Privacy Policy

1. Controller and processor

For the data your firm enters about its own clients, matters and staff, your firm is the controller and LawbizOS is the processor: we hold and process that data on your instructions to run the service. For the limited account data we need to operate LawbizOS (see below), we are the controller.

2. Information we collect

• Account data: the name, email and phone number used to create and manage a firm and its users.
• Firm data: everything your firm records in the workspace, including clients, matters, hearings, invoices, payments, expenses, employee records and documents you upload.
• Usage data: basic technical logs, such as sign-in events and errors, needed to keep the service secure and working.

3. How we use it

We use account and firm data only to provide the service to your firm: to run your workspace, generate your reports and reminders, keep it secure, and support you. We use usage data to diagnose problems and improve reliability. We do not sell your data, we do not advertise to you, and we do not use one firm’s data to serve another.

4. Where your data is stored

Your data is hosted in India, in the Mumbai region of our cloud infrastructure provider. It is isolated per firm at the database level, so one firm can never read another firm’s rows.

5. How we protect it

Access to firm data is controlled at the database with row-level security, and further limited inside each firm by role: owners see the whole firm, employees see only what they are assigned, and financial and payroll details are restricted. Data is encrypted in transit, documents are stored privately with short-lived access links, and access to our systems is limited to what is necessary to run the service.

6. Sharing and sub-processors

We share data only with the infrastructure providers needed to run LawbizOS (hosting, database, authentication and error monitoring), each bound to protect it and to process it only for us. We may disclose data if the law requires it. We do not otherwise share your firm’s data with anyone.

7. How long we keep it

We keep your firm’s data for as long as your firm uses LawbizOS. If a subscription lapses, your data is retained, not deleted, so you can return or export it. When your firm closes its account, we remove its data from active systems within a reasonable period, except where we must keep something to meet a legal obligation.

8. Your rights and choices

You can access and correct your firm’s data at any time inside the app, and export everything your firm holds from Settings whenever you want it. If you are a client of a firm using LawbizOS and want to access or correct your personal data, please contact that firm, which is the controller of it; we will support them in responding.

9. Cookies

We use only the cookies needed to keep you signed in and to keep the service secure. We do not use advertising or third-party tracking cookies.

10. Children

LawbizOS is a tool for law firms and is not intended for use by children. We do not knowingly collect data from anyone under 18 in their own capacity.

11. Changes to this policy

We may update this policy as the service changes. We will post the updated version here with a new date, and for significant changes we will make a reasonable effort to tell you.

12. Contact and grievances

For any question about your data, or to raise a grievance under applicable Indian data protection law, write to us at support@lawbizos.in and we will respond within the time the law requires.