What we collect
- Contact form submissions: name, email, company, project description.
- SanadEx brochure requests: name, email, professional role, Bar Council enrolment number where applicable, state, chambers or organisation, and your stated reason for requesting the brochure. Collected only to assess eligibility for the NDA gated pilot.
- Aika conversations: the transcript of any conversation with the concierge widget, keyed by a per session UUID.
- Abuse prevention metadata: with each form submission we retain your country and a one way salted hash of your IP address. The raw IP address is never stored.
- Analytics: aggregate, anonymised request logs for reliability and performance. No third party trackers, no replay tools, no cookies.
Cookies and browser storage
This site sets no cookies. There are no advertising cookies, no tracking cookies, and no third party analytics. Two functional items are kept in your browser’s session storage and clear the moment you close the tab: one stops the Aika concierge greeting you twice in a tab, and one remembers that you have seen our privacy notice. Nothing is written to long term local storage on your device.
The data you choose to send us is processed on servers we operate, not in your browser: Aika conversations on Cloudflare KV for 30 days, and form submissions in a database we operate for 24 months. What we collect and how long we keep it are set out above.
Sub processors
Aika sends each message to Anthropic, through Claude Haiku 4.5, by way of a Cloudflare Worker we operate. Anthropic processes those messages under its own privacy commitments. A conversation can be carried to a contact note when you choose; the summary travels with you.
Form notifications are delivered through Resend, and form submissions are stored on Cloudflare infrastructure. Each processes this data only to provide that function.
Retention
- Contact form submissions: 24 months.
- SanadEx brochure requests: 24 months.
- Aika conversations: 30 days, after which they are deleted.
- Conversations that touch distress signals are not stored at all.
Data principal rights (DPDP Act 2023)
You may exercise rights of access, correction, erasure, portability, consent withdrawal, and grievance redressal. Write to [email protected]. We respond within 30 days.
Security
Form submissions are held in a structured database we operate on Cloudflare infrastructure, written before any notification email is sent so a message is never lost in transit. Access, correction, erasure, and export are actioned against that single record, and a submission is deleted automatically once its retention period ends. See security and data protection for the full posture.
Governing law
Digital Personal Data Protection Act 2023 (India) and Information Technology Act 2000. Jurisdiction: Koraput District, Odisha.