Legal & Disclosures
Privacy Policy
How FindCasesEasily collects, uses, stores, and protects your personal data — including purposes for each category of processing.
Last updated: 1 September 2026
1. Overview
Bot Buddy LLP ("we", "us") operates FindCasesEasily (findcaseseasily.com). This Privacy Policy explains what personal data we collect, why we collect it (purpose), how we use it, and your rights under applicable Indian law, including the Digital Personal Data Protection Act, 2023 (DPDP Act) where applicable.
2. Data We Collect & Purposes
We collect only data reasonably necessary for the purposes below:
| Data category | Examples | Purpose of processing | Legal basis |
|---|---|---|---|
| Account & identity | Name, email address, password hash, Google OAuth profile (if used) | Create and secure your account; authenticate logins; associate saved cases and orders with you | Contract performance; consent at sign-up |
| Professional profile (optional) | Chamber name, bar enrollment, organisation | Personalise retainer onboarding and issue GST invoices | Consent; contract performance |
| Payment & billing | Transaction IDs, amount, GST details, billing name and address | Process payments via Razorpay; issue invoices; handle refunds and chargebacks | Contract performance; legal obligation (tax/accounting) |
| Usage & research activity | Searches, cases viewed, tools used, paid analysis requests | Deliver requested services; improve search relevance; enforce fair-use limits | Contract performance; legitimate interest |
| User-provided matter content | Uploaded pleadings, drafts, or notes for dossier/research orders | Generate the paid research deliverable you requested | Contract performance; consent |
| Support communications | Emails, chat messages, call records | Respond to inquiries; resolve billing or service issues | Contract performance; legitimate interest |
| Technical & security logs | IP address, browser type, device identifiers, timestamps, error logs | Secure the platform; detect abuse; debug outages; comply with lawful requests | Legitimate interest; legal obligation |
| Marketing preferences | Newsletter opt-in, product update consent | Send optional updates about features, blogs, and legal research tips | Consent (opt-in only) |
We do not sell your personal data. We do not use payment card numbers — Razorpay tokenises card data and we receive only transaction references needed for reconciliation.
3. AI & Automated Processing
When you use AI-assisted summaries, case analysis, or chat features, your queries and relevant case context may be sent to third-party AI infrastructure providers under data-processing agreements. Purposes: generate the output you request and improve prompt safety. We instruct providers not to use your content to train public models where configurable opt-outs exist.
4. Cookies & Similar Technologies
We use cookies and local storage for the following purposes:
- Essential: session authentication, security tokens, and load balancing;
- Functional: remember search filters, UI preferences, and dismissed notices;
- Analytics (if enabled): aggregated traffic measurement to improve performance — no cross-site advertising profiles.
You can control non-essential cookies through your browser settings; disabling essential cookies may break login.
5. Sharing & Processors
We share personal data only with:
- Razorpay — payment processing (purpose: collect payments, prevent fraud);
- Cloud hosting providers — store application data in India or compliant regions (purpose: operate the service);
- Email / messaging providers — transactional emails and optional WhatsApp updates (purpose: service communications you request);
- Professional advisers or authorities — when required by law, court order, or to protect rights and safety.
Processors are bound by confidentiality and data-protection terms appropriate to their role.
6. Retention
- Account data: retained while your account is active, plus up to 3 years after closure for dispute resolution;
- Payment records: 8 years for statutory tax and accounting requirements;
- Support tickets: up to 2 years after resolution;
- Server logs: typically 90 days unless needed for a security investigation;
- Uploaded matter files for paid orders: deleted within 90 days of deliverable completion unless you save them to your account.
7. Security
We use encryption in transit (HTTPS/TLS), hashed passwords, access controls, and monitoring appropriate to a legal research SaaS. No method of transmission is 100% secure; report suspected breaches to findcaseseasily@gmail.com.
8. Your Rights
Subject to applicable law, you may:
- Access and obtain a copy of personal data we hold about you;
- Correct inaccurate data;
- Withdraw consent for optional processing (e.g. marketing);
- Request erasure where we have no overriding legal basis to retain;
- Nominate a contact for grievance redressal under the DPDP Act.
To exercise rights, email findcaseseasily@gmail.com. We respond within 30 days.
9. Children
The service is not directed at persons under 18. If we learn we have collected a minor's data without verifiable parental consent, we will delete it.
10. Changes
We will post material updates on this page with a revised "Last updated" date. Significant changes may also be emailed to registered users.
11. Grievance Officer & Contact
Grievance Officer: Data Protection — Bot Buddy LLP
Siliguri, Darjeeling District, West Bengal – 734001, India
Email: findcaseseasily@gmail.com
Phone: +91-9669664421
Response timeline: within 30 days of receipt.