1. Lawyer–client privilege protection
Vakilat.io recognises the sanctity of attorney–client privilege in India (Section 126 of the Indian Evidence Act / Section 132 of the Bharatiya Sakshya Adhiniyam). We do not use your private documents, client data, or chat queries to train our foundation AI models. Your proprietary data remains isolated within your firm's tenant workspace.
2. Data collection and usage
When you register, we collect your name, email, bar council state, and practice details. This information is used strictly to provision your workspace, authenticate you, and tailor the AI's jurisdictional context.
3. Data storage & residency
All user data, case files, and generated drafts are stored securely on servers physically located within the Republic of India to align with data-sovereignty expectations under the DPDPA. We use AES-256 encryption at rest and TLS 1.3 in transit.
4. Third-party subprocessors
Where we route prompts to external LLM providers, we enforce Zero Data Retention (ZDR) clauses so that prompt data is deleted immediately after the response is returned. A current list of subprocessors is available on request at contact@vakilat.io.
5. Compliance with DPDPA, 2023
Vakilat is designed to comply with the Digital Personal Data Protection Act, 2023. You have the right to access, correct, or erase your personal data at any time via the platform settings or by writing to our Data Protection Officer. See Data Subject Rights.
6. Cookies & analytics
We use privacy-respecting analytics to understand aggregate site usage. No advertising trackers are loaded on this site. Authentication cookies are strictly necessary.
7. Contact
For any privacy questions or to exercise your rights, reach our DPO at contact@vakilat.io.