Privacy Policy

LegalNib ("we", "us") is an AI-assisted legal drafting platform for licensed advocates practising in India, operated by Metamersist Technologies Pvt. Ltd. This policy explains what we collect, why, who we share it with, and how to have it deleted.

What we collect

• Personal info — name, email, phone number, and an account/user ID (Firebase UID). A verified mobile number is required to create a LegalNib account; email, a password, and/or Google sign-in are optional additional ways to sign in to that same account afterward — none of them can create a new account on their own. If you use Google sign-in, we receive the name and email your Google account already shares publicly with apps you authorize; if you set a password, we never see or store it — Firebase handles password authentication directly.
• Financial — wallet transaction / purchase history. We never see your card, UPI, or bank details — Razorpay's checkout handles payment info directly and we only receive a confirmation of success.
• Photos — evidence and document images you choose to capture or upload, optional.
• Voice recordings — voice notes you dictate; these are transcribed and the resulting text transcript is stored (not the raw audio, beyond what's needed to produce the transcript).
• Files & documents — case files, evidence, and opponent documents you upload, plus the documents LegalNib drafts for you.
• App activity — an audit log of actions on your account, used for app functionality, fraud prevention, and security.
• Device identifiers — a push notification token / Firebase installation ID, so we can deliver hearing reminders and status updates.

We do not collect your location, contacts, SMS, calendar, health data, or browsing history.

Who processes it on our behalf

We use the following service providers to run LegalNib. Each processes data solely to provide their specific function to us — none of them are permitted to use your data for their own purposes.

• Anthropic (United States) — drafts documents, analyses evidence, reads images, and performs quality checks on generated drafts. Your case facts and instructions are sent to Anthropic's API to generate output.
• Sarvam AI (India) — transcribes voice notes into text. The recording itself is sent, not a transcript.
• Razorpay — processes wallet top-up payments.
• Google Firebase — handles sign-in authentication (phone OTP, email link, password, and Google sign-in) and push notification delivery.
• Indian Kanoon — verifies case-law citations that appear in a generated draft. Only the citation string (e.g. a case name/reporter reference) is sent, never your case facts.

Anthropic processes data in the United States; all other listed processors serve Indian customers. We do not sell your data, and we do not share it with anyone beyond the service providers above and as required by law.

What leaves LegalNib, and what is masked before it does

Identifiers are masked on one of these three routes and cannot be on the other two. The difference is worth knowing before you photograph a document that carries a client identifier.

Case facts you type

Sent to Anthropic (Claude) in the United States to produce your draft. Before they leave, phone numbers, email addresses, Aadhaar numbers, PAN numbers and bank account numbers are replaced with placeholders. Names, postal addresses, dates and case particulars such as FIR and court numbers are not replaced — a draft cannot be written without them.

Photos and images you upload

Sent to Anthropic as pictures, exactly as they are. An image cannot be redacted, so an Aadhaar or PAN card that is visible in a photograph you upload is readable in full. A PDF is different: it is not sent as a picture, and the text read out of it is masked in the same way typed text is.

Voice notes you record

Sent to Sarvam AI in India to be transcribed. The recording leaves unredacted — masking can only run on the text that comes back, which is after the audio has already been sent.

Masking is a precaution, not a guarantee — it is pattern-matching over text. Beyond the identifiers listed above, nothing about a matter is held back from Anthropic or Sarvam AI.

Security

All data is encrypted in transit (HTTPS, and TLS to our database). We restrict access to your data to what each service above needs to do its job.

Deletion

You can delete your account at any time from the app (Profile → Delete my account), or by emailing us — see Delete my account for the full process and exactly what's removed.

One exception: after deletion, we retain a keyed cryptographic hash of your phone number/email — not the phone number or email itself, and it cannot be reversed back into either — solely to prevent the same person from repeatedly claiming a new-account signup bonus. No other data survives deletion.

Grievance officer / DPDP contact

For questions, data-access requests, or grievances under India's Digital Personal Data Protection Act, contact support@metamersist.com.