Privacy Policy

This policy applies to casetrail.in and the Court Code workspace. Our role differs by data type — we are a Data Fiduciary for account-related personal data (your name, work email, mobile, billing) and a Data Processorfor matter content you upload (your client’s data). For matter content, your organisation is the Data Fiduciary.

Account data — collected when you sign up or are provisioned by your firm:

• Name, work email, mobile number
• Organisation, role, team size band
• Authentication metadata (last sign-in IP, device hint)

Workspace data — created by you using the product:

• Matter records, hearings, notices, counsel data, spend records
• Documents you upload to the vault
• Notebook conversations, citations, and attached sources

Telemetry — for product reliability, not behavioural advertising:

• Anonymised pageview counts via Plausible (no cookies)
• Server logs (request path, status, latency, tenant ID)
• Audit logs (who-read-what within your workspace)

• To provide and operate the Case Trail workspace
• To authenticate you and protect your account (User ID + password + SMS OTP, 60-min inactivity timeout)
• To process billing, invoices, and procurement records
• To detect security incidents and respond to abuse
• To answer support requests you raise (we don’t read matter content unless you explicitly grant access)
• To comply with applicable law and regulator guidance (RBI, IRDAI, DPDP)

The AI Court Notebook is retrieval-augmented. When you ask a question against a matter, we retrieve relevant chunks from that matter’s documents, send them to the inference provider with your question, and return the cited answer.

• Inference providers receive only the chunks for that one matter — never another tenant’s data.
• Provider training-on-our-data is disabled where the provider supports an opt-out.
• Tenants can opt out of provider-side caching of their prompts entirely (we cache the system prompt only).

You can:

• Access — request a copy of the personal data we hold about you
• Correct — fix inaccurate or outdated personal data
• Erase — request deletion (subject to retention required by law or regulator)
• Withdraw consent — for any consent-based processing
• Nominate — designate someone to exercise your rights in case of incapacity
• Grievance — escalate concerns to our Grievance Officer (below)

For matter content, exercise these rights with your organisation (the Data Fiduciary) — we’ll support them operationally.

We retain account data for the life of your account plus 12 months after closure, or longer where required (tax records: 8 years; regulator-mandated logs vary).

Matter content is retained per your organisation’s instructions — typically the longer of seven years (Indian limitation defaults) or the matter’s own retention schedule.

Audit logs: minimum one year for all customers, longer for BFSI customers under RBI / IRDAI retention.

We share personal data only with sub-processors strictly necessary to operate the service:

• Cloud infrastructure (compute, storage, database) — single-region India deployment by default
• AI inference providers (Anthropic for reasoning, Gemini for embeddings) — opt-out from training, per-tenant caching toggle
• Email / SMS delivery — for OTPs and transactional notices only
• Payments / invoicing — for billing only

A current sub-processor list with regions and processing purposes is available under NDA from [email protected]. We do not sell or rent personal data, ever.

Encryption in transit (TLS 1.3) and at rest (AES-256), tenant isolation in storage and the vector index, role-based access control with mandatory 2FA, audit logging, and 72-hour breach notification per DPDP. Full controls are described on the Security page.

Case Trail stores customer data in India by default. Where AI inference must traverse a provider’s regional endpoint outside India, we use providers that support DPDP-compliant transfer mechanisms. BFSI customers can require a strict India-only configuration during procurement.

The marketing site uses no third-party tracking cookies. We use Plausible Analytics, which is cookieless and does not track individuals. The workspace uses one essential cookie to maintain your session and remember your density preference.

Case Trail is a B2B legal workspace. We do not knowingly collect data from anyone under 18.

Privacy questions, rights requests, grievances: [email protected].

Grievance Officer — designated under DPDP §13. Name and direct contact are sent on first written request to [email protected] so we can verify identity before sharing.

LawyerDesk Advocacy Pvt Ltd · Bengaluru, India.

Material changes are notified to admins by email at least 30 days before they take effect. The effective date at the top of this page is the source of truth.