Privacy Policy

1. Who We Are

TY LegalDesk is operated by Tech Yenthra ("we", "our", "us"), a software company registered in India. We provide a legal document management platform ("Service") for law firms, advocates, and legal professionals.

For privacy-related enquiries, contact us at privacy@techyenthra.in.

2. Information We Collect

We collect the following categories of information when you use TY LegalDesk:

• Account information: name, email address, and password (stored as a bcrypt hash).
• Company information: firm name, CIN, PAN, GSTIN, registered address, and company letterhead/seal images you upload.
• Document data: legal documents, templates, and variable values you create or import.
• Client and matter data: names, email addresses, and matter details you enter into the CRM.
• Payment information: for invoice payments processed via Razorpay, we store only the Razorpay order and payment IDs — we never see or store raw card numbers.
• Usage data: IP address, browser type, pages visited, and timestamps — collected automatically via server logs.
• Audit logs: records of who performed which action on which document, used for compliance and security purposes.

3. How We Use Your Information

We use the data we collect to:

• Provide, operate, and maintain the Service.
• Generate, store, and deliver PDF documents on your behalf.
• Send transactional emails (document signature requests, invoice notifications, system alerts).
• Process payments via Razorpay for invoices raised within the platform.
• Maintain audit trails for compliance and legal purposes.
• Detect, investigate, and prevent fraudulent transactions and security incidents.
• Communicate with you about changes to the Service or these policies.

We do not sell your personal data or use it for advertising purposes.

4. Data Sharing

We share data only with:

• Resend — transactional email delivery.
• Razorpay — payment processing for invoices. Their privacy policy governs data they receive.
• AWS S3 — file storage for uploaded letterheads, seals, and generated PDFs.
• MongoDB Atlas — database hosting. Data is stored in India (ap-south-1 region).
• Legal or regulatory authorities — where disclosure is required by Indian law.

5. Data Retention

We retain your account and document data for as long as your company account is active. If your account is deleted, we will remove your personal data within 30 days, except where we are legally required to retain it (e.g., GST records, which must be kept for 8 years under Indian tax law).

6. Security

All data is transmitted over HTTPS. Passwords are hashed with bcrypt. Access to production systems is restricted to authorised personnel. However, no method of transmission over the internet is 100% secure — use the Service at your own risk and notify us immediately if you suspect unauthorised access.

7. Your Rights

You have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your account and associated data.
• Export your documents and client data in standard formats.

To exercise any of these rights, email privacy@techyenthra.in.

8. Cookies

TY LegalDesk uses a single session cookie (HttpOnly, Secure) to maintain your logged-in state. We do not use tracking cookies or third-party analytics cookies.

9. Children

The Service is not directed at persons under 18 years of age. We do not knowingly collect personal data from minors.

10. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated by email or via an in-app notice at least 14 days before they take effect. Continued use of the Service after the effective date constitutes acceptance of the updated policy.

11. Governing Law

This Privacy Policy is governed by the laws of India, including the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023. Disputes shall be subject to the exclusive jurisdiction of courts in Chennai, Tamil Nadu.