Privacy Policy

For the data you and your team enter about yourselves, we are the Data Fiduciary under the DPDP Act. For the data your clients give you and you store in Pairvi, we act on your instructions as a Data Processor. Our Terms of Service state this split.

We collect three kinds of data, and one more for delivery:

• Account data. Your name and email address. You sign in with Google, with Apple, or with an email and a password. Our sign-in provider stores a password only as a one-way hash.
• Usage data. How you use the platform: which screens you open, whether sync ran, your device type and the app version. We strip party names and content from usage data.
• Content data. Any matters, notes and documents you upload, and any queries you submit.
• Delivery data. A push-notification token for your device.

We collect nothing we do not need. We do not read your contacts, your location or your other apps.

Strict access controls govern content data. We do not use it to train AI models. Only your account, and the people you add to a matter, can see it.

Pairvi reads cause lists, orders and case status that courts publish. A court publishes these under a legal obligation. Under section 3(c)(ii) of the DPDP Act, the Act does not apply to this data. We keep what a court publishes as the court published it.

This exemption never covers what you type or upload. Everything you and your clients give us stays fully under this policy.

Pairvi collects personal data with your consent, or for a legitimate use that section 7 of the DPDP Act allows. We use it:

• to run your account;
• to operate, secure and improve the platform;
• for analytics that improve the platform;
• to investigate security incidents.

We use content data only to deliver the platform’s services to you. For example, we match court listings to your matters and tell you the next date.

Pairvi keeps data confidential and secure. We never release, sell or rent it to any entity or individual outside our organisation, except as sections 7 and 8 describe.

• Sell or share your data.
• Show advertising on or beside your content.
• Train or fine-tune AI models on your files, your notes or your clients’ documents.
• Use one lawyer’s documents to help another lawyer, including the other side of a case.

We publish this list, and we will not weaken it.

Our website may contain links to other websites. When you use these links to leave our site, we have no control over the other website. We are not responsible for the protection and privacy of any information you give while you visit such sites. This policy does not govern those sites. Read the privacy policy of each website you visit.

Pairvi will not disclose your personal data unless the law requires us to. Examples are a court order, or a lawful direction under the Information Technology Act, 2000 or the DPDP Act. Where the law allows it, we tell you before we disclose.

We use a small set of service providers for hosting, storage, sign-in, email and push notifications. They hold data only as part of the regular operation of the platform. Each one is bound by contract to protect it and to use it only on our instructions. We do not let a provider use your data for its own purposes.

• Account data and content data. We keep it while your account exists. When you delete your account, we erase it and destroy your encryption key within 30 days.
• Backups. Backups are encrypted and stay in India. We keep them for 30 days. Deleted data leaves backups on the same schedule.
• Billing records. We keep invoices and payment records for as long as Indian tax law requires. Section 36 of the Central Goods and Services Tax Act, 2017 is one example.
• Security logs. We keep access logs for one year, as Rule 6 of the DPDP Rules requires.

If you sign up for updates on our website, we keep your contact details to send you news about Pairvi. You can unsubscribe at any time. To update, correct or delete your information, use the app or write to pairvi@strangeloop.works.

We store all data in India, including backups and logs. We do not copy it to other countries. A sign-in or push-notification service may process the small amount of data it needs outside India. Crash reports and app usage events may also go to a service provider outside India. Your name, email and phone number are not sent to it. Section 16 of the DPDP Act permits this, unless the Government restricts the country.

• We encrypt data in transit with TLS 1.2 or later.
• We encrypt data at rest with AES-256. A key that belongs to your account alone encrypts your document files.
• No one at Pairvi has standing access to your documents. Emergency access needs two approvals, is logged, and we tell you.
• Support staff see account details, never document content.
• An audit log records every access to a matter, a document or an export. You can read it in the app, per matter.

Support will never ask you for a one-time password or a password. If someone asks, it is not us.

If a breach affects your data, we contain it and assess it. We tell you without delay. We report it to the Data Protection Board of India within 72 hours, as Rule 7 of the DPDP Rules requires. We report it to CERT-In within 6 hours, as the CERT-In Directions require.

Under the DPDP Act, you have the right to:

• get a summary of your personal data and how we process it (section 11);
• correct, complete, update or erase your personal data (section 12);
• withdraw consent at any time (section 6(4));
• raise a grievance with us (section 13);
• nominate a person to exercise your rights if you die or become incapable (section 14).

You can read, correct, export and delete most of your data in the app. Export gives you everything in open formats: PDF, DOCX, CSV and JSON. For any other request, write to pairvi@strangeloop.works. We respond within 30 days.

Pairvi is a tool for practising advocates. We do not offer it to anyone under 18.

The Pairvi website sets no cookies.

When this policy changes, we update the date at the top. We tell you in the app before the change takes effect. We do not weaken a promise in section 5.

For any privacy matter, write to our Grievance Officer at pairvi@strangeloop.works. This email is our designated channel for grievances under section 13 of the DPDP Act. We respond within 30 days. The DPDP Rules allow up to 90 days.

If you are not satisfied with our answer, you may complain to the Data Protection Board of India.

When you use any part of Pairvi, its products or its services, you accept this Privacy Policy. If you do not agree with it, do not use Pairvi, its products or its services.