Privacy Policy

Account information. When you sign in with Google, we receive your name, email address, and profile photo from Google. We do not see your Google password. If you choose to add a Bar Council ID and state to your profile, we store those too.

Case material you provide. The description, concerns, structured fields, and documents you upload during intake (pleadings, agreements, counsel notes, etc.) are processed to build a CaseProfile and generate research notes. Raw uploaded files are deleted within seven days of the intake session; the text extracted from them is retained in your account so you can re-open prior research.

Research history. Every research run you generate is saved to your account so you can re-read it later. This includes the query, the model tier used, the case profile, the resulting research note, the cited authorities, and the timing.

Billing data. When you top up your wallet, our payments processor (Razorpay) handles the actual transaction. We do not see your full card number or banking credentials. We do receive and store the payment identifier, amount, status, and a timestamp so we can match the credit to your wallet.

Operational logs. We log API request times, IP addresses, and error events to operate and secure the service.

To provide the service, we use the information above to:

• Authenticate your sign-in, identify your account, and protect against unauthorised access.
• Build the CaseProfile, retrieve relevant authorities from our indexed corpus of public Indian judgments, and synthesise a research note in response to your queries.
• Store your past research notes so they are available on your Dashboard.
• Process payments, maintain your wallet balance, and prevent billing fraud.
• Diagnose errors, improve retrieval quality, and prevent abuse.
• Communicate with you about your account (receipts, security notices, important service updates). We do not send marketing email without your explicit opt-in.

We do not sell your personal information. We share it only with the following categories of service providers, each contractually bound to use it solely for the purposes we direct:

• Anthropic PBC— the underlying large-language- model provider. We send the lawyer's query and the case material extracted from intake to Anthropic's API for processing. Per Anthropic's commercial terms, this data is not used to train their models.
• Google LLC — for Google Sign-in. Google provides us with the profile information required to identify your account.
• Razorpay Software Private Limited — for payment processing in India.
• Hosting and email infrastructure — for operating the service and sending transactional notices.

We may also disclose information if required by a valid Indian court order or governmental request, after assessing legality and giving you notice where lawful.

Research notes remain in your account for as long as the account is active. Raw uploaded documents are purged seven days after upload; the extracted text is retained until you delete the corresponding research run.

If you delete your account, we soft-delete your personal information within 30 days and retain only the minimum required by Indian law for billing reconciliation (typically the transaction ledger).

You may request a copy of the personal information we hold about you, ask us to correct inaccurate information, or ask us to delete your account. Email hello@caselayer.in and we will respond within 30 days.

You can sign out of CaseLayer at any time. You can also revoke CaseLayer's access to your Google account from your Google Account Permissions page.

We use industry-standard technical and organisational measures to protect your data, including TLS in transit, encrypted storage at rest, scoped database access, and audit logging of administrative actions. No internet service can be guaranteed 100% secure; we will notify affected users promptly in the event of a confirmed breach.

CaseLayer is intended for practising legal professionals and is not designed for, marketed to, or knowingly used by individuals under 18. We do not knowingly collect personal information from children under 18.

We use a single first-party session cookie to keep you signed in. We do not use third-party advertising or analytics cookies. We do not use cross-site trackers.

Our infrastructure may process data in multiple regions to deliver the service. Anthropic processes API requests primarily from the United States. Where data is transferred outside India, we rely on standard contractual safeguards.

We may update this policy from time to time. If we make material changes, we will notify you by email or via a prominent notice on the website before the change takes effect.

Questions about this policy or our data practices: hello@caselayer.in.