Privacy Policy

This policy explains what personal data Malhotra Enterprises collects through VakilDraft, why, and what you can do about it. It is written to meet the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 and the rules under it.

What we collect

• Account details: your name, email address, mobile number and password (stored only as a secure hash).
• Your matters: the facts you type, the documents you upload, the text read from them, and the drafts and research the Service produces for you. These may contain personal data of your clients and other parties.
• Payments: the plan, amount, date and the payment reference. Card, UPI and bank details are handled by our payment partner; we do not see or store them.
• Usage: which features you use and how much (for your plan limits), and technical logs such as time, IP address and browser, kept for security and to fix faults.

Why we use it

• To provide the Service: prepare drafts, run research and checks, and keep your matters available to you.
• To manage your account, plan limits and payments, and to send you messages about them (such as a one-time password to reset your password).
• To keep the Service secure, prevent misuse and fix problems.
• To meet our legal obligations.

We do not sell your data, and we do not use your matters or documents to advertise to you.

Who processes it for us

We use service providers who process data only on our instructions: cloud hosting and database providers; an artificial-intelligence service provider, which receives the text of a request (facts, documents or a draft) to produce the output and does not use it to train its models under our agreement; a payment gateway; and an SMS provider for one-time passwords. Some of these providers may process data outside India, with safeguards required by law. We may also disclose data where the law or a lawful order requires it.

Client confidentiality

When you upload client material you act as the person responsible for it towards your client. Upload only what you need for the draft, and remove what you no longer need. Your matters are visible only to your account; our staff do not open them except to resolve a problem you report or where the law requires.

How long we keep it

We keep your account and matters while your account is open. If you delete a matter or document, it is removed from the Service. If you close your account we delete your data within 30 days, except records we must keep by law (for example payment and tax records), which we keep for the period the law requires.

Security

Data is encrypted in transit, access is restricted to your account, and passwords are stored as hashes. No system is perfectly secure; if a breach affects your personal data we will inform you and the authorities as the law requires.

Your rights

You may ask to see the personal data we hold about you, to correct or update it, to delete it, or to withdraw consent to its use (which may mean we can no longer provide the Service). You may also nominate a person to exercise these rights on your behalf. Contact us as below; we will respond within 30 days.

Grievance Officer

Malhotra Enterprises, M1 - Narayan Palace, Behind Punjab and Sind Bank, Frazer Road, Patna 800 001, Bihar, India. Phone +91 78700 07777. If you are not satisfied with our response you may approach the Data Protection Board of India.

Changes

If we change this policy we will show the new version here with its date, and tell you in the Service if the change is significant.