Privacy Policy – nyayakosh.com

1. Scope of This Policy

This Privacy Policy applies to:

• Our website and web applications
• OCR, bookmarking, and document storage services
• All uploaded PDFs, images, and generated OCR content

2. Information We Collect

2.1 Account Information

We may collect:

• Name
• Email address
• Account identifiers
• Authentication-related metadata (via Google Sign-In or email login)

2.2 Uploaded Documents (User Content)

When you upload documents, we process and store:

• PDFs and image files
• OCR-extracted text
• Bookmarks, metadata, and indexes

These documents may contain:

• Personal data
• Legal, court, or judgement information
• Sensitive or confidential information (as uploaded by you)

2.3 Technical & Usage Data

We may automatically collect:

• IP address
• Device and browser information
• Log data
• Usage activity (uploads, downloads, processing events)

2.4 Cookies & Analytics

We use essential cookies and may use analytics services to:

• Maintain your session and authentication
• Understand usage patterns and improve the platform
• Ensure security and prevent abuse

You can manage cookie preferences through your browser settings.

3. How We Use Your Information

We use your data to:

• Provide OCR and bookmarking services
• Store and allow future access to documents
• Improve platform performance and reliability
• Maintain security and prevent abuse
• Comply with legal and regulatory obligations
• Process payments (if applicable)

We do not sell user data.

4. Legal Basis for Processing

Depending on jurisdiction, we process data based on:

• User consent
• Contractual necessity (to provide the service)
• Legitimate interest (security, reliability)
• Legal obligations

Under Indian law, processing is aligned with the Digital Personal Data Protection Act, 2023 (DPDP Act).

5. Document Storage & Retention

• Uploaded and processed documents are stored securely
• Documents remain available until:

• You delete them, or
• You delete your account

6. OCR Processing & Automation

• All OCR processing is automated
• We do not manually review documents except:

• For support requests
• When legally required

OCR accuracy depends on document quality, and errors may occur.

7. Sharing of Information

We do not share your documents or personal data with third parties except:

• Trusted infrastructure providers (storage, hosting, authentication)
• Payment processors (for paid services)
• Legal or regulatory authorities when required by law
• With your explicit consent

All service providers are bound by confidentiality and data protection obligations.

8. Third-Party Services

We use the following third-party services:

• Authentication: Google Sign-In, Supabase Auth
• Cloud Infrastructure: For secure storage and processing
• Payment Processing: For handling transactions (if applicable)

These providers have their own privacy policies and data protection measures.

9. Data Security

We implement reasonable technical and organisational safeguards, including:

• Access controls
• Secure storage systems
• Encrypted communication (HTTPS/TLS)
• Limited internal access

However, no digital system is completely secure.

10. Data Breach Notification

In the event of a data breach that may affect your personal data, we will:

• Notify affected users within 72 hours of discovery (where required by law)
• Inform relevant regulatory authorities as required
• Take immediate steps to contain and remediate the breach

11. User Rights (Data Principal Rights under DPDP Act)

As a Data Principal, you have the right to:

• Access your personal data
• Correct inaccurate information
• Delete your documents or account (Right to Erasure)
• Withdraw consent at any time
• Request data export (where technically feasible)
• Nominate another person to exercise rights on your behalf

Requests can be made via our Grievance Officer contact below.

12. Sensitive & Legal Documents Disclaimer

You are responsible for:

• Ensuring you have the legal right to upload documents
• Deciding whether to upload sensitive or confidential material

nyayakosh.com is not responsible for the legal consequences of uploaded content.

13. Cross-Border Data Transfers

Your data may be processed or stored on servers outside India. We ensure reasonable safeguards consistent with applicable data protection laws, including:

• Standard contractual clauses
• Data processing agreements with service providers

14. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect data from minors. If we become aware of such collection, we will delete the data promptly.

15. Data Deletion & Account Closure

• You may delete documents at any time
• Upon account deletion, documents are removed within 30 days
• Certain metadata may be retained for legal or compliance purposes

16. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified via email or platform notification. Continued use of the platform after updates constitutes acceptance of the revised policy.

17. Grievance Officer

In accordance with the DPDP Act, 2023, we have appointed a Grievance Officer:

Name: Grievance Officer, nyayakosh.com

Email: grievance@nyayakosh.com

Response time: Within 30 days of receiving a complaint.

18. Contact Us

For privacy-related questions or requests:

Email: support@nyayakosh.com