Privacy
What we collect, why, who else sees it, and how long we keep it. Written to be read — if anything here is unclear, ask us and we will fix the wording.
The short version
We hold your sign-in details, the cases you asked us to track, and your conversations with Munshi. We do not sell any of it, and we do not use it for advertising. Court records themselves are public documents published by the Government of India; the private part is the fact that you are following a particular case, and that is the part we protect.
What we store
Your account
Your name, email address and profile picture, taken from Google when you sign in. Plus whether you told us you are a lawyer, a student or a member of the public, which only changes what the app shows you first.
Cases you track
The case numbers, CNRs and courts you enter, any label you give a case, and the case details we fetch back from the eCourts portals — parties, hearing dates, orders and case history. We re-check these on a schedule so the dates stay current, and we keep each check as a snapshot so you can see what changed.
Munshi conversations
Everything you ask Munshi and everything it answers is saved to our database, along with which case the conversation was about. Two reasons: so a conversation is still there when you come back to it, and so Munshi can be held to what it actually said.
Please treat Munshi as you would any online service — it is a helpful assistant, not a confidential channel to a lawyer, and nothing you tell it is privileged. Your questions are sent to DeepSeek, who generate the replies. They are processed outside India.
We keep conversations for one year after the last message in them, then delete them automatically.
Free lookups, when you are not signed in
The public case-lookup pages allow a few searches per visitor per day. To count them without identifying you, we store a one-way salted hash of your IP address — not the address itself — and discard it after seven days. It cannot be turned back into an IP address by us or by anyone who obtained the table.
Payments
Which plan you are on, its status, and the subscription id Razorpay gives us. Card numbers, UPI IDs and bank details are handled entirely by Razorpay and never reach our systems.
What we do not do
No advertising or tracking pixels, no analytics profiles built on you, no selling or renting your data, and no sharing with anyone beyond the processors listed below.
Who else sees it
These are the only third parties that receive any of your data, and only for the purpose named. They process it on our instructions; none of them may use it for their own ends.
Your name, email address and profile picture, when you choose to sign in with Google.
DeepSeek
The questions you send Munshi, its previous answers in the same conversation, and the details of the case you are asking about.
Razorpay
Your email address and the plan you selected.
2Captcha
Images of the CAPTCHA puzzles shown by the court portals. No information about you or your cases.
Cloudflare
Everything, as our hosting provider — the app and its database run on Cloudflare.
Expo
A push notification token for your device, if you use the Android app.
How long we keep things
- A case you delete — hidden immediately, and permanently erased after 30 days, along with its snapshots and any Munshi conversation about it. The delay is so an accidental deletion can be undone.
- Munshi conversations — one year after the last message.
- Free-lookup IP hashes — seven days.
- Your account — until you ask us to close it. Write to us and we will delete the account and everything attached to it.
Your rights
Under India's Digital Personal Data Protection Act, 2023 you may ask what we hold about you, ask us to correct it, ask us to erase it, and withdraw consent you previously gave. Email hello@nyay.io and we will respond. If you are unhappy with how we handle a request, you may escalate it to the Data Protection Board of India.
Security
Sign-in uses an HttpOnly cookie on the web, which JavaScript on the page cannot read, and a token held in the device keystore in the Android app. Everything travels over HTTPS. Court credentials are never involved — we only read the public eCourts portals, and we never ask for a password to any court system.
Children
Nyay is not intended for anyone under 18, and we do not knowingly collect data from children.
Changes
If we change how we handle your data we will update this page and move the date at the top. Material changes will be announced in the app rather than left here to be discovered.