DPDP Consent Notice

Digital Personal Data Protection Act, 2023 — Consent Management

Under the Digital Personal Data Protection Act, 2023 ("DPDP Act"), JurisSetu is required to obtain your free, specific, informed, and unambiguous consent before processing your personal data. This notice explains exactly what data we collect, why we collect it, and how you can control it.

Account Creation Consent

Required

Purpose:

To create and manage your JurisSetu account, verify your identity, and provide platform services.

Data Collected:

Full name, email address, mobile number, password

Retention Period:

Until account deletion

Effect of Withdrawal:

Account will be deactivated upon consent withdrawal

Data Processing for Services

Required

Purpose:

To process your legal queries using AI, store your query history, and provide research results.

Data Collected:

Legal queries, documents uploaded, AI responses, usage data

Retention Period:

5 years from query date

Effect of Withdrawal:

Historical queries will be anonymised upon withdrawal

Payment Data Processing

Required

Purpose:

To process payments, issue invoices, and maintain financial records as required by law.

Data Collected:

Transaction ID, payment amount, payment method (not card details)

Retention Period:

7 years (as required by financial regulations)

Effect of Withdrawal:

Cannot be withdrawn for completed transactions due to legal requirements

Expert Data Sharing

Optional

Purpose:

To share your query details with a verified expert when you book an expert consultation.

Data Collected:

Name, contact details, query details, relevant documents

Retention Period:

Duration of consultation + 2 years

Effect of Withdrawal:

Withdrawal before consultation initiation will cancel the consultation with full refund

Marketing Communications

Optional

Purpose:

To send you legal updates, platform announcements, new features, and promotional offers.

Data Collected:

Email address, mobile number, query category preferences

Retention Period:

Until withdrawal of consent

Effect of Withdrawal:

Unsubscribe from any email or update preferences in dashboard

AI Model Improvement

Optional

Purpose:

To use anonymised, aggregated query data to improve our AI legal research capabilities.

Data Collected:

Anonymised query data (no personally identifiable information)

Retention Period:

5 years from query date

Effect of Withdrawal:

Withdrawal prevents future use; past anonymised data cannot be retrieved

How to Withdraw Consent

• Log in → Dashboard → Profile → Privacy Settings → Manage Consents

• Email privacy@jurissetu.com with "Withdraw Consent" as subject

• Response time: Within 72 hours

• Effect: Within 30 days of withdrawal receipt

Withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal. Some data may be retained for legal compliance even after consent withdrawal.

For questions about your data rights:

privacy@jurissetu.com | grievance@jurissetu.com