Privacy Notice
Version 2026-10-20 · Last updated: 20 October 2026 · हिंदी सारांश
IVS LawDesk (the Android app, the website ivslawdesk.com and its web pages) is provided by IVS Softtech Private Limited, Kanpur, Uttar Pradesh, India (“we”, “us”). This notice is given under the Digital Personal Data Protection Act, 2023 and the DPDP Rules, 2025. It tells you, item by item, what personal data we process, why, and how you can use your rights. We ask for your consent when you create an account (and again when this notice changes in an important way). You can withdraw consent at any time, as easily as you gave it.
1. What we collect and why
| Data | Why we need it |
|---|---|
| Mobile number (verified by OTP) | Your login and account identity; one free trial per number |
| Name and State | To create your account and address you |
| Email, residential address, PIN, district, office address, Bar Registration No. and year | To confirm you are an advocate and to issue payment receipts — needed before buying a plan |
| Profile photo (optional) | Shown on your account; helps our support team recognise genuine accounts |
| Your practice data — clients' names and phone numbers, cases, hearing dates, fees and payments | To provide the service: show hearings, send reminders, keep fee records, and back them up so you don't lose them |
| A one-way hash of your device ID, and a one-way keyed hash of your mobile number | Only to allow one free trial per device and per number. Neither can be turned back into the original |
| Payment records — order ID, payment ID, amount, date | To activate plans and SMS packs, issue receipts and meet tax law. We never see your card, UPI PIN or bank details |
| App version and last-opened date | To tell you about important updates and to support you |
| App and website usage counts (screens opened, buttons used) | To improve the product. No name, number, email or client details are included |
| Your consent record — which version of this notice you agreed to, and when | To prove your consent, as the law requires |
We do not sell your data or your clients' data, we do not show ads, and we do not use your data for advertising or profiling.
2. Your clients' data
When you store your clients' details in IVS LawDesk, you decide what is stored and why — under the DPDP Act you are the Data Fiduciary for that data, and we act as your Data Processor: we store it, back it up and send the reminder SMS you switch on, only on your instructions and for no other purpose. You are responsible for having your clients' consent (or another lawful ground) to store their details and to send them reminders. If a client asks you to remove their details, delete that client in the app.
3. Where your data is stored and how it is protected
- In India. Your account and backup are stored on Google Cloud (Firebase) servers in Mumbai, India.
- Encrypted in transit (HTTPS/TLS) and at rest on our servers.
- Only you can open your data. Each account is walled off by security rules on the server; another advocate cannot read it even when logged in.
- On your phone: app version 1.2.5 and later keep your data in an encrypted database and offer an app lock (PIN / fingerprint).
- On the web: your browser keeps only your login session (so you stay signed in) — your practice data is not saved in the browser. You are logged out automatically after 30 minutes without activity, which helps on shared computers. We use no advertising cookies.
- Staff access: our admin screens show counts only, not your clients or cases. An authorised IVS support person may look at your data only to fix a problem you reported; such access is logged.
- Logs: we keep security and access logs for at least one year, as the DPDP Rules require.
4. Who processes data for us
- Google Firebase / Google Cloud — login, database, file storage (servers in India), reCAPTCHA on website login, usage counts (Firebase Analytics, Google Analytics — no name, number or email).
- Razorpay — payment processing on our website.
- MSG91 (Walkover Web Solutions) — delivery of SMS reminders under our DLT-registered sender ID IVSLAW.
- YouTube — our promo video is shown in privacy-enhanced mode (youtube-nocookie.com): nothing loads from YouTube until you press play.
- We may disclose data if required by Indian law or a court order.
These companies process data only to provide their service to us, under their data-protection terms.
5. How long we keep it
- While your account exists, we keep your data so the service and backup work.
- If you delete your account, your account, clients, cases, hearings, fees and photo are deleted from our servers straight away. Backup copies kept by our cloud provider expire within its normal cycle.
- If an account has no active plan and has not been used for 3 years, we will send you a notice at least 48 hours before deleting it, so you can log in or download your data.
- Payment and invoice records are kept for 8 years, as Indian tax law requires. A one-way keyed hash of your mobile number and of your device (not the number itself) is kept for 2 years only to stop repeat free trials.
6. Your rights — and how to use them
| Your right | How |
|---|---|
| Know and get a copy of your data | My Account → Your data & privacy → Download all my data (or CSV files). Instant, free. |
| Correct or update your data | Edit your profile in the app or in My Account; edit or delete any client, case or fee entry in the app. |
| Withdraw consent / erase your data | App: Account → Delete account. Web: My Account → Withdraw consent & delete my account. Or write to us. Withdrawing consent stops the service for your account; it does not affect processing done before. |
| Nominate someone | You may nominate a person to use these rights for you in case of death or incapacity — email us with their name and mobile number. |
| Grievance | Contact our Grievance Officer (below). We acknowledge within 7 days and resolve within 30 days at the latest. |
| Complain to the Board | If you are not satisfied with our reply, you can complain to the Data Protection Board of India. |
7. If something goes wrong
If there is ever a personal data breach affecting your account, we will tell you without delay — what happened, what data was involved, what we are doing and what you can do — and we will report it to the Data Protection Board of India as the law requires.
8. Children
IVS LawDesk is for practising advocates and their offices. It is not meant for anyone under 18, and we do not knowingly create accounts for them.
9. Grievance Officer / contact for your rights
Alok Ranjan Singh, Director, IVS Softtech Private Limited, Kanpur, Uttar Pradesh · contact@ivssofttech.com · +91 94507 46793
10. Changes to this notice
We post every change here with a new version and date. If a change affects how we use your data, the app and website will ask for your consent again before you continue.
हिंदी सारांश
IVS LawDesk आपका नाम, मोबाइल नंबर, प्रोफ़ाइल और आपके केस, क्लाइंट, सुनवाई व फीस का डेटा सिर्फ़ यह सेवा चलाने के लिए रखता है। डेटा भारत में सर्वर पर, encrypted रूप में रखा जाता है और सिर्फ़ आप उसे देख सकते हैं। हम आपका या आपके क्लाइंट का डेटा न बेचते हैं, न विज्ञापन के लिए इस्तेमाल करते हैं। आप कभी भी My Account में जाकर अपना पूरा डेटा डाउनलोड कर सकते हैं, सुधार सकते हैं, या सहमति वापस लेकर अकाउंट और डेटा डिलीट कर सकते हैं। शिकायत के लिए: contact@ivssofttech.com / +91 94507 46793 — 7 दिन में जवाब। यह सारांश है; पूरी जानकारी ऊपर अंग्रेज़ी में है।