Privacy Policy

Effective Date: August 16, 2026

NyayaCraft ("NyayaCraft", "we", "us", or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy details our practices regarding the collection, use, processing, and disclosure of information when you use our proprietary AI-powered legal research platform (the "Service").

1. Information We Collect

We collect information directly from you, automatically through your use of the Service, and from third-party authentication providers.

• Account Information: When you register using a Google Account, we securely collect your name, email address, and profile photograph as provided by the OAuth provider.
• Usage & Search Data: To provide core features such as "Recent History", we securely log your search queries, clicked citations, and interactions with our proprietary AI interface.
• Technical Data: We automatically collect standard diagnostic data including IP addresses, browser types, device identifiers, and operating system details to ensure platform stability and security.
• Cookies & Tracking: We use strictly necessary cookies to maintain your authenticated session. We do not use third-party advertising trackers.

2. AI Processing & Confidentiality Guarantee

Due to the sensitive nature of legal research, we enforce strict data isolation protocols:

• Zero Training Policy: Your search queries, proprietary documents, and AI interactions are strictly excluded from being used to train, retrain, or fine-tune our foundational AI models.
• Isolated Environments: All AI synthesis is executed within highly secure, sandboxed computational environments. Data is processed ephemerally and is never stored in model weights.

3. How We Use Your Information

We use the collected data for the following essential purposes:

• To provision and maintain your user account and authenticate your access.
• To dynamically synthesize accurate legal responses based on your specific queries.
• To monitor infrastructure health, detect anomalous behavior, and prevent abuse or security breaches.
• To communicate critical service updates, security alerts, and administrative notices.

4. Information Sharing and Disclosure

We do not sell, rent, or trade your personal information. We may share information only under the following limited circumstances:

• Service Providers: With trusted infrastructure partners who provide secure database hosting and computational resources, bound by strict confidentiality agreements.
• Legal Obligations: If required to do so by a valid court order, subpoena, or to comply with applicable laws and regulations in India.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, provided the acquiring entity agrees to uphold this policy.

5. Data Security and Retention

We implement robust, industry-standard security measures including AES-256 encryption at rest and TLS 1.3 encryption in transit. While we strive to use commercially acceptable means to protect your personal information, no method of transmission over the Internet is 100% secure.

We retain your Account Information and Search History only for as long as your account remains active. If you choose to delete your account, your data is irrevocably purged from our active databases within 30 days.

6. Compliance with the DPDP Act (India)

In accordance with the Digital Personal Data Protection Act, 2023 of India, you possess the following rights regarding your personal data:

• The right to access the personal data we hold about you.
• The right to request correction of inaccurate data.
• The right to data erasure ("Right to be Forgotten").
• The right to withdraw consent for data processing at any time.

7. Contact the Data Protection Officer

To exercise your privacy rights, request an account deletion, or ask questions about this Privacy Policy, please contact our Data Protection Officer at: