Privacy Policy

Your account data. When you, an advocate or a member of a chamber, sign up and use PleadEasy, we decide how your account data is used. For this data we are the Data Fiduciary under the DPDP Act.

Your clients’ data. When you record a client conversation or enter details about your clients, their cases and the other parties, you decide what is collected and why. For that data you are the Data Fiduciary, and PleadEasy processes it only on your instructions, to provide the service to you. You are responsible for having a lawful basis, including your client’s consent, for the data you enter. PleadEasy asks you to record your client’s consent on screen before any recording can begin.

• Account details: your name, email address, phone number, Bar Council enrolment number, chamber name and address, GSTIN if you give one, your practice areas and home court, and your language preference.
• Sign-in details: a password (stored only as a secure hash), or, if you sign in with Google, your name, email address and profile picture as shared by Google. We do not receive your Google password.
• Case content you create: client and party details, intake recordings and their transcripts, the facts extracted from them, documents and drafts, attachments you upload, hearing dates, notes, time entries and the invoices you issue to your clients.
• Payments: the plan you buy, the amount, and the payment reference. Payments are processed by Razorpay; we never receive or store your card, UPI or bank details.
• Support requests: the messages, voice notes, screenshots and files you send us.
• Technical data: sign-in times, the device and browser you use, and records of actions taken in your account (for example “document approved”), which we keep for security and to show you your chamber’s activity.

• To provide PleadEasy: transcribing intakes, extracting facts, drafting documents, and storing your cases.
• To run your account: signing you in, verifying your email, managing your plan, trial and invoices.
• To send you service emails: verification codes, password resets, receipts, renewal and trial reminders, account status changes and replies to your support requests.
• To keep the service secure and working, and to fix problems.
• To learn your drafting format, but only within your own chamber. When you edit and approve a draft, PleadEasy can reuse your format for your later drafts of the same kind. Your documents are never used to draft for another chamber.

We do not sell personal data, and we do not use your case content for advertising.

To transcribe recordings and produce drafts, PleadEasy sends the relevant audio or text to a speech-to-text or AI model provider through its paid API. Depending on the language and the feature, this may be Anthropic, OpenAI, Google, Sarvam AI, Deepgram or AssemblyAI. These providers process the data to return a result to us.

We only use these providers on terms under which your content is not used to train their models. We opt out of model training wherever a provider offers the choice (for example, Deepgram’s Model Improvement Program and Sarvam AI’s training setting), and we use paid API tiers that exclude training (for example, Google’s paid Gemini API). Providers keep content only for as long as they need to process the request, or for a limited period for security and abuse monitoring, as their terms allow. We review this whenever we add or change a provider.

AI output can contain mistakes. That is why every draft must be reviewed and approved by the advocate before it can be printed, exported, shared or signed.

We share personal data only with the service providers we need to run PleadEasy, each for its own purpose:

• Supabase: database, file storage and sign-in. Data is stored in Mumbai, India.
• Vercel: hosting of the website and application, running in Mumbai, India.
• AI and speech-to-text providers: as described in section 4.
• Razorpay: payment processing.
• Email delivery (Resend): to send service emails.
• Google Analytics: only on our public pages (the home page, format guides, court listings, comparisons and the sign-in page), to understand how visitors find us. It is switched off everywhere inside the app, so it never sees your cases, clients or documents. Advertising features are disabled.
• Optional integrations you choose to use, such as WhatsApp delivery or e-Courts case status lookup, which receive only what is needed for that feature.

We may also disclose data where Indian law requires it, for example to comply with a court order, and we will tell you where the law allows.

Your data is stored in India (Mumbai). Some AI providers in section 4 may process data outside India to return a result; any such transfer is made only as permitted under the DPDP Act.

• Intake recordings: each chamber chooses. By default, recordings are deleted as soon as the draft is approved. A chamber can instead keep them for 30 days, or keep them.
• Account and case content: for as long as your account is open. If you ask us to delete your account, we delete it and your case content within 30 days, except what we must keep by law. Copies in encrypted backups are overwritten within a further 90 days.
• Payment and invoice records: for as long as Indian tax law requires us to keep them.
• Email verification codes: expire after 10 minutes and are stored only as a secure hash.

• Each chamber’s data is isolated from every other chamber at the database level.
• Data is encrypted in transit and at rest.
• Passwords are stored only as secure hashes, and email verification codes only as hashes.
• Access to production systems is limited to the people who need it to run the service.

If a personal data breach affects you, we will inform you and the Data Protection Board of India as the DPDP Act requires.

We use cookies that are needed to keep you signed in. On our public pages only, Google Analytics sets cookies to count visits; it is never loaded inside the app.

Under the DPDP Act you can:

• ask what personal data we hold about you and how it is used;
• have inaccurate data corrected or completed, and have data erased;
• withdraw consent you have given, which will not affect processing already done;
• nominate someone to exercise these rights if you die or become unable to; and
• have a grievance addressed by our Grievance Officer, and then by the Data Protection Board of India.

Most of your details can be updated directly in Settings. For anything else, write to us at the address in section 12. If you are a client of an advocate who uses PleadEasy, please contact your advocate first, as they control your data; we will help them respond.

PleadEasy is for advocates and their staff and is not meant for anyone under 18. Where an advocate enters details of a minor for a case, the advocate is responsible for obtaining verifiable consent from the minor’s parent or lawful guardian, as the DPDP Act requires.

If you have a question or a complaint about how your personal data is handled, write to our Grievance Officer: Grievance Officer, Iokode Technologies Private Limited, 4th Floor, Kochar Bliss, A8 & A9, Thiru Vi Ka Industrial Estate, Chennai, Tamil Nadu 600032. Email: support@pleadeasy.in (please use the subject line “Grievance”). We will acknowledge your grievance within 48 hours and resolve it within 15 days of receiving it.

For anything else, you can also raise a request from the Support page inside PleadEasy.

If we make a material change, we will tell you by email or in the app before it takes effect. The date at the top shows when this policy was last updated.