MyValik is committed to protecting your privacy. This policy explains what information we collect, how we use it, and what rights you have over it. It applies to all users of the MyValik website and services.
1. Who we are
MyValik is a legal technology platform serving enrolled advocates across India. For the purposes of the Digital Personal Data Protection Act, 2023, we are the Data Fiduciary in respect of your personal data.
For general queries: hello@myvalik.in
For privacy and grievances: grievance@myvalik.in
2. Information we collect
We collect the following information when you sign up and use MyValik:
- Name, email address, and phone number. Your phone number is used to deliver WhatsApp hearing reminders (if you subscribe to the WhatsApp Cause List plan) and to verify your identity via OTP
- District and court details you provide
- Practice profile details you choose to add — years of experience and practice areas
- Case and hearing data pulled from eCourts based on the case numbers (CNRs) you enter
- Judgment bookmarks and search history within the platform
- Payment information (processed by our payment partner — we do not store card details)
- Device type and browser information for technical support
- Usage and engagement records — which pages you open, and a daily count of how many times you were active on the platform, recorded against your account while you are logged in. This is first-party measurement stored on our own servers in India; we do not use third-party advertising or cross-site tracking. See section 3 for why we keep it.
- WhatsApp delivery records — if you subscribe to the WhatsApp Cause List, we log each reminder sent to your number (delivery status, hearing date, number of cases bundled) and any reply you send back to our WhatsApp number, so that replies are not lost and so we can prove or troubleshoot delivery
About data you enter on behalf of your clients: MyValik is designed to track cases by court case number and CNR — not by client identity. We ask that you do not enter your clients' personal names, contact details, or other identifying information into bookmark labels, matter notes, or any free-text field. You remain solely responsible for any client information you choose to input, and for ensuring you have the lawful authority to do so.
3. How we use your information
- To provide the cause list and judgment search services you subscribed to
- To send hearing reminders via WhatsApp (only if you have subscribed to that service)
- To verify your identity when you sign up or log in, using a one-time password (OTP) sent to your phone number or email
- To process payments and generate invoices
- To respond to your support queries
- To improve the platform based on usage patterns — we look at which sections advocates actually use (for example, whether the Library is used more than Judgment Search) to decide what to build and fix next
- To measure whether the platform is working for you — the engagement records described in section 2 tell us if an account has gone unused so we can offer help, and let us recognise and reward regular users
We do not sell your data to third parties. We do not use your data for advertising.
We do not profile your professional ability. We do not score, rank, or grade you as an advocate, and we do not share any usage information about you with any other user, employer, bar association, or third party. If we ever build a feature that assesses your work in order to assist you, we will ask for your separate, specific consent first and tell you plainly what it does.
4. Where your data is stored, and when it leaves India
Your account, your cases, and your bookmarks are stored in India. Our databases and file storage run on Google Cloud Platform in the Mumbai region (asia-south1). That is where your personal data lives at rest.
AI processing also happens in India. When you open an AI summary, the judgment text is processed by Google Cloud Vertex AI in the same Mumbai region.
Some of the specialist services we use to actually run the platform — sending you an email, catching a crash, blocking bots, delivering a WhatsApp reminder — are operated by companies outside India, and personal data necessarily passes through them. We think you should know that plainly rather than read a blanket promise we cannot keep. Section 5 names every one of them, what it receives, and which country it processes in.
Under section 16 of the Digital Personal Data Protection Act, 2023, transferring personal data outside India is permitted except to countries the Central Government has restricted by notification. We do not transfer personal data to any restricted country, and we will stop any transfer that becomes restricted. Where a service offers an India-hosted option that meets our needs, we use it.
5. Third-party services (Data Processors)
We use the following third-party services to operate MyValik. Each operates as our Data Processor for the limited purpose described, and is bound by a data processing arrangement requiring them to handle your data in accordance with applicable law. We have named each one, and the country it processes in, so you can judge for yourself:
- Google Cloud Platform — Mumbai, India (asia-south1). Our database and file storage. Holds your account, cases, bookmarks and everything else described in section 2.
- Vercel Inc. — United States. Hosts and serves the website. Every request you make passes through Vercel, so it processes your IP address, the pages you request, and server logs. It is not used to store your data at rest.
- Google Cloud Vertex AI (Gemini) — Mumbai, India (asia-south1). Produces the AI summary and analysis of a judgment, when you open one. The only thing sent is the published text of that judgment, which is already a public court record. We do not send your name, email, phone number, case list, bookmarks, or payment information, and we do not send your search queries — judgment search runs entirely on our own servers, with no AI involved.
- Meta Platforms (WhatsApp Business Cloud API) — United States and Meta’s global infrastructure. Delivers hearing reminders (WhatsApp Cause List and Bundle subscribers only). Receives your phone number and the reminder content, which includes your hearing date and case numbers. If you reply to our WhatsApp number, Meta processes that reply before it reaches us.
- Resend — United States. Sends our transactional email: verification, password reset, welcome, and service announcements. Receives your name and email address, and the content of the message.
- Sentry (Functional Software, Inc.) — United States. Records technical errors so we can fix crashes. Receives diagnostic data about the failure, which can include the page URL you were on and your IP address. It is not used for analytics or tracking.
- Cloudflare, Inc. — United States and global. Provides the anti-bot check on our contact and signup forms. Receives your IP address for that check only.
- Google LLC (Google Sign-In) — United States and global. Only if you choose to sign in with Google. We receive your name, email address and profile picture from Google; Google is told that you signed in to MyValik.
- Razorpay Software Private Limited — India. Handles payments and invoicing. Card and bank details go directly to Razorpay; MyValik never sees or stores them.
- eCourts (ecourts.gov.in), National Informatics Centre — India. Public court data fetched on your behalf using the case identifiers you add to your dashboard. This includes the court orders and proceedings shown in “Case Orders”, which are reproduced verbatim from the public eCourts record. MyValik does not independently store or process any personal data contained in those records beyond what is necessary to display them to you for the case you track.
We do not use any third-party analytics, advertising, or session-recording service. The usage measurement described in section 2 is entirely first-party and stays on our own servers in India.
6. Your rights and how to use them
Under the DPDP Act, 2023, you have the right to:
- Access the personal data we hold about you
- Correct or update inaccurate personal data
- Request deletion of your account and associated personal data
- Withdraw consent for data processing
- Nominate another person to exercise these rights on your behalf in the event of your death or incapacity
- Lodge a grievance with us, and escalate to the Data Protection Board of India if not satisfactorily resolved
How we collect your consent: Your consent is collected at sign-up when you accept these terms and the Privacy Policy. Consent is specific to the services you subscribe to, and is recorded against your account.
How to withdraw consent or exercise any right: Email us at grievance@myvalik.in. We will acknowledge within 48 hours and resolve within 7 working days. Withdrawing consent will result in suspension of your account, since the consent is required to deliver the service. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
7. Data retention
We retain your data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law (e.g. financial records for 7 years as required under Indian tax law).
When you delete your account we remove your profile, your cases and hearing data, your bookmarks, your notifications, your login history, and your WhatsApp delivery and reply records. Three things deliberately survive deletion, and we would rather spell them out than bury them. Each exists to answer one narrow question and is used for nothing else:
- A keyed fingerprint of your email address and phone number. This prevents repeat use of one-time offers such as the free trial, and is retained for as long as our one-trial-per-advocate policy is in effect. The fingerprint is derived using a server-held secret and cannot be reversed into your email or phone number by anyone without that secret. It remains personal data under the DPDP Act and is used solely to check, at signup, whether a free trial was already availed on a matching email or phone number — never for any other purpose, and never shared.
- Your WhatsApp opt-out, if you sent us STOP. If you asked us to stop sending WhatsApp reminders, we keep that instruction after deletion, stored against your phone number. To be exact: this is the one retained record that holds the number itself rather than a fingerprint of it, because the instruction has to be matched before any message is sent. We keep it precisely so that your instruction is honoured — if we forgot it, a later signup on the same number would start receiving reminders again, which is exactly what you told us not to do. You can ask us to erase this record at the address in section 12 — but if you do, and you sign up again on the same number, you will need to send STOP again.
- Your email unsubscribe, if you clicked it. Same reasoning as the WhatsApp opt-out, for announcement email: we retain a one-way fingerprint of your address — not the address itself — so that a later signup does not quietly resume mail you asked us to stop. It is used for nothing but that check. As above, you can ask us to erase it at the address in section 12.
Financial records (invoices and payment references) are retained for 7 years where Indian tax law requires it, as noted above. Anonymous website traffic counts, which are not linked to your account or to you, are not personal data and are not affected by deletion.
8. Children’s data
MyValik is a professional tool available only to advocates enrolled under the Advocates Act, 1961. It is not directed at children, and we do not knowingly collect the personal data of any person under the age of 18. We do not undertake any tracking, behavioural monitoring, targeted advertising, or profiling directed at children. If you believe a person under 18 has created an account, write to us at the address in section 12 and we will delete it.
9. Cookies
We use session cookies strictly to keep you logged in. We do not use tracking cookies or advertising cookies.
10. Data breach notification
In the event of a personal data breach affecting your information, we will notify you and the Data Protection Board of India within the period required under the DPDP Act, 2023, and applicable rules. Our notice will describe the nature of the breach, the categories and approximate volume of data affected, the likely consequences, and the steps we have taken or propose to take to address it.
11. Changes to this policy
If we make material changes to this policy, we will notify you by email at least 14 days before the change takes effect. Continued use of MyValik after that date constitutes acceptance of the updated policy.
12. Grievance Officer
For any privacy-related concern, complaint, or request to exercise the rights described above, please contact our Grievance Officer:
Name: Arif Zakaria
Email: grievance@myvalik.in
Acknowledgement within 48 hours · Resolution within 7 working days
For all other queries, write to hello@myvalik.in.