Privacy Policy

This policy explains, in plain language, what data Sunwa.AI handles and why. It is written to align with India's Digital Personal Data Protection Act, 2023 (the “DPDP Act”). It is informational and may be updated as the service and the rules evolve.

The free citizen tools need no login

The free public tools — Nyay Saathi, case status lookup, law lookup, the IPC ↔ BNS converter, and the basic notice and agreement helpers — work without an account. You do not have to register, and we do not require your name to use them. We process only what is needed to answer your request in that moment.

What we collect

Account information. If you create an account: your name, email, phone, and subscription plan. Login is handled by our authentication provider; we do not store raw passwords.

Documents and content you provide. Matter details, client information you enter, case facts, notes you dictate, and documents you upload. These are processed so the service can do what you asked — read a notice, draft a reply, analyse a case file, look up the law.

Voice. When you use voice features, audio is sent over an encrypted connection to a transcription provider to convert it to text. We do not retain the raw audio — only the resulting transcript is kept in your account.

Usage and technical data. Device and browser type, IP address, and basic logs for security and reliability. We do not sell your data and we do not use advertising trackers.

How we use it

To provide the service: structuring notes, retrieving law, generating and verifying drafts, managing matters and reminders, and handling client document intake. We also use it to keep the service secure, prevent misuse, and meet our legal obligations. We process your data on the basis of your consent and to perform the service you signed up for.

Document processing & AI providers

To do the work you ask for, we send the minimum necessary data to specialist processors:

  • AI processing — Anthropic, OpenAI, Mistral and Groq, used for drafting, command interpretation, document/OCR reading, and voice transcription. We use providers under terms where data submitted through their APIs is not used to train their models.
  • Storage & database — Supabase, where accounts, matter data, and uploaded documents are stored.

These providers process data under their own security commitments, and we send them only what is required to perform the requested function.

Cross-border processing

Some of this storage and AI processing happens on infrastructure located outside India. Under Section 16 of the DPDP Act, personal data may be transferred outside India except to countries the Government may specifically restrict. By using the account features of Sunwa.AI, you acknowledge this cross-border processing.

Confidentiality of legal data

Matter data and client documents can be sensitive and privileged. We apply access controls so each account can reach only its own data, encrypt data in transit, and keep uploaded client documents in a private store reachable only through expiring, upload-only links. Advocates remain responsible for their own professional-conduct and privilege obligations.

Data retention

We keep account and practice data for as long as your account is active and as needed to provide the service, and for a limited period afterwards unless a longer period is required by law. You can ask us to delete your data at any time.

Your rights under the DPDP Act

As a Data Principal, you may:

  • access a summary of the personal data we process about you;
  • correct, complete, update, or erase your personal data;
  • withdraw consent (which may limit or end your use of the service);
  • nominate another person to exercise your rights in case of death or incapacity; and
  • raise a grievance with us, and escalate to the Data Protection Board of India if it is not resolved.

To exercise any of these, email us at chirag.malhotra90@gmail.com.

Security

We use industry-standard measures including transport encryption, row-level access control, scoped storage access, and least-privilege API access. No system is perfectly secure; in the event of a personal-data breach we will notify affected users and the Data Protection Board as required.

Changes & contact

We may update this policy; material changes will be notified in-app or by email. Questions or requests: chirag.malhotra90@gmail.com. See also our Terms of Use and AI Disclaimer.