Privacy Policy

For the purposes of the DPDP Act, 2023, VakilSOS is the Data Fiduciary in respect of personal data you share while using our services. You are the Data Principal and retain all rights granted under Sections 11–14 of the Act (access, correction, erasure, grievance redressal).

We collect only what is strictly necessary to deliver legal guidance:

We do NOT collect: Aadhaar, PAN, bank account numbers, passwords, OTPs, biometrics, location, contacts or any device identifiers beyond standard request metadata.

• To classify your legal issue into the correct statute and produce structured guidance
• To auto-generate a downloadable complaint draft addressed to the correct authority
• To diagnose and improve classifier accuracy (only aggregated, anonymised data)
• To match you with a verified advocate, only if you explicitly request escalation

We do not profile users, do not run targeted advertising, and do not sell or rent personal data to anyone — ever.

Processing is based on (a) your free, specific and informed consent given at the start of a session, and (b) “certain legitimate uses” under Section 7 — specifically, providing the service you have voluntarily requested.

• Session messages and answers are kept only for the active session — typically auto-purged within 24 hours
• Complaint drafts are generated client-side; we do not store the final filled draft
• WhatsApp chat history is retained only for the period required by Meta's WhatsApp Business policy

We share data only in two narrowly defined situations:

• When required by a binding order of an Indian court, tribunal or law-enforcement authority under a written, lawful direction
• When you explicitly request escalation to a verified advocate, in which case only the minimum necessary case context is forwarded

• HTTPS/TLS for all in-transit data
• Server-side environment isolation for API keys; no secrets in client code
• Principle of least privilege for any staff or contractor access
• Compliant with the IT (Reasonable Security Practices) Rules, 2011 — ISO 27001-style controls

No system is unbreakable; we do not claim absolute security.

We integrate, where unavoidable, with:

• WhatsApp Business (Meta Platforms) — for the chat interface
• Cloud hosting providers operating from regions compliant with Indian law
• Best-in-class AI providers — used only for issue classification, never for legal advice generation

Under the DPDP Act, 2023 you have the right to:

• Access and obtain a summary of personal data we hold about you
• Correct, complete or update inaccurate data
• Request erasure of your personal data
• Withdraw consent and stop using our services at any time
• Nominate another individual to exercise these rights in case of incapacity
• File a complaint with the Data Protection Board of India if unsatisfied

To exercise any right, write to: vakilsosin@gmail.com — we respond within 7 working days.

Our services are not directed at users below 18. Where ragging, POCSO or minor-related complaints are filed, we treat the data with heightened sensitivity and do not retain it beyond the session.

Material changes will be highlighted on this page and dated above. Continued use of the service after such updates constitutes acceptance.

• 📧 Grievance Officer: vakilsosin@gmail.com
• 📍 Bengaluru, India
• 🕒 Response window: 7 working days