PRIVACY POLICY
NYAYAAI
Last Updated: [21-10-2026]
1. Introduction
Welcome to NYAYAAI (“NYAYAAI,” “we,” “our,” or “us”).
NYAYAAI is an AI-powered legal technology platform designed to help advocates, law students, legal professionals, judiciary aspirants, and citizens research Indian law, draft legal documents, analyse case files, understand legal concepts, and access educational resources through NYAYAAI Law Academy.
This Privacy Policy explains how we collect, use, process, store, share, retain, and protect personal data when you access or use our website, applications, AI tools, educational services, and related features (collectively, the “Platform”).
We are committed to handling personal data responsibly and in accordance with applicable Indian laws, including the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, where applicable, and the Digital Personal Data Protection Act, 2023, together with the Digital Personal Data Protection Rules, 2025, as and when the relevant provisions become applicable.
By accessing or using the Platform, you acknowledge that you have read this Privacy Policy. Where consent is required by applicable law, we will obtain it in the prescribed manner. Where processing is permitted on another lawful basis, we will rely on that basis as applicable.
2. Information We Collect
The information we collect depends on the features you use and your interactions with the Platform. It may include the following categories.
2.1 Account and Profile Information
When you register for or use an account, we may collect:
Name and email address.
Login credentials and authentication information.
Profile details and professional or educational information you choose to provide.
Account preferences and subscription information.
Communications and support requests you send to us.
We will collect and process personal data for specified, lawful purposes and only to the extent reasonably necessary for those purposes, subject to applicable law.
2.2 Legal Research Queries and AI Interactions
When you use AI Legal Research or the NYAYAAI Legal Assistant, we may process:
Questions, prompts, and instructions submitted by you.
Legal topics, statutes, judgments, and search terms you explore.
AI-generated responses and associated legal references.
Feedback and ratings you provide.
Technical information necessary to deliver, maintain, and troubleshoot the service.
Please avoid including personal, privileged, or confidential information that is not necessary for your request.
2.3 Uploaded Documents and Case Files
When you use case management, document analysis, or legal drafting features, you may upload documents such as:
Court judgments, petitions, and case files.
First Information Reports (FIRs), witness statements, and medical reports.
Legal notices, contracts, agreements, and applications.
Scanned documents and supporting records.
Documents containing personal, financial, medical, or other confidential information.
We may process uploaded documents to provide the functions you request, including text extraction, summarisation, legal research assistance, timeline generation, evidence organisation, document drafting, and case analysis.
You should upload documents only when you have the necessary authority or lawful basis to do so. Where appropriate, redact personal information that is not necessary for the requested task.
The Platform is not intended to replace secure professional systems or applicable confidentiality obligations. You remain responsible for complying with your professional duties and any applicable restrictions on disclosing client or case information.
2.4 Usage and Technical Information
When you access the Platform, we may collect technical and usage information, including:
Device type, browser type, and operating system.
IP address and connection information.
Pages and features accessed.
Session activity, timestamps, and error logs.
Security events and information needed to detect misuse or unauthorised access.
The information collected will depend on the technologies and services actually implemented on the Platform.
2.5 Payments and Transactions
Where paid subscriptions, courses, or other paid services are available, we may process information associated with purchases, subscription status, invoices, transaction references, and payment confirmations.
Payment details may be processed by third-party payment providers. We do not claim to store complete payment card details unless that practice is implemented and appropriately disclosed.
2.6 Educational Information
When you use NYAYAAI Law Academy, we may process information relating to course enrollment, learning progress, completed lessons, saved learning preferences, assessments where available, and course-related communications.
3. How We Use Your Information
We may use personal data for the following purposes:
To create, authenticate, and manage user accounts.
To provide AI-powered legal research, drafting, and case intelligence.
To process uploaded documents and generate requested summaries, drafts, or analyses.
To retrieve and present relevant legal information and references.
To provide educational content and track learning progress where supported.
To process subscriptions, payments, and course enrollment.
To respond to enquiries and provide technical support.
To maintain, troubleshoot, secure, and improve the Platform.
To detect and investigate fraud, abuse, security incidents, and unauthorised access.
To comply with applicable legal obligations and respond to valid legal requests.
To communicate important service updates, security notices, and policy changes.
We will process personal data for specified and lawful purposes in accordance with applicable law. Where consent is required, the relevant notice will explain the purpose of processing and how consent may be withdrawn.
4. AI Processing and Legal Documents
NYAYAAI uses artificial intelligence and automated document-processing technologies to provide certain features.
When you submit a query or upload a document, the relevant content may be processed to generate responses, prepare legal drafts, identify potentially relevant legal authorities, summarise materials, or analyse case documents.
Depending on the Platform's actual technical configuration, this processing may involve third-party AI models, cloud infrastructure, document-processing services, or other technology providers.
Where third-party providers process personal data on our behalf, we will take the measures required by applicable law and our relevant contractual arrangements.
AI-generated content may be inaccurate, incomplete, outdated, or inconsistent with applicable law. Users should independently verify legal citations, statutory provisions, case references, and other material information before relying on AI-generated outputs.
NYAYAAI does not replace the independent professional judgment of advocates or other qualified legal professionals. AI-generated outputs should not be treated as a substitute for professional legal advice.
Confidentiality Notice: Legal documents may contain privileged communications, confidential case information, or sensitive personal data. Uploading a document does not, by itself, establish or guarantee legal privilege, confidentiality, or protection against access by third-party service providers involved in processing the document.
Users should review the relevant service terms and privacy information before uploading confidential material.
5. Use of Information for AI Training and Improvement
We may use appropriate service usage information and user feedback to maintain, evaluate, troubleshoot, and improve the Platform, subject to applicable law and our privacy commitments.
Whether prompts, uploaded documents, or AI-generated outputs are used to train or improve AI models depends on the actual service configuration, applicable agreements, and the choices or restrictions communicated to users.
We will not claim that uploaded legal documents, user prompts, or other content are excluded from model training unless the relevant exclusion is actually implemented and supported by the applicable service arrangements.
Where personal data is used for AI training or improvement, we will ensure that the processing has an appropriate lawful basis and complies with applicable consent, notice, purpose limitation, and other legal requirements.
Where consent is the applicable basis, users will be informed of the relevant purpose and their applicable rights, including the right to withdraw consent.
Users should not submit information they are not authorised to disclose.
6. Sharing and Disclosure of Information
We do not intend to make your personal data publicly available merely because you use NYAYAAI.
We may share or disclose information in the following circumstances, where appropriate and lawful.
6.1 Technology and Service Providers
We may share or permit access to information by service providers that help us operate the Platform, including:
Hosting and cloud infrastructure providers.
AI technology and model providers.
Authentication and account management services.
Document-processing and storage providers.
Analytics and security service providers.
Customer support and communication systems.
Such providers may process personal data only as permitted by applicable law and the relevant service arrangements.
6.2 Payment Providers
Where payments are supported, relevant transaction information may be shared with payment processors to complete transactions, manage subscriptions, prevent fraud, and comply with legal obligations.
6.3 Legal and Regulatory Requirements
We may disclose information where required by applicable law, a valid court order, or a lawful request from a competent authority.
Where legally permitted and appropriate, we will take reasonable steps to assess the validity and scope of such requests.
6.4 Security and Protection of Rights
We may process or disclose information where reasonably necessary to investigate suspected fraud, protect the security of the Platform, enforce applicable terms, or protect the rights and safety of users or other persons, subject to applicable law.
6.5 Business Transfers
If the business operating NYAYAAI undergoes a merger, acquisition, restructuring, or transfer of assets, relevant information may be transferred as part of that transaction, subject to applicable legal requirements and appropriate safeguards.
We do not sell personal data as a business practice.
7. Data Storage and Security
We take reasonable technical and organisational measures, as appropriate to the information processed and the risks involved, to protect personal data against unauthorised access, disclosure, alteration, loss, and misuse.
Depending on the services and infrastructure actually implemented, these measures may include access controls, authentication mechanisms, encryption, security monitoring, restricted system access, and appropriate backup procedures.
We will implement the security safeguards required by applicable law, including any applicable requirements under the Digital Personal Data Protection Act, 2023, and the Digital Personal Data Protection Rules, 2025, as those provisions come into force.
No website, internet transmission, or electronic storage system can be guaranteed to be completely secure.
Users are responsible for maintaining the confidentiality of their login credentials and using appropriate security practices when accessing the Platform.
In the event of a personal data breach, we will take the actions and provide the notifications required by applicable law, including notifications to affected individuals and the relevant authorities where required.
8. Data Retention and Deletion
We retain personal data only for as long as reasonably necessary to fulfil the purposes for which it was collected or processed, unless a longer retention period is required or permitted by applicable law.
Retention periods may differ depending on the category of information, the feature used, contractual obligations, and legal requirements.
For example:
Account information: May be retained while your account is active and for an appropriate period thereafter.
Uploaded documents and AI interactions: May be retained as needed to provide requested features, maintain relevant history, or comply with applicable obligations.
Transaction records: May be retained for accounting, tax, audit, dispute resolution, or other legal purposes.
Security logs: May be retained for appropriate periods to detect, investigate, and respond to security incidents.
When personal data is no longer required for the relevant purpose and there is no lawful reason to retain it, we will erase the data or take the steps required by applicable law. Any legally required retention or permitted exception will be handled accordingly.
You may request deletion of your account or personal data by contacting info@nyaya.ai.
We will assess and process deletion requests in accordance with applicable law. Certain information may need to be retained where legally required or where another lawful ground applies.
Deleting your account does not necessarily remove information that must lawfully be retained or information held independently by third-party sources. Copies held by third-party service providers will be handled in accordance with applicable law and the relevant service arrangements.
9. Cookies and Similar Technologies
NYAYAAI may use cookies, local storage, session identifiers, or similar technologies where implemented.
These technologies may be used to:
Maintain login sessions.
Remember user preferences.
Support essential Platform functionality.
Understand service performance and usage.
Improve security and detect suspicious activity.
Where consent is required for non-essential cookies or similar technologies, we will obtain consent as required by applicable law.
You may be able to manage cookies through your browser or device settings. Disabling certain technologies may affect the availability or functionality of some features.
10. Your Privacy Rights
Subject to applicable law and its commencement provisions, you may have the right to:
Obtain information about the personal data processed about you.
Request correction of inaccurate or incomplete personal data.
Request completion or updating of personal data, where applicable.
Request erasure of personal data where legally applicable.
Withdraw consent where processing is based on consent.
Raise grievances concerning the processing of personal data.
Nominate another person to exercise applicable rights in the event of death or incapacity, as provided by law.
Exercise other rights available under applicable data protection legislation.
You may also have duties under applicable law, including providing accurate information and not impersonating another person.
Requests may be subject to identity verification, lawful limitations, and applicable retention requirements.
To exercise an applicable right, contact info@nyaya.ai and describe your request. We will provide information about the available grievance-redressal process and respond within the timelines prescribed by applicable law.
Where required, you may also have the right to approach the relevant statutory authority after following the applicable grievance-redressal process.
11. Children's Privacy
NYAYAAI is intended primarily for advocates, law students, legal professionals, judiciary aspirants, and other users seeking legal information or education.
For purposes of the Digital Personal Data Protection Act, 2023, a child is an individual who has not completed eighteen years of age.
Where the Platform is used by children, we will comply with applicable legal requirements relating to children's personal data, including verifiable parental or lawful guardian consent and any applicable restrictions on tracking, behavioural monitoring, or targeted advertising, subject to statutory exceptions.
We will not knowingly process children's personal data in a manner that violates applicable law.
If you believe that a child has provided personal data inappropriately, please contact info@nyaya.ai so that we can assess the matter and take appropriate action in accordance with applicable law.
12. International Data Transfers
Depending on the technology providers and infrastructure used, personal data may be processed or stored in India or other jurisdictions.
Where personal data is transferred outside India, the transfer will be handled in accordance with applicable Indian law, including any restrictions, government requirements, or contractual safeguards applicable to the transfer.
Users should review this Privacy Policy and any relevant service-specific privacy information before submitting confidential or sensitive legal material through the Platform.
13. Third-Party Websites and Services
The Platform may contain links to external websites, including court portals, government databases, legal resources, and third-party service providers.
We do not control the privacy policies, content, or security practices of independent third-party websites.
Access to an external website is subject to that website's own terms and privacy policy. We encourage users to review those policies before sharing personal data with third parties.
14. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in our services, technology, information-processing practices, or applicable law.
The updated Policy will be published on the Platform with a revised “Last Updated” date.
Where required by law, we will provide notice or obtain consent before implementing material changes.
We encourage users to review this Policy periodically.
15. Grievances and Privacy Requests
If you have a question, privacy concern, request concerning your personal data, or complaint about how your information is handled, you may contact us using the details below.
Grievance and Privacy Contact
Email: info@nyaya.ai
Please include sufficient information to help us understand and investigate your concern. Avoid sending additional sensitive personal data unless it is necessary to resolve your request.
We will acknowledge, review, and address grievances in accordance with our applicable procedures and legal obligations.
Where a separate Grievance Officer or other designated contact is required by applicable law, the relevant designation and contact details will be published on the Platform.
16. Contact Us
For questions relating to this Privacy Policy or the processing of personal data through NYAYAAI, please contact:
NYAYAAI
Email: info@nyaya.ai
Country: India
We will handle privacy enquiries, requests, and grievances in accordance with applicable law.
By using NYAYAAI, you acknowledge that you have read this Privacy Policy. Any consent required for specific personal data processing will be obtained separately in the manner prescribed by applicable law.
Important implementation note: This Privacy Policy should be read alongside any applicable terms of service, consent notices, and service-specific privacy notices. It does not replace any separate notice or consent required by law.