKER@gmail.com.

The User acknowledges that electronic communication to and from the email address MNBHAKER@gmail.com constitutes a valid mode of communication for the purposes of this Policy, and that notices sent by the User to this address shall be deemed to be received by the Company upon transmission, subject to Clause 9 which prescribes specific timelines for opt-out requests.

4. Information We Collect

The Company collects and processes the following categories of information in connection with the operation of the Service:

(a) Account Information: the User's username, password (stored in encrypted form using industry-standard hashing algorithms), role, language preference, coin balance and transaction history, and account creation and modification timestamps.

(b) Uploaded Documents and their Contents: all documents, images, scans, PDFs, and other files uploaded by the User, together with the text extracted therefrom through optical character recognition (OCR) technology, the formatted and highlighted output generated by the Service's artificial intelligence systems, and all metadata associated with such documents, including but not limited to case numbers, dates, party names, section numbers, and amounts contained therein.

(c) Usage Information: information about how the User interacts with the Service, including pages visited, features used, documents processed, export formats selected, and similar usage patterns.

(d) Device and Log Information: IP addresses, browser type and version, operating system, device identifiers, access times, error logs, and standard server log data automatically collected when the User accesses the Service.

The Company does not collect sensitive personal data such as biometric data, health data, or financial account credentials, except to the extent such data is embedded within Uploaded Documents that the User voluntarily submits for processing.

5. Purposes of Processing

The Company processes Uploaded Documents and Personal Data for the following purposes:

(a) Providing the Service: performing optical character recognition on Uploaded Documents, formatting and structuring extracted text, generating highlights on legally significant fields (such as party names, case numbers, dates, sections and amounts), enabling in-app editing, voice editing, export to PDF in various legal formats, and all other functions and features of the Service.

(b) Quality Improvement: analysing processing outcomes, error patterns, and User feedback to improve the accuracy, speed and reliability of the Service's OCR, formatting and editing capabilities.

(c) Research and Development: conducting research and development activities aimed at improving legal document processing technology, including the development of new features and formats.

(d) Model Training and Customization: using Uploaded Documents and their processed outputs to train, fine-tune, evaluate and customize the artificial intelligence models, machine learning systems, OCR engines and language models that power the Service, so that the Service may better understand the structure, terminology and conventions of Indian legal documents, including Hindi and other regional language documents. This purpose is fundamental to the operation and continuous improvement of the Service.

(e) Security and Compliance: detecting, preventing and addressing technical issues, fraudulent activity, security incidents, and violations of this Policy, and complying with applicable legal and regulatory obligations.

(f) Communication: responding to User inquiries, providing support, and, where the User has consented, sending service-related communications.

The Company shall not process Uploaded Documents or Personal Data for any purpose incompatible with the purposes set out above without obtaining fresh consent from the User, unless such processing is permitted or required by applicable law.

6. Legal Basis for Processing

The Company processes Personal Data and Uploaded Documents in accordance with the following legal bases:

(a) The Digital Personal Data Protection Act, 2023 ("DPDP Act 2023"), enacted by the Parliament of India, which governs the processing of digital personal data in India and recognises consent as a primary lawful basis for processing, together with the rules and regulations framed thereunder.

(b) The Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, which prescribe reasonable security practices and procedures for handling personal data and sensitive personal data in India.

(c) Consent: by registering for and using the Service, and by uploading documents to the Service, the User provides free, specific, informed, unconditional and unambiguous consent, with a clear affirmative action, to the processing of the User's Uploaded Documents and Personal Data for the purposes set out in Clause 5, including the retention of Uploaded Documents and their use for model training and customization as described in Clause 7. Such consent may be revoked by the User at any time in accordance with Clause 9.

(d) Contract: the processing necessary for the performance of the contract between the User and the Company, namely the provision of the Service in accordance with these Terms.

(e) Legal Obligation and Legitimate Interests: processing necessary for compliance with legal obligations to which the Company is subject, and processing based on the Company's legitimate interests in operating, securing and improving the Service, provided such interests are not overridden by the fundamental rights and freedoms of the User.

7. Document Retention and Use for Training

The User's Uploaded Documents, together with the OCR output, formatted and highlighted results, and associated metadata, are retained on the Company's secure servers and storage systems for the following purposes: (i) processing, (ii) quality improvement, and (iii) the future development, training and customization of the Service's artificial intelligence models, OCR engines and related technologies, as described in Clause 5(d).

Uploaded Documents shall be retained for so long as the User's account remains active and for a reasonable period thereafter, as may be necessary to fulfil the purposes set out in this Policy, to comply with legal and regulatory obligations (including obligations under the statutes of limitation applicable to legal records), to resolve disputes, to enforce this Policy, and to maintain and improve the Service.

The Company may, in its discretion, use de-identified, aggregated or anonymised derivatives of Uploaded Documents for research, analytics and model development purposes, provided that such derivatives do not identify any individual User.

The User expressly acknowledges and agrees that the processing, retention and use of Uploaded Documents for model training and customization is an integral feature of the Service, that such use has been disclosed in this Policy, and that the User's continued use of the Service constitutes consent to such use. A User who does not consent to such use may exercise the opt-out right provided in Clause 9.

Nothing in this Clause shall obligate the Company to retain any Uploaded Document indefinitely, and the Company reserves the right to delete or anonymise Uploaded Documents in accordance with its data lifecycle management practices, subject always to the User's rights under Clause 9 and applicable law.

8. Consent

By creating an account on the Service and by uploading documents to the Service, the User consents to the collection, processing, storage, retention and use of the User's Personal Data and Uploaded Documents in accordance with this Policy, including the purposes set out in Clause 5 and the retention and training provisions of Clause 7.

The User's consent is freely given, specific, informed, unconditional and unambiguous, and is signified by a clear affirmative action, namely the User's registration with the Service and the User's use of the Service.

The User's consent is revocable at any time, in accordance with the opt-out procedure set out in Clause 9. Revocation of consent shall not affect the lawfulness of processing based on consent before its revocation, and shall not affect processing based on other lawful bases.

The Company shall not make the provision of the core features of the Service conditional on consent to processing that is not necessary for the provision of those features, provided that the Company may make the Service available only to Users who consent to the processing necessary for the operation of the Service as described in this Policy, including document retention for training and quality improvement, as such processing is intrinsic to the Service's architecture.

9. Opt-Out of Document Retention and Training

A User who does not wish their Uploaded Documents to be retained, or to be used for quality improvement, research or model training and customization, may opt out of such retention and use in the manner set out in this Clause.

To exercise the opt-out, the User shall send an email to MNBHAKER@gmail.com with the subject line "OPT-OUT", stating the User's registered username and the email address associated with the User's account, and clearly requesting that (i) no further Uploaded Documents of the User be retained, and (ii) the User's previously stored Uploaded Documents be deleted.

Upon receipt of the opt-out email, the Company shall verify the User's identity and request, and upon confirmation by the administrator of the Service (the "admin"), the opt-out shall take effect within 24 to 48 hours of the receipt of the opt-out email by the Company.

With effect from the date on which the opt-out takes effect: (a) no further Uploaded Documents of the User will be retained by the Service beyond what is necessary to complete any processing already in progress; and (b) the User's already-stored Uploaded Documents, together with derived processing outputs, shall be deleted from the Company's systems, subject to any legal obligation requiring retention.

The Company shall, upon the User's request, provide a written confirmation of the completion of the deletion described in Clause 9.4.

The User acknowledges that opting out of document retention may limit the Company's ability to provide certain features of the Service that depend on the availability of historical document data, and that the Service may, in the Company's reasonable discretion, restrict such features for opt-out Users.

The opt-out right under this Clause is without prejudice to the User's other rights under this Policy and under applicable law, including the rights set out in Clause 10.

10. Data Subject Rights

In accordance with the DPDP Act 2023, the Information Technology Act, 2000 and this Policy, the User has the following rights in respect of their Personal Data and Uploaded Documents:

(a) Right of Access: the right to obtain confirmation as to whether the Company processes the User's Personal Data or Uploaded Documents, and to obtain a copy of such data.

(b) Right to Correction: the right to request correction of inaccurate or incomplete Personal Data.

(c) Right to Erasure: the right to request deletion of the User's Personal Data and Uploaded Documents, subject to applicable legal retention obligations, including by exercising the opt-out right under Clause 9.

(d) Right of Grievance Redressal: the right to register a grievance with the Grievance Officer in accordance with Clause 23, and to seek adjudication of such grievance before the Data Protection Board of India or other competent authority, as applicable.

(e) Right to Withdraw Consent: the right to withdraw consent at any time, as provided in Clauses 8 and 9.

Requests under this Clause shall be made by email to MNBHAKER@gmail.com. The Company shall respond to verifiable requests within a reasonable period, not exceeding thirty (30) days from the date of receipt of a complete request, except where a shorter period is prescribed by applicable law.

The Company may request such information as is reasonably necessary to verify the identity of the person making a request under this Clause before processing the request.

11. Data Security

The Company has implemented reasonable security practices and procedures, as contemplated under the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, including: (a) encryption of data in transit using industry-standard transport layer security (TLS) protocols; (b) encryption of data at rest; (c) role-based access controls restricting access to Personal Data and Uploaded Documents to authorised personnel on a need-to-know basis; (d) secure storage of credentials using industry-standard hashing; (e) regular monitoring, logging and auditing of system access; and (f) periodic review and testing of security controls.

Notwithstanding the foregoing, the User acknowledges that no method of transmission over the internet, or method of electronic storage, is completely secure. While the Company strives to protect Personal Data and Uploaded Documents, the Company cannot guarantee their absolute security, and the Company shall not be liable for any breach arising from causes beyond its reasonable control, including but not limited to acts of God, cyber-attacks by third parties, or the User's failure to safeguard their own credentials.

In the event of a data breach affecting Personal Data, the Company shall notify the relevant authorities and affected Users in accordance with the requirements of the DPDP Act 2023 and other applicable law.

12. Sharing and Third-Party Processors

The Company does not sell, rent, trade or otherwise commercially exploit the Personal Data or Uploaded Documents of Users. The Company shares such data only as described in this Clause.

The Company engages Processors to assist in the operation of the Service, including: (a) cloud infrastructure and hosting providers; (b) optical character recognition (OCR) service providers, including the Datalab OCR pipeline used to extract text from uploaded documents; (c) artificial intelligence / large language model API providers used for document formatting, highlighting and voice editing; (d) speech-to-text providers used for voice editing features; and (e) analytics and monitoring service providers.

Processors are engaged under contracts that oblige them to process data only on the Company's documented instructions, to maintain appropriate security measures, and to comply with applicable data protection laws. Where a Processor is located outside India, the Company takes steps to ensure that such transfers comply with the requirements of the DPDP Act 2023, including by ensuring appropriate safeguards and contractual protections, as described in Clause 13.

The Company may disclose Personal Data or Uploaded Documents where required to do so by law, regulation, court order, or governmental or regulatory request, or where such disclosure is necessary to protect the rights, property or safety of the Company, its Users or the public.

In the event of a merger, acquisition, reorganisation, or sale of all or substantially all of the Company's assets, the User's data may be transferred to the successor entity, which shall remain bound by this Policy or a substantially similar policy.

13. International Transfer of Data

The Company's infrastructure and the infrastructure of certain Processors may be located in jurisdictions outside India. Accordingly, Personal Data and Uploaded Documents may be transferred to, stored in, or processed in jurisdictions other than India.

Any such transfer shall be made in compliance with the provisions of the DPDP Act 2023 and any rules or regulations framed thereunder, including, where applicable, the requirement that transfers be made subject to appropriate safeguards, and the User hereby consents to such transfers as a necessary incident of the provision of the Service.

The Company shall take reasonable steps to ensure that any recipient of data outside India provides a level of protection that is at least equivalent to the protections provided under this Policy.

14. Cookies and Analytics

The Service may use cookies, local storage and similar technologies to maintain session state, remember User preferences (such as language selection), and improve the User experience.

The Service may also use analytics tools to collect aggregated, non-identifying usage statistics, such as page views, feature usage and error rates, for the purposes of improving the Service.

The User may configure their browser to refuse cookies, but this may impair the functionality of the Service, including the ability to log in.

15. Children's Privacy

The Service is intended for use by legal professionals, litigants and adults engaged in legal matters, and is not directed at children. The Company does not knowingly collect Personal Data from individuals below the age of eighteen (18) years.

If the Company becomes aware that it has collected Personal Data from a child below the age of eighteen (18) years without appropriate parental consent, the Company shall take steps to delete such data promptly. Guardians or parents who believe that a child has provided Personal Data to the Service may contact the Company at MNBHAKER@gmail.com to request deletion.

16. User Obligations and Lawful Use

The User agrees to use the Service only for lawful purposes and in accordance with this Policy. The User shall not: (a) upload any document that the User does not have the lawful right to process or transmit; (b) upload any document containing content that is illegal, defamatory, obscene, or that infringes the intellectual property rights or other rights of any third party; (c) use the Service to violate any applicable law, including laws relating to court records, professional privilege and confidentiality; (d) attempt to gain unauthorised access to the Service, its systems, or the accounts of other Users; (e) interfere with, disrupt, or impose an unreasonable load on the Service or its infrastructure; or (f) reverse engineer, decompile, or attempt to extract the source code of the Service.

The User is solely responsible for the accuracy, completeness and legality of the documents the User uploads and of any edits the User makes to processed documents. The User acknowledges that the Service provides automated processing assistance and that the User must review all outputs for accuracy before relying upon them in any legal proceeding or other matter.

The User is responsible for maintaining the confidentiality of the User's account credentials and for all activities that occur under the User's account. The User shall notify the Company immediately of any unauthorised use of the User's account.

17. Intellectual Property

All rights, title and interest in and to the Service, including its software, design, interfaces, text, graphics, algorithms, artificial intelligence models and documentation, are and shall remain the exclusive property of the Company and its licensors. The User is granted a limited, non-exclusive, non-transferable, revocable licence to use the Service in accordance with this Policy, which licence shall not extend to any commercial exploitation of the Service except as expressly permitted.

The User retains all rights, title and interest in and to the User's Uploaded Documents. Nothing in this Policy transfers ownership of Uploaded Documents to the Company.

By uploading documents to the Service, the User grants the Company a worldwide, non-exclusive, royalty-free, sub-licensable licence to use, reproduce, process, store, adapt and modify the Uploaded Documents and the data derived therefrom, solely for the purposes set out in Clause 5, including the purposes of quality improvement, research and development, and model training and customization as described in Clause 7. This licence shall continue for so long as the User's data is retained in accordance with Clause 7, and may be terminated by the User by exercising the opt-out right under Clause 9.

18. Disclaimer of Warranties

THE SERVICE IS PROVIDED ON AN "AS IS" AND "AS AVAILABLE" BASIS, WITHOUT WARRANTIES OF ANY KIND, WHETHER EXPRESS, IMPLIED OR STATUTORY, INCLUDING BUT NOT LIMITED TO WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, ACCURACY, COMPLETENESS, OR THAT THE SERVICE WILL BE UNINTERRUPTED, ERROR-FREE OR SECURE.

THE COMPANY DOES NOT WARRANT THAT THE OUTPUT OF THE SERVICE, INCLUDING OCR RESULTS, FORMATTED DOCUMENTS, HIGHLIGHTS, VOICE TRANSCRIPTIONS OR EXPORTED PDFs, WILL BE ACCURATE, COMPLETE OR SUITABLE FOR ANY PARTICULAR LEGAL PURPOSE. THE SERVICE PROVIDES MACHINE-GENERATED ASSISTANCE AND IS NOT A SUBSTITUTE FOR PROFESSIONAL LEGAL ADVICE, REVIEW OR JUDGMENT. THE USER REMAINS SOLELY RESPONSIBLE FOR VERIFYING THE ACCURACY OF ALL OUTPUTS AND FOR ANY USE MADE THEREOF.

TO THE FULLEST EXTENT PERMITTED BY APPLICABLE LAW, THE COMPANY DISCLAIMS ALL WARRANTIES, EXPRESS OR IMPLIED, TO THE EXTENT NOT EXPRESSLY SET OUT IN THIS POLICY.

19. Limitation of Liability

TO THE FULLEST EXTENT PERMITTED BY APPLICABLE LAW, IN NO EVENT SHALL THE COMPANY, ITS DIRECTORS, OFFICERS, EMPLOYEES, AGENTS, PROCESSORS OR AFFILIATES BE LIABLE TO THE USER OR ANY THIRD PARTY FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY OR PUNITIVE DAMAGES, INCLUDING BUT NOT LIMITED TO LOSS OF PROFITS, LOSS OF DATA, LOSS OF GOODWILL, LOSS OF OPPORTUNITY, OR COSTS OF PROCUREMENT OF SUBSTITUTE SERVICES, ARISING OUT OF OR IN CONNECTION WITH THE USE OF, OR INABILITY TO USE, THE SERVICE, WHETHER IN CONTRACT, TORT (INCLUDING NEGLIGENCE), STATUTE OR OTHERWISE, EVEN IF THE COMPANY HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

TO THE FULLEST EXTENT PERMITTED BY APPLICABLE LAW, THE COMPANY'S TOTAL AGGREGATE LIABILITY TO THE USER ARISING OUT OF OR IN CONNECTION WITH THIS POLICY OR THE USE OF THE SERVICE SHALL NOT EXCEED THE GREATER OF (a) THE TOTAL AMOUNT PAID BY THE USER TO THE COMPANY FOR THE USE OF THE SERVICE IN THE TWELVE (12) MONTHS PRECEDING THE DATE ON WHICH THE CLAIM AROSE, OR (b) ONE THOUSAND RUPEES (INR 1,000).

NOTHING IN THIS CLAUSE SHALL EXCLUDE OR LIMIT LIABILITY FOR FRAUD, GROSS NEGLIGENCE, WILFUL MISCONDUCT, OR FOR DEATH OR PERSONAL INJURY CAUSED BY THE COMPANY'S NEGLIGENCE, TO THE EXTENT SUCH EXCLUSION OR LIMITATION IS PROHIBITED BY APPLICABLE LAW.

20. Indemnification

The User agrees to indemnify, defend and hold harmless the Company, its directors, officers, employees, agents, Processors and affiliates from and against any and all claims, demands, losses, liabilities, damages, costs and expenses (including reasonable attorneys' fees) arising out of or in connection with: (a) the User's use of the Service; (b) the User's Uploaded Documents and any content contained therein; (c) the User's violation of this Policy; (d) the User's violation of any applicable law or the rights of any third party; or (e) the User's reliance on any output of the Service.

The User shall cooperate fully in the defence of any such claim, and the Company reserves the right to assume the exclusive defence and control of any matter subject to indemnification by the User, in which case the User shall not settle any such matter without the Company's prior written consent.

21. Governing Law and Jurisdiction

This Policy, and any dispute or claim arising out of or in connection with it or its subject matter or formation (including non-contractual disputes or claims), shall be governed by and construed in accordance with the laws of India, including the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000, and the rules and regulations framed thereunder, as amended from time to time.

The parties hereby submit to the exclusive jurisdiction of the courts at Jaipur, Rajasthan, India, for the resolution of any dispute arising out of or in connection with this Policy; provided that nothing herein shall prevent the Company from seeking injunctive or other equitable relief in any court of competent jurisdiction.

If any provision of this Policy is held to be invalid, illegal or unenforceable by a court of competent jurisdiction, such provision shall be severed and the remaining provisions shall continue in full force and effect.

22. Amendments and Notice of Changes

The Company may amend this Policy from time to time in its sole discretion, to reflect changes in the Service, changes in applicable law, or changes in the Company's practices.

The Company shall notify Users of material changes to this Policy by posting the updated Policy on the Service, and, where the Company has a valid email address on record for the User, by email. The date of the most recent revision shall be indicated at the top of this Policy.

The User's continued use of the Service after the effective date of any amendment shall constitute acceptance of the amended Policy. If the User does not agree to any amendment, the User shall cease using the Service and may exercise the rights set out in Clauses 9 and 10.

23. Grievance Officer and Contact

In accordance with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023, the Company has appointed a Grievance Officer, who may be contacted at the following address:

Grievance Officer, ScaleEdTech — email: MNBHAKER@gmail.com.

Any User who has a grievance concerning the processing of their Personal Data or Uploaded Documents, or any other matter arising under this Policy, may register such grievance with the Grievance Officer by email. The Grievance Officer shall acknowledge receipt of the grievance within a reasonable period and shall endeavour to resolve the grievance within a further reasonable period, not exceeding thirty (30) days, in accordance with applicable law.

If the grievance is not resolved to the User's satisfaction, the User may seek adjudication of the grievance before the Data Protection Board of India or other competent authority, as applicable under the DPDP Act 2023.

24. Effective Date

This Policy is effective as of the date of its publication on the Service and applies to all Users, whether existing or new, from such date.

This Policy supersedes all prior privacy policies, terms of service and other statements, whether written or oral, relating to the subject matter hereof.