Privacy and data processing (DPDP Act, 2023)

Lawyer Diary processes personal data on behalf of law firms, which are the data fiduciaries for their clients. This notice (version 2025-09) describes what we store, where, and how to exercise your rights.

Where data lives

Firms registered in India are stored in AWS Mumbai (ap-south-1). A firm's region is fixed at registration. Backups stay in-region.

Who can see it

Only members of your firm, according to the roles and per-file access your firm sets. Our operators cannot read case data; support access is granted by your firm, time-limited and audited.

Consent and purpose

Client data is processed for representation, billing and case updates. Consent and the notice version are recorded at intake.

Retention and erasure

Retention follows the schedule per case type set by your firm. Erasure produces a certificate. A firm can export everything and leave at any time, including in read-only mode.

Breach notification

Affected persons and the Data Protection Board are notified within 72 hours of confirmation.

Grievance

Write to grievance@lawyerdiary.app. Responses within 30 days.