Privacy Policy

1. Introduction

NoticeKavach ("we", "our", "us") is committed to protecting your personal data and privacy. This Privacy Policy explains how we collect, process, store, and safeguard the information you provide when you use our AI-powered notice decoding and compliance platform, in compliance with the **Digital Personal Data Protection (DPDP) Act, 2023** (India) and other applicable data protection regulations.

2. Information We Collect

We collect and process the following categories of personal data:

• Account Information: Your name, email address, and authentication credentials when you sign up or log in via Firebase Authentication.
• Uploaded Documents: Legal and tax notices, bank demand letters, and other documentation you upload to decode or generate reply drafts.
• Payment and Billing Data: Transaction details processed securely via Razorpay. We do not store full credit card numbers or banking credentials on our servers.
• Usage Data: Information about how you interact with our platform to manage notice history, exports, and active billing plans.

3. Data Storage and Localization

All user data, document uploads, and decoded compliance reports are hosted and stored securely in the asia-south1 (Mumbai, India) region of Firebase Storage and Firestore. This ensures that your data remains localized within India, complying with national data governance frameworks and ensuring low-latency, high-security access.

4. AI Processing & Gemini Integration

To provide notice decoding, deadline extraction, and reply draft generation, your uploaded notices are processed securely using Google Gemini AI models.

• Your data is used solely to generate summaries and reply drafts for your active session.
• We do not permit the AI model providers to use your uploaded notices or personal data to train public foundation models.
• We strongly recommend that users redact sensitive personal identifiers (such as Aadhaar, PAN, or health records) from notices before uploading them, unless necessary for the draft reply context.

5. Cookies and Session Management

NoticeKavach utilizes secure, functional cookies and local storage tokens. These cookies are used exclusively to manage your authenticated user sessions, maintain login status, and preserve system settings. We do not use tracking or advertising cookies to profile your behavior across third-party websites.

6. Your Rights under the DPDP Act, 2023

As a Digital Nagrik (Data Principal), you hold the following statutory rights under the Digital Personal Data Protection Act, 2023:

• Right to Information: Access a summary of the personal data we hold about you and the processing activities undertaken.
• Right to Correction and Erasure: Correct inaccurate data or request the permanent deletion of your documents and account information. You can request deletion of any notice from your dashboard.
• Right to Withdraw Consent: Withdraw your consent for data processing at any time. (Note: withdrawing consent may limit our ability to provide services to you).
• Right of Grievance Redressal: File a grievance regarding our data practices. We will respond to your queries within the statutory timeline.

7. Data Retention

We retain your account details and document history only as long as your account is active or as required to fulfill our contractual obligations. You may permanently delete your notices or delete your account, which will trigger the immediate cleanup of related files from our Firestore and Firebase Storage buckets.

8. Contact & Grievance Officer

If you have questions about this policy, want to exercise your erasure rights, or need to contact our Grievance Officer under the DPDP Act, please email us at privacy@noticekavach.com.