Privacy Policy

1. Who we are and scope

Briefly operates a platform for clients, advocates, law firms, and students. This Policy applies to personal data processed through our websites, apps, and related APIs. It does not govern how an advocate or firm independently processes data outside the Platform under their own professional obligations.

2. Data we collect

• Account data: name, email, phone, city, preferred language, role (client / advocate / firm / student), password hashes, and verification details (e.g. Bar Council ID for advocates).
• Matter data: case titles, descriptions, court identifiers (including CNR), timelines, tasks, participants, and related metadata you or your counsel enter.
• Communications: messages and attachments exchanged in general or matter chats.
• Documents: files you upload, document requests, scan/OCR status, and e-signature requests / attestations.
• Transactional data: invoices, payment status, fee amounts, consultation bookings, and payout / vendor identifiers for advocates (processed with payment partners).
• Usage and technical data: device/browser information, IP address, session logs, security events, and approximate location derived from network data where needed for fraud prevention.
• Support data: content of support requests and related correspondence.

3. Purposes of processing

We process personal data to:

• create and secure accounts, authenticate Users, and administer sessions;
• operate matter workspaces, messaging, documents, calendars, and consultations;
• enable marketplace discovery and matching between clients and verified advocates;
• process payments, invoices, refunds, and advocate payout onboarding;
• send service / account notifications you consent to (email and/or SMS);
• verify advocate credentials and prevent fraud, abuse, and unauthorised access;
• comply with law, respond to lawful requests, and establish / defend legal claims;
• improve reliability, performance, and product features using aggregated or de-identified insights where feasible.

4. Legal bases / consent

Depending on the activity, we rely on: (a) performance of a contract with you (providing the Platform); (b) consent (for example, optional email/SMS marketing or non-essential notifications where required); (c) legitimate uses permitted under applicable law for security and service improvement; and (d) compliance with legal obligations.

Where consent is required, you may withdraw it through Settings or by contacting us, without affecting processing already completed lawfully.

5. Sharing and disclosure

We do not sell personal data. We may share data with:

• Matter participants you authorise (assigned advocates, firm members with access, invited collaborators);
• Service providers such as cloud hosting, email/SMS gateways, analytics (if enabled), and payment processors, under contractual confidentiality and purpose limits;
• Professional / regulatory bodies or courts when required by law or necessary to protect rights, safety, or Platform integrity;
• Corporate successors in a merger, acquisition, or restructuring, subject to continued confidentiality protections.

6. Cross-border transfers

Primary hosting is intended for India. If any processing occurs outside India through a sub-processor, we will take steps consistent with applicable Indian data protection requirements and disclose material transfers in updates to this Policy or in product notices.

7. Retention

We retain account and matter data for as long as your account is active and thereafter for periods reasonably necessary for legal compliance, dispute resolution, audit, and security (for example, financial records retention). You may request deletion subject to exceptions required by law or ongoing legal holds.

8. Security

We implement administrative, technical, and organisational measures appropriate to the sensitivity of legal matter data, including access controls, encryption in transit where supported, audit logging, and staff access limitations. No method of transmission or storage is perfectly secure; Users must also protect their credentials and devices.

9. Your rights

Subject to applicable law, you may request to:

• access and correct personal data we hold about you;
• update notification preferences or withdraw optional consents;
• request erasure or account closure, subject to statutory retention obligations. When you initiate account closure, a 48-hour recovery grace period applies during which you may cancel the request and restore your account via our Account Recovery Portal. After 48 hours, all personal data, credentials, and profile records are permanently erased without possibility of retrieval;
• nominate a contact for privacy requests where required by law.

Advocates and firms remain responsible for client instructions and professional confidentiality when using Platform tools.

10. Children

The Platform is not directed to children. Where a matter involves a minor, the registering adult or authorised representative is responsible for lawful submission of related data.

11. Cookies and similar technologies

We use essential cookies and similar technologies for authentication, security, and session continuity. Non-essential analytics cookies, if introduced, will be disclosed and controlled consistent with applicable consent requirements.

12. Changes

We may update this Policy to reflect product, legal, or operational changes. Material updates will be indicated by a revised effective date and, where required, additional notice or consent.

13. Contact & Data Protection Officer

Briefly is developed and operated by Cruvels Private Limited.

Privacy and DPDP requests: [email protected] · Legal notices: [email protected] · Policies: cruvels.com/legal-platform-policies