Privacy Policy

LEGUM LEX (hereinafter referred to as the "Firm", "We", "Us", or "Our") is committed to the protection of personal data and the maintenance of privacy for all individuals and entities (the "User" or "You") utilizing our legal services and website. This Privacy Policy outlines our protocols regarding the collection, processing, storage, and dissemination of personal information in accordance with the laws of the Republic of India.

Clause 1: Scope of Data Collection

In the course of providing our services, the Firm may collect diverse categories of personal and professional information. This includes identifiable particulars such as your full legal name, electronic mail address, telephonic contact numbers, and physical residential or business addresses. Furthermore, given the nature of the Platform, we may collect sensitive information contained within uploaded legal instruments, contracts, and evidentiary documents. Technical data, including device identifiers, Internet Protocol (IP) addresses, and analytical information related to Platform interaction, may also be systematically recorded.

Clause 2: Objectives of Data Processing

All data collected by LEGUM LEX is processed for specific and legitimate purposes integral to the delivery of our legal infrastructure services. These objectives include the facilitation of legal notice drafting and dispatch, the execution of contract lifecycle management protocols, the administration of professional consultations, and the provision of litigation tracking services. Additionally, data is utilized to enhance platform security, facilitate client communication, and implement continuous improvements to Our technological frameworks.

Clause 3: Data Protection and Security Measures

The Firm implements rigorous technical and organizational measures to ensure the security of User data. Personal information is stored within a secure, encrypted infrastructure with strictly controlled access protocols. We employ industry-standard security methodologies to prevent unauthorized access, data breaches, or the accidental loss of information. While we strive to maintain the highest standards of data integrity, the User acknowledges that no digital storage or transmission system can be warranted as entirely infallible.

Clause 4: Protocols for Data Sharing and Disclosure

LEGUM LEX maintains a strict policy against the sale or unauthorized commercialization of User data. Personal information may only be disclosed to specific third parties under limited circumstances: (a) to qualified advocates or legal professionals assigned to handle the User's specific matter; (b) to government or regulatory authorities where such disclosure is mandated by law or judicial order; and (c) to essential technology service providers who operate the Platform's infrastructure under strict confidentiality agreements.

Clause 5: User Prerogatives and Data Rights

Under applicable data protection frameworks, Users possess significant rights regarding their personal information. You may request formal access to the personal data held by the Firm, seek the correction of any inaccurate or incomplete information, or request the deletion of data where such retention is no longer necessitated by legal or contractual obligations. All such requests or inquiries regarding data privacy should be formally directed to Our administration via info@legumlex.com.

Clause 6: Compliance with DPDPA 2023

The Firm acknowledges its obligations under the Digital Personal Data Protection Act, 2023 (DPDPA). We act as a "Data Fiduciary" for the personal data provided by "Data Principals" (Users). Our processing activities are grounded in the principles of transparency, purpose limitation, and data minimization. Users are encouraged to refer to our dedicated Data Protection Policy for more granular information regarding their rights under the DPDPA 2023 framework.

Clause 7: Use of Google User Data via OAuth

The Platform integrates with certain Google services to deliver its core functionality. Where Users (including Advocates onboarded to Our Digital Office) elect to connect their Google account to the Platform, the Firm requests access to a strictly limited set of Google user data via the OAuth 2.0 authorization framework. Use of any data received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Scopes Requested and Purpose:

• Basic profile and email address (openid, email, profile): used solely to identify the connected Google account and to display the connection status within the User's account settings. This data is not used for marketing communications.
• Google Calendar events (https://www.googleapis.com/auth/calendar.events): used solely to create Calendar events with embedded Google Meet conferencing links for consultation sessions an Advocate hosts through the Digital Office. The Firm does not read, modify, or delete Calendar events that the Platform did not itself create.

What We Store: An OAuth refresh token, the connected account's email address, and the granted scope list. These records are retained in an access-controlled database. Refresh tokens are treated as security credentials with the same protections We afford to Users' login passwords.

What We Do Not Do: The Firm does not transfer Google user data to any third party for advertising, resale, lead generation, or general data brokerage. We do not use Google user data, in raw or derived form, to develop, improve, or train generalized or non-personalized artificial-intelligence or machine-learning models. Human review of Google user data is performed only with the affected User's explicit consent, for security investigation, or where required by law.

Retention and Revocation: Stored OAuth tokens are retained until the User disconnects the integration. Disconnection is available at any time via the Platform's account-settings interface, and may also be effected by the User directly at https://myaccount.google.com/permissions. Upon disconnection, the Firm revokes the token at Google and deletes the associated record from Our database within twenty-four (24) hours.

Inquiries Regarding Google Data: Specific inquiries regarding the handling of Google user data may be directed to info@legumlex.com with the subject line "Google Data Request".

Clause 8: Consent and Modifications

By utilizing the Platform, the User provides their unequivocal consent to the data practices described in this policy. LEGUM LEX reserves the right to periodically modify or update this Privacy Policy to reflect changes in legal requirements or operational practices. Any such updates shall be published on the Platform and shall become effective immediately upon posting. The User's continued use of the services constitutes acceptance of these modifications.