Privacy Policy

LegalNib ("we", "us") is an AI-assisted legal drafting platform for licensed advocates practising in India, operated by Metamersist Technologies Pvt. Ltd. This policy explains what we collect, why, who we share it with, and how to have it deleted.

What we collect

• Personal info — name, email, phone number, and an account/user ID (Firebase UID). A verified mobile number is required to create a LegalNib account; email, a password, and/or Google sign-in are optional additional ways to sign in to that same account afterward — none of them can create a new account on their own. If you use Google sign-in, we receive the name and email your Google account already shares publicly with apps you authorize; if you set a password, we never see or store it — Firebase handles password authentication directly.
• Financial — wallet transaction / purchase history. We never see your card, UPI, or bank details — Razorpay's checkout handles payment info directly and we only receive a confirmation of success.
• Photos — evidence and document images you choose to capture or upload, optional.
• Voice notes — what you dictate. Your browser or phone turns the speech into text; we receive and store only that text, never the recording.
• Files & documents — case files, evidence, and opponent documents you upload, plus the documents LegalNib drafts for you.
• App activity — an audit log of actions on your account, used for app functionality, fraud prevention, and security.
• Device identifiers — an Expo push token / Firebase installation ID, so we can deliver hearing reminders and status updates.

We do not collect your location, contacts, SMS, calendar, health data, or browsing history.

Who processes it on our behalf

We use the following service providers to run LegalNib. Each processes data solely to provide their specific function to us — none of them are permitted to use your data for their own purposes.

• Anthropic (United States) — drafts documents, analyses evidence, reads images, and performs quality checks on generated drafts. Your case facts and instructions are sent to Anthropic's API to generate output.
• Razorpay — processes wallet top-up payments.
• Google Firebase — handles sign-in authentication (phone OTP, email link, password, and Google sign-in). Your mobile number reaches Firebase at the moment you request an OTP, which is before you have accepted this notice — there is no way to send the code otherwise.
• Expo (United States) — delivers push notifications to your phone. The notification title and body pass through Expo servers, so a hearing reminder naming a case reaches Expo along with your device token.
• Indian Kanoon — verifies case-law citations that appear in a generated draft. Only the citation string (e.g. a case name/reporter reference) is sent, never your case facts.

Anthropic and Expo process data in the United States; all other listed processors serve Indian customers. We do not sell your data, and we do not share it with anyone beyond the service providers above and as required by law.

Voice typing on the website uses the speech recognition built into your browser. That is the browser maker’s service, not one of our processors: in Chrome and Edge it may send the audio to Google to recognise it. The LegalNib phone app recognises speech on the phone itself. Either way, LegalNib receives only the text.

What leaves LegalNib, and what is masked before it does

Identifiers are masked in text — what you type, what you dictate, and the text read out of a PDF — and cannot be masked in a photograph. The difference is worth knowing before you photograph a document that carries a client identifier.

Case facts you type

Sent to Anthropic (Claude) in the United States to produce your draft. Before they leave, phone numbers, email addresses, Aadhaar numbers, PAN numbers and bank account numbers are replaced with placeholders. Names, postal addresses, dates and case particulars such as FIR and court numbers are not replaced — a draft cannot be written without them.

Photos and images you upload

Sent to Anthropic as pictures, exactly as they are. An image cannot be redacted, so an Aadhaar or PAN card that is visible in a photograph you upload is readable in full. A PDF is different: it is not sent as a picture, and the text read out of it is masked in the same way typed text is.

Voice notes you dictate

Your browser (or, in the app, your phone) turns your speech into text; LegalNib never receives the recording. Only the text is sent, and it is masked like anything you type. In Chrome and Edge, the browser’s speech recognition may send the audio to Google, the browser’s maker, to recognise it — that is the browser’s service, not ours. Firefox and some Safari versions do not offer voice typing.

Masking is a precaution, not a guarantee — it is pattern-matching over text. Beyond the identifiers listed above, nothing about a matter is held back from Anthropic.

Security

All data is encrypted in transit (HTTPS, and TLS to our database). We restrict access to your data to what each service above needs to do its job.

Deletion

You can delete your account at any time from the app (Profile → Delete my account), or by emailing us — see Delete my account for the full process and exactly what's removed.

Your profile, cases, documents, evidence, notes, AI drafting history and uploaded files are deleted permanently. A few records must be kept for longer, either because the law requires it or so that we can answer a legal claim. None of them keeps your name, phone number or email:

• Invoices and wallet transactions — kept for eight financial years, as GST and company law require, then deleted.
• Records of what you consented to — kept for three years after deletion, so we can show what you agreed to if we are asked.
• The activity log — kept for one year from each entry. Entries about filings, payments and account actions are kept for three years, and their IP address is removed after the first year.
• If you received the new-account welcome credit, keyed cryptographic hashes of your phone number, email and Bar Council enrolment number — not the identifiers themselves, and they cannot be reversed back into them. These are kept with no end date, solely to prevent the same person from claiming that credit again.

The same time limits apply while your account is open: activity-log entries expire as above, and in-app notifications are kept for 90 days.

Grievance officer / DPDP contact

For questions, data-access requests, or grievances under India's Digital Personal Data Protection Act, contact grievanceofficer@legalnib.com.