Privacy Policy

VakilSOS is an India-focused legal-technology platform that provides legal information, AI-assisted issue triage, rights guidance, complaint drafting assistance and, on request, introductions to independent legal professionals. VakilSOS is not a law firm and does not itself provide legal advice or representation.

For the purposes of the DPDPA, VakilSOS acts as the Data Fiduciary in respect of personal data processed through the Services. You are the Data Principal.

This Policy applies to personal data processed through the VakilSOS website, the AI Legal Assistant, the complaint drafter and the reporter-identity flow. It does not cover any third-party website, application, service or legal professional that you engage independently, even where accessed through a link or introduction from the Services.

We process personal data only for the following purposes:

• To operate the AI Legal Assistant — classifying your issue, resolving applicable provisions from our centralized legal registry and producing structured guidance.
• To generate complaint drafts, rights explainers, evidence checklists and next-step recommendations.
• To power search across statutes, rights and playbooks.
• To respond to your requests, including introductions to independent legal professionals when you request legal assistance.
• To secure the Services, prevent abuse and comply with legal obligations.
• To improve accuracy of legal classification, only using aggregated or de-identified data.

We do not sell your personal data. We do not use it for third-party advertising, cross-site tracking or profiling beyond what is necessary to deliver the Services.

Personal data is processed on the basis of (a) the consent you give when you use the Services, and (b) “certain legitimate uses” recognised under Section 7 of the DPDPA, in particular the voluntary provision of the Services you request. Where processing is required to comply with a legal obligation or to respond to a lawful direction from an authority in India, that legal obligation is the basis.

The AI Legal Assistant produces general legal information based on the facts you provide and the statutes recorded in our centralized legal registry. It does not exercise legal judgement, does not know your full circumstances, and may occasionally misclassify or omit relevant factors. Nothing produced by the AI is legal advice, and no attorney-client relationship arises with VakilSOS. For any matter with serious consequences, please consult a qualified advocate.

• Assistant conversations and answers are typically retained for the active session and short operational windows needed for reliability, safety review and abuse prevention.
• Reporter identity and interface preferences are stored on your device (local storage) until you clear browser data or reset them from the assistant.
• Complaint drafts are generated on your device. The final filled draft is not stored by us unless you explicitly send it to us.
• Correspondence you send us is retained as long as necessary to answer you and to keep a reasonable record of the interaction.
• Aggregated, de-identified analytics are retained on a rolling basis to monitor service health.

We share personal data only in narrowly defined situations:

• Independent legal professionals: when you request legal assistance, we may share the minimum context (issue summary, category, jurisdiction, contact details you provide) with a qualified professional so that they can respond. Any engagement is between you and that professional.
• Service providers: cloud hosting, database, authentication, email, AI model and related infrastructure providers that process data on our instructions and under contractual confidentiality and security obligations.
• Legal requirements: to comply with a written, lawful direction from a court, tribunal or authority competent under Indian law.
• Safety: to prevent imminent harm, fraud or serious abuse of the Services.

We do not sell, rent or license personal data to third parties for their own marketing.

• HTTPS / TLS in transit.
• Server-side isolation of secrets and API keys; no secrets in client code.
• Least-privilege access and audit logging on our systems.
• Row-level access controls and role-based restrictions on stored data.

No system is fully secure. If you believe your data has been compromised, contact us immediately at contact@vakilsos.in.

Under the DPDPA, you have the right to:

• Obtain a summary of the personal data we process about you and the processing activities we carry out.
• Correct, complete or update inaccurate personal data.
• Request erasure of personal data, subject to legal retention obligations.
• Withdraw consent at any time; withdrawal does not affect the lawfulness of past processing based on consent.
• Nominate another person to exercise your rights in the event of your death or incapacity.
• Access a readily available grievance-redressal mechanism and, if unsatisfied, approach the Data Protection Board of India.

To exercise any right, write to contact@vakilsos.in. We will respond within a reasonable period, and in any event within 30 days.

The Services are not directed at children below the age of 18. Where content relates to child safety (for example, POCSO, juvenile justice or ragging complaints), we treat the data with heightened sensitivity, minimise retention and never use it for any purpose beyond the Services.

Personal data is primarily processed within India. To the extent processing occurs outside India through infrastructure or model providers, it takes place only in jurisdictions not restricted by the Central Government under the DPDPA, under contractual safeguards consistent with Indian law.

The Services may link to official portals such as indiacode.nic.in, cybercrime.gov.in, consumerhelpline.gov.in and e-Daakhil. Those are independent government services governed by their own policies. VakilSOS is not responsible for their content or data practices.

We may update this Policy from time to time. Material changes will be highlighted on this page with a new “Last Updated” date. Continued use of the Services after such updates constitutes acceptance of the revised Policy.

For any privacy concern, request or complaint, please contact our Grievance Officer:

• Email: contact@vakilsos.in
• Founder’s office: founder@vakilsos.in
• Location: Bengaluru, India
• Response window: within 30 days

If your concern is not resolved, you may approach the Data Protection Board of India constituted under the DPDPA.