Privacy and data processing (DPDP Act, 2023)
Lawyer Diary processes personal data on behalf of law firms. Each law firm is the data fiduciary for its clients. This notice (version 2025-09) explains what we store, where we store it, and how to use your rights.
Where data lives
Data of firms registered in India is stored in AWS Mumbai (ap-south-1). A firm's region is set when it registers and cannot be changed. Backups stay in the same region.
Who can see it
Only members of your firm can see it. What each person sees depends on the roles and file-by-file access your firm sets. Our operators cannot read case data. Support gets access only when your firm grants it. That access is for a limited time, and it is audited.
Consent and purpose
Client data is processed for representation, billing and case updates. Consent and the notice version are recorded at intake.
Retention and erasure
Your firm sets how long data is kept for each case type. When data is erased, a certificate is produced. A firm can export everything and leave at any time. This works even in read-only mode.
Breach notification
If a breach is confirmed, affected persons and the Data Protection Board are notified within 72 hours of the confirmation.
Grievance
Write to grievance@lawyerdiary.app. You will get a reply within 30 days.