Privacy

Draft — not yet reviewed by counsel

This page says what Law4All does with personal data today. It describes the service as built, not as planned.

Who we are

Law4All is not yet incorporated. The service is operated by its founder, an individual, pending incorporation of Law4All. The operator's details will be updated on incorporation.

The grievance officer is Srikanth, koansysinc@gmail.com. See Contact.

What we collect from people who use Law4All

• Account data: your email address, your name and a password (stored in a form that cannot be read back), the firm you belong to and your role in it.
• The time you accepted the terms, and which draft of the terms you accepted.
• Firm-private data your firm puts in: saved watches and alerts, case status pages you paste, documents you upload, drafts, client invitations and updates, time entries and invoices.
• An activity log of actions on firm data. It records who did what, to which object and when. It does not hold document text, party names or sign-in details.
• For a device you choose to receive push notifications on: the address your browser's push service gives us.

Firm-private data is kept apart by firm in the database itself. One firm cannot read another firm's data, and it is never added to the public record.

The public court record we republish

Law4All shows court cause lists, judgments and open datasets. They come from the courts' own open lists and from open datasets, each credited where it appears.

This record names people: parties, advocates and judges, as the court published them. We did not collect it from those people. We show it because the court published it.

Asking for something to be removed

• A record that is blocked is hidden from every page and search straight away. That blocking exists in the database.
• There is no automated removal-request form yet.
• So a request goes by email to the grievance officer, koansysinc@gmail.com, and is handled by hand. Say which court, which case number, what to remove and why.
• The one-way key that stops a blocked record from being loaded again is not built yet. We say so plainly: a removed record could be loaded again until it is.

Where data is stored and processed

• Application: Mumbai, India
• Database (firm data and the court record): Singapore
• Private files (evidence copies, firm uploads): European Union

This list is the same one shown on the trust page. If the places change, both pages change.

These services also receive personal data while doing work for Law4All:

• Law4All's drafting service, India: Party names and addresses, and deed images, when a firm drafts with it; it stores no content.
• Our email delivery service: Account holders' email addresses and the account emails sent to them.
• Your browser's push service (Google, Mozilla, Apple or Microsoft): Notifications that name a case number, court, date, hall and item, never a party.

If your firm uses the optional “More from Indian Kanoon” search, the words you search for are sent to Indian Kanoon. Its result text is kept for 1 day. We keep a fingerprint of the query for usage counts, not the words. Nothing from Indian Kanoon becomes part of the public record we hold.

When your firm drafts a document from a matter, party names and addresses go to our drafting service. It does not keep the content. The finished document is saved in your firm's private space.

Email and push

• Email is sent to confirm an address, to reset a password and to invite a person to a firm or as a client.
• A push notification names a case number, a court, a date, a hall and an item. It never names a party.
• A webhook your firm sets up names no party either.

Cookies and browser storage

• One cookie keeps you signed in. It is used for nothing else.
• Your browser also keeps a few interface settings and, during an invitation, the invitation link in this tab's session storage.
• The public pages set no cookies and run no script.

How long we keep things

• An account that never confirmed its email address is deleted after 7 days.
• The activity log is deleted after 365 days.
• Webhook delivery records that are finished are deleted after 30 days.
• A sign-in session lasts 14 days. A confirm-your-address link lasts 2 days. A password-reset link lasts 30 minutes.
• A firm invitation lasts 7 days. A client invitation lasts 14 days.
• A personal key for connecting your own software lasts 180 days.
• Firm-private documents and drafts stay until the firm deletes them. Deleting a document deletes its file.
• We have not set a period for other data. We do not say one here until we have.

Your rights

The Digital Personal Data Protection Act, 2023 gives a person rights over their personal data. In general terms they are: to get a summary of the data held, to have it corrected, to have it erased, to have a complaint answered, and to name another person to act for them.

To use any of them, write to Srikanth at koansysinc@gmail.com. There is no self-service account deletion yet, so these requests are handled by hand.

Law4All does not claim any certification or compliance audit. None is held.

Who may use Law4All

Accounts are for adults and professionals. Law4All does not check anyone's age.

Changes

This page is a draft. It will change when counsel has reviewed it and when the service changes.