NyayLink Privacy Policy
This Privacy Policy describes the actual, verified data practices of NyayLink, an Indian legal-technology platform operating at https://nyay.live. It details what data is collected, how it is processed by our verified infrastructure, our AI preconsultation and voice mechanisms, our sub-processors, and how you exercise your statutory rights to access and delete your records under the Digital Personal Data Protection (DPDP) Act, 2023 and the Advocates Act, 1961.
- User data is protected via PostgreSQL Row-Level Security (RLS) in Supabase.
- Client vault documents are stored in user-isolated private storage buckets.
- Full end-to-end account and document deletion directly in user profile settings.
- Speech recognition is browser-managed; audio is never stored on NyayLink servers.
01. Information We Collect
We collect personal and professional information strictly necessary to provide authentic legal-tech workflows. The categories include:
When you sign up as a Client or Advocate, we collect your full legal name, email address, mobile phone number, and account role intent. Passwords are cryptographically hashed using industry-standard secure one-way functions managed by Supabase Auth; raw passwords are never seen or stored by NyayLink application code.
For enrolled advocates registering chambers, we collect State Bar Council enrollment numbers (e.g., D/1429/2018), State Bar Council jurisdiction, year of enrollment, verified law degrees (institution, graduation year), courts of regular practice, consultation fee structure, and uploaded proof documents (Bar identity card, degree certificates) stored in private storage.
Files uploaded to the Confidential Case Vault (pleadings, contracts, legal notices, evidence annexures, court orders) are stored in an authenticated, isolated private bucket (advocate-credentials/{user_id}/vault/...). We compute a cryptographic SHA-256 fingerprint for each file to ensure evidentiary integrity under Section 65B of the Indian Evidence Act.
Legal inquiries submitted by clients, appointment dates, consultation notes, and chronological matter timeline updates are recorded in PostgreSQL tables with strict Row-Level Security ensuring only the matter client, assigned counsel, and authorized platform administrators can query the records.
02. AI Preconsultation & Data Retention
NyayLink AI Preconsultation is an automated informational triage tool designed to assist citizens in understanding general Indian statutory provisions (such as BNS, CPC, Consumer Protection, and RERA). It does NOT provide legal advice, does not establish an attorney-client relationship, and cannot guarantee procedural outcomes.
When interacting with AI Preconsultation:
- Chat Messages: Messages exchanged in an active session are sent securely from your browser via our serverless API route to Groq Inc. cloud inference endpoints using high-parameter open-weights models.
- Session State: Chat messages reside in your browser session memory. NyayLink does not maintain an unconsented permanent logging database of raw AI chat queries.
- Summaries Export: A case intake brief is saved to your account only if you explicitly choose to export or attach the summary to a consultation request or matter.
- Sensitive Disclosures: Citizens are advised not to disclose highly confidential case secrets, Aadhaar numbers, or sensitive financial account details to the AI assistant.
03. Microphone & Voice Recognition Processing
NyayLink provides an optional voice-input microphone button for vernacular accessibility. We accurately disclose the exact mechanism:
Voice input uses your browser's native SpeechRecognition or webkitSpeechRecognition API. Depending on your operating system and browser (e.g. Google Chrome, Apple Safari, Microsoft Edge), audio recorded through your microphone may be processed through browser-vendor cloud speech recognition services (such as Google Speech Services or Apple Dictation) to return transcription text.
NyayLink does not record, ingest, or store raw audio files on its own application servers. Once transcription text is returned to your browser input box, you retain full control to edit or delete the text before submitting.
04. Infrastructure & Third-Party Sub-Processors
NyayLink engages trusted sub-processors strictly for technical hosting, database storage, and AI inference:
| Sub-Processor | Purpose | Data Processed | Location / Encryption |
|---|---|---|---|
| Supabase Inc. | Managed PostgreSQL, Authentication & S3 Storage | User accounts, profile credentials, encrypted files, matter records | Encrypted in transit (TLS 1.3) & at rest (AES-256) |
| Vercel Inc. | Next.js Web Application Hosting & Edge Runtime | HTTP request logs, client IP for rate limiting | Serverless compute; zero persistent storage of payloads |
| Groq Inc. | High-Speed AI Preconsultation LLM Inference | Citizen triage prompt text and conversation turns | Zero data retention agreement for API inference |
05. Data Retention & Account Deletion Controls
In compliance with the DPDP Act, 2023, you maintain complete sovereignty over your personal data:
You can delete your account at any time by navigating to your authenticated Profile & Account Settings tab and selecting "Delete My Account" in the Danger Zone. Deletion requires entering your account password and typing the explicit confirmation phrase.
- Your personal identity, phone number, and profile records in
public.profilesare purged or anonymized. - Your private Case Vault documents and uploaded credentials stored in Supabase Storage are permanently removed from storage disks.
- Your tracked court cases, personal reminders, and private calendar entries are deleted.
- Your authenticated session is immediately terminated.
- Statutory & Dispute Exception: Where a matter has been formally accepted by an enrolled advocate and represents an active legal proceeding in court, filings and timeline events already on the official court record or shared with assigned counsel are retained in anonymized form to uphold advocate professional compliance under the Advocates Act, 1961.
In your Case Vault, you can delete individual unshared documents or replace draft pleadings at any time with immediate removal of the underlying storage object.
06. Privacy Officer & Grievance Contact
For questions regarding this policy, data correction requests, or statutory DPDP Act rights, contact our designated privacy response desk:
Official Contact Email: support@nyay.live
Statutory Grievance Redressal Timeline: We acknowledge inquiries within 48 business hours and process legitimate statutory deletion or correction requests within 30 days under applicable Indian legal standards.