Privacy Policy

1. Overview

CourtWatch at courtwatch.io ("Platform") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal data when you use our website and services.

This policy is compliant with the Digital Personal Data Protection Act, 2023 (DPDP Act) and applicable Indian data protection regulations.

2. Data We Collect

2.1 Account Information

When you create an account, we collect:

• Full name
• Phone number (required for account verification and notifications)
• Email address (optional)
• Password (stored as a one-way cryptographic hash, never in plain text)
• Role (e.g., advocate, litigant, law student, journalist)

2.2 Case and Usage Data

As you use the Platform, we collect:

• Cases you search for and add to your watchlist
• Features used and pages visited
• Browser type and device information
• Timestamps of access

2.3 WhatsApp Communication

If you opt in to WhatsApp notifications:

• Your phone number is shared with our WhatsApp Business API service provider for message delivery.
• We track notification delivery status (sent, delivered) for service reliability.
• Message content is limited to hearing reminders, case updates, and service messages. We do not send marketing messages.

2.4 AI Case Analysis

If you use the AI case analysis feature:

• Documents you upload (such as court orders, plaints, FIRs) are processed by our AI systems to generate analysis reports.
• Uploaded documents are processed in memory and are not permanently stored after report generation.
• Generated reports are stored and accessible to you for a limited period, after which they are deleted.
• You are responsible for ensuring you have proper authorization to upload any documents.

2.5 Payment Data

Payment processing is handled by Razorpay, a PCI-DSS compliant payment gateway. We receive transaction confirmations (order ID, payment status, amount) but do not store your card numbers, bank account details, or UPI IDs. Razorpay's privacy policy governs payment data handling.

3. How We Use Your Data

• Service delivery: To provide case search, tracking, hearing reminders, court order downloads, and AI case analysis features.
• Notifications: To send hearing reminders, case update alerts, and service messages via WhatsApp and email.
• Account management: To verify your identity, manage your subscription, and enforce plan limits.
• Service improvement: To analyze usage patterns and improve the Platform (using aggregated, non-personal data).
• Legal compliance: To comply with applicable laws, regulations, or valid legal processes.

4. Data Storage and Security

• All data is stored on servers located in India.
• Passwords are stored using industry-standard one-way cryptographic hashing (never in plain text).
• All communication between your browser and our servers is encrypted via HTTPS/TLS.
• Database access is restricted to authorized systems and is monitored.
• We implement reasonable technical and organizational measures to protect your data against unauthorized access, loss, or misuse.

5. Data Sharing

We do not sell your personal data. We may share limited data with the following categories of service providers, solely for the purpose of delivering our services:

• Payment gateway: For processing subscription payments (name, phone, email for transaction records).
• Messaging provider: For OTP verification and WhatsApp notification delivery (phone number).
• Law enforcement: Only if required by a valid legal order or court directive under applicable Indian law.

We do not share data with advertisers, data brokers, or third-party analytics platforms. We do not use third-party tracking cookies.

6. Cookies and Local Storage

The Platform uses minimal cookies and browser local storage for:

• Authentication: To keep you securely logged in across sessions.
• Preferences: To remember your display and notification preferences.

We do not use advertising cookies, tracking pixels, or third-party analytics scripts.

7. Your Rights Under the DPDP Act, 2023

Under the Digital Personal Data Protection Act, 2023, you have the right to:

• Access: Request a summary of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete personal data.
• Erasure: Request deletion of your personal data and account.
• Withdraw consent: Withdraw consent for data processing at any time (this may affect service availability).
• Grievance redressal: Lodge a complaint about our data handling practices.

To exercise any of these rights, email us at privacy@courtwatch.io. We will respond within 30 days.

8. Data Retention

• Account data is retained as long as your account is active.
• Case tracking and search history is retained for service delivery and may be anonymized after 12 months.
• AI analysis reports are retained for a limited period (typically 7-30 days) and then deleted.
• Payment records are retained for 8 years as required by Indian tax and accounting regulations.
• Upon account deletion request, personal data is erased within 30 days. Anonymized, aggregated data may be retained for service improvement.

Deleting your account. In the CourtWatch app or on courtwatch.io, sign in and open Account → Delete account, then type DELETE to confirm. The account closes at once: you are signed out and all WhatsApp and app alerts stop. Your personal data is erased within 30 days; payment records are kept as described above. If you cannot sign in, email privacy@courtwatch.io with your registered phone number and we will delete the account for you.

9. Children's Privacy

The Platform is intended for individuals who are 18 years of age or older. We do not knowingly collect personal data from minors. If you believe a minor has created an account, contact us and we will promptly delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via WhatsApp or email to registered users at least 15 days before they take effect. The "Last updated" date at the top indicates when the policy was last revised.

11. Grievance Officer

In accordance with the DPDP Act, 2023, for any privacy-related concerns, complaints, or to exercise your data rights, contact: