Privacy Policy

1.1 Services covered. This policy covers our websites and the "Services": PleadSmart, including its research, drafting and case tools such as DocBare, Case Agent, /cases, /case-search, /diagram and web search, and the Contract Lifecycle Management (CLM) module.

1.2 When Asvara decides how data is used. For account, billing, website, marketing and usage information, Asvara decides the purpose and means of processing and acts as the Data Fiduciary.

1.3 When our customer decides. For documents, prompts and other content that a customer or its users submit to the Services ("Customer Content"), the customer (for example, a law firm or legal department) decides what is uploaded and why, and acts as the Data Fiduciary. Asvara processes that content on the customer's behalf and on its instructions. Individuals whose personal data appears in a customer's documents should direct requests about it to that customer.

1.4 Exemptions. Nothing in this policy limits any exemption available under applicable law, including under Section 17 of the Digital Personal Data Protection Act, 2023 for processing necessary to enforce any legal right or claim.

2.1 Account information. When you sign up, we collect your name and email address. You may choose to provide more, such as your phone number, organisation name and designation.

2.2 Organisation accounts. If your organisation adds you to its account, we receive your name, email address and role from its administrator.

2.3 Customer Content. Documents, files, audio, prompts, queries and instructions you submit, and the Outputs generated for you.

2.4 Billing information. Your plan, invoices, transaction reference, amount and payment status, and any billing name, address and GSTIN you provide. Card, UPI and bank details are collected and processed by our payment partner, and Asvara does not store them.

2.5 Usage and technical information. Log data (such as IP address, browser and device type, and date and time of access), features used, usage counts and error reports. This does not include the substance of Customer Content.

2.6 Cookies and analytics. Our websites use essential cookies to keep you signed in and secure. For website analytics we use a privacy-focused service that does not set cookies or create persistent identifiers on your device.

2.7 Communications. Information you share when you contact support, request a demo, or give feedback.

2.8 Professional contact information. We may obtain the business contact details of legal professionals, such as name, designation, firm and work email, from professional directories and business data providers, to tell them about our Services. Anyone contacted this way can ask us to stop at any time.

(a) To create and manage accounts and organisation workspaces, and provide the Services.

(b) To process payments, issue invoices and meet tax and accounting requirements.

(c) To provide support, respond to requests and send service messages such as security alerts, renewal reminders and changes to our terms.

(d) To keep the Services secure, prevent fraud and misuse, and investigate incidents.

(e) To improve the Services using usage information and feedback, and not Customer Content.

(f) To send information about our Services and events. You can unsubscribe from marketing emails at any time using the link in the email or by writing to support@asvarainnovation.com.

(g) To comply with law and respond to lawful requests from courts and authorities.

4.1 No training on your content. Asvara does not use Customer Content to train, retrain or fine-tune any artificial intelligence or machine-learning model. Asvara engages third-party AI services only on terms or settings under which Customer Content submitted through the Services is not used to train their models.

4.2 How your content is processed. Customer Content is processed to provide the Services to the relevant customer, including by third-party AI services that may process it in India and other countries, and is never used to respond to another customer. Outputs are generated by artificial intelligence, may be inaccurate, and must be verified before being relied upon.

4.3 Legal knowledge base. Our legal research features draw on publicly available legal materials and licensed legal information sources, not on Customer Content.

4.4 AI & Data Use Policy. Our AI & Data Use Policy, published on our website, explains in detail how our AI features work, the categories of providers involved, where data is processed, how Customer Content is retained and deleted, and the choices available to you. It forms part of this Privacy Policy.

5.1 We process personal data with your consent, which you give when you create an account, submit information or choose optional features, or for legitimate uses permitted by law, such as where you have voluntarily provided information for a specified purpose, to comply with law, or to respond to emergencies.

5.2 By creating an account, you consent to the collection of your account credentials and billing information for the purposes described in this policy.

5.3 You may withdraw consent at any time by writing to support@asvarainnovation.com or, for marketing, by unsubscribing. Withdrawal does not affect processing already carried out, and we may be unable to provide the Services without information needed to run your account.

6.1 Service providers. We share information with the following categories of service providers, only as needed to run the Services: (a) cloud infrastructure and hosting, our primary provider being Google Cloud; (b) third-party AI services; (c) document-processing and speech-recognition providers; (d) legal information, case-status and web search providers; (e) payment processing, transactional email, analytics and electronic-signature providers; and (f) professional advisers, auditors and insurers. We do not publish the identities of individual service providers other than Google Cloud, except where required by law.

6.2 Your organisation. If you use the Services through an organisation account, its administrators can see your account details, usage and the work you create in the organisation's workspace.

6.3 Legal requirements. We disclose information where required by law or by a court or authority. For Customer Content, we will notify the customer before disclosure, unless the law prohibits it, so that it may seek protection or assert privilege, and we will disclose only what is legally required.

6.4 Business transfers. If Asvara is involved in a merger, acquisition or sale of assets, information may be transferred to the successor, subject to this policy.

6.5 No sale. We do not sell personal data or Customer Content, and we do not use Customer Content for advertising or profiling.

7.1 Personal data and Customer Content may be stored and processed in India and in other countries where our service providers operate. We make such transfers in accordance with applicable law, including any restriction notified by the Government of India under Section 16 of the Digital Personal Data Protection Act, 2023, and with reasonable contractual, technical and organisational safeguards.

9.1 We maintain reasonable security safeguards, including encryption of data in transit and at rest, role-based access controls, logging and monitoring of access, and regular backups. Access to Customer Content by Asvara personnel is restricted to authorised staff bound by confidentiality, is logged, and occurs only to provide support you request, to investigate security incidents or misuse, or where the law requires.

9.2 If a personal data breach affects your information, we will notify you and the relevant authorities as required by law. No system is completely secure, and you should keep your login credentials confidential.

10.1 Subject to applicable law, you may:

(a) ask for information about the personal data we hold about you and how we use it;

(b) ask us to correct, complete, update or erase your personal data;

(c) withdraw your consent;

(d) nominate another person to exercise your rights if you die or become unable to do so; and

(e) raise a grievance with our Grievance Officer.

10.2 Send requests to support@asvarainnovation.com from your registered email address. We will respond within thirty (30) days. If your request concerns content in an organisation's workspace, we may refer you to that organisation.

10.3 If you are not satisfied with our response, you may approach the Data Protection Board of India once the relevant provisions of the Digital Personal Data Protection Act, 2023 are in force.

11.1 The Services are for individuals aged 18 and above. We do not knowingly collect personal data of children as account holders. If you believe a child has created an account, contact us and we will delete it.

12.1 We may update this policy and will notify material changes by email or in the Services at least fifteen (15) days before they take effect. Previous versions are available on request. We will not use Customer Content for any materially new purpose, including training, without the customer's express opt-in.

13.1

Grievance Officer

Rajat Balyan

Designation

Director

Email

contact@asvarainnovation.com

Phone

+91-8448318881

Address

Asvara Private LimitedJuhi Enclave Colony, SiktaurMohaddipur, Gorakhpur 273008Uttar Pradesh, India

We will acknowledge your grievance within forty-eight (48) hours and resolve it within one (1) month of receipt.