Privacy Policy

1. Who We Are

PeasTech AI Solutions Private Limited (“PeasTech”, “we”, “our”, or “us”), a company incorporated in India with CIN U62013AP2026PTC125341 and registered office at 40-12-5, Flat No. 304, Vijaya Raghava Enclave, Patamata, Vijayawada (Urban) – 520010, Krishna, Andhra Pradesh, India, operates DocketAI — a court case management platform for government legal departments, authorities, and litigation teams. DocketAI tracks cause lists and case statuses, enriches case records from court registries, supports drafting and file movement between officers, and sends hearing alerts.

This Privacy Policy covers the DocketAI platform at https://docket-ai.tech, the WhatsApp notifications the platform sends, and the inquiries you send us through this website. It explains what personal data the platform handles, why, who can see it, how long it is kept, and what rights you have. It should be read together with our Terms of Service.

2. Our Role Under the DPDP Act

DocketAI is deployed by a customer organisation — a government legal department, authority, or litigation team (the “Customer Organisation”) — for use by its officers and staff. Under the Digital Personal Data Protection Act, 2023 (“DPDP Act”), responsibility for personal data is split accordingly:

• For the case and matter data its users enter, process, and act on in the platform — case records, party and counsel names, documents, drafts, notings, and file movements — the Customer Organisation is the Data Fiduciary. It decides what is recorded, who within it may see a record, and how long its matters are retained. PeasTech acts as its Data Processor under contract, handling that data only on the Customer Organisation’s instructions and as needed to operate the platform.
• For user account data, audit and security logs, support communications, and inquiries sent through this website, PeasTech is itself the Data Fiduciary and this Policy applies to that data directly.

If your request concerns a case record, a party name, or anything else inside a Customer Organisation’s matters, that organisation is the fiduciary and decides the outcome; we will help you reach it and will give effect to its instructions. Where we are the fiduciary, we act on your request directly.

3. Personal Data We Handle

3.1 Account data

• Name, official email address, phone number, designation, and the department and division you are posted to.
• Your clearance level on the platform (L0–L8), which determines what you can see and do.
• Login and session records: sign-in times, session tokens, and two-factor authentication enrolment status.

3.2 Case and matter data

• Court records associated with a case: case numbers, cause titles, party names, counsel names, hearing dates, orders, and case statuses.
• Case documents, drafts prepared in the platform, notings recorded on a file, and the file-movement history between officers.
• This data is entered by, or ingested for, the Customer Organisation, which is the Data Fiduciary for it (clause 2).

3.3 Court-registry data from public judicial sources

• The platform collects cause lists, case statuses, and orders from public judicial sources — the Andhra Pradesh High Court, the Supreme Court of India, and eCourts services — to keep case records current and to alert the Customer Organisation to listings that concern it.
• These are publicly available judicial records, published by the courts themselves under law. The DPDP Act’s obligations apply differently to personal data that a person has made publicly available, or that is made publicly available under a legal obligation — as court records are.
• DocketAI presents this data as a working copy for case management. The court’s own record always prevails over data shown in DocketAI. If a registry entry appears inaccurate, the correction lies with the court’s registry, not with us — though we will refresh our copy from the source on request.

3.4 WhatsApp notification data

• The phone numbers hearing alerts and workflow notifications are sent to, the content of those messages, and their delivery status.
• Messages are delivered over the WhatsApp Business Platform through our messaging providers listed in clause 6.

3.5 Technical and audit data

• IP addresses, device and browser type, and operating system.
• Append-only audit logs of actions taken in the platform — who created, changed, moved, promoted, or dispatched a record and when. These logs exist for accountability in a government litigation workflow; no user can edit an audit entry, and any administrative deletion is restricted to the platform operator.
• Scraper and pipeline run logs, which record what was fetched from which court source and whether it succeeded.

4. Why We Handle It

We use personal data only for these purposes:

• To operate the platform — authenticate you, apply your clearance and posting, and run the case-management workflow your organisation has deployed.
• To alert and notify — send hearing alerts, cause-list notifications, escalations, and workflow notifications on the channels your organisation has configured.
• To enrich and assist — keep case records current from court registries, and provide AI-assisted enrichment, summarisation, and drafting as described in clause 5.
• To secure the service — detect abuse and unauthorised access, investigate incidents, and maintain the audit trail.
• To support you — respond to support requests and website inquiries.
• To meet legal obligations — retain required records, respond to lawful requests, and establish or defend legal claims.

We do not sell personal data, we do not use it for advertising, and we do not build advertising profiles.

5. AI Processing

DocketAI uses large language models from Anthropic and OpenAI to assist officers — enriching case records, summarising orders and case histories, and drafting documents.

• Content is sent to an AI provider only when a feature that needs it is invoked, and only the content needed for that request.
• Content submitted to our AI providers is not used to train, fine-tune, or improve their models, under the terms of our agreements with them.
• AI output — an enrichment, a summary, a draft — is a working aid, not a decision and not legal advice. It requires review by the Customer Organisation’s officers before it is relied on or dispatched. No AI feature in the platform makes an automated decision with legal effect on any person.
• AI output is stored alongside the case it relates to and forms part of the Customer Organisation’s matter data.

6. Who Can See Personal Data

6.1 Inside the platform

• Access is governed by a nine-level clearance model (L0–L8) combined with department and division scoping. A user sees only the cases, files, and records that their clearance level and posting allow — an officer in one department cannot browse another department’s matters, and lower clearance levels cannot reach records reserved for higher ones.
• File movement, drafting, and dispatch follow the same model: only the current holder of a file may act on it, and every action is recorded in the audit log.

6.2 Service providers (sub-processors)

We use the following providers to run the platform. Each is bound to handle data only for the stated purpose, to keep it secure, and not to use it for its own purposes.

Some of these providers process data on infrastructure outside India. Such transfers are made under contractual safeguards and in compliance with section 16 of the DPDP Act, which permits transfer to any country the Central Government has not restricted by notification.

6.3 Others

• Legal and regulatory: where disclosure is required by law, a court order, or a competent authority, or is necessary to establish, exercise, or defend legal claims.
• Professional advisers and auditors, under confidentiality.
• Business transfer: if PeasTech is merged or acquired, data may transfer to the successor, which remains bound by this Policy. Affected users will be notified.

7. Security

• Encryption in transit using TLS.
• Passwords are stored only as bcrypt hashes — never in a recoverable form.
• Optional TOTP two-factor authentication on user accounts.
• Clearance-based access control (L0–L8 with department and division scoping) enforced on every route and record.
• Append-only audit logging of administrative and case-file actions — audit entries cannot be edited by any user.
• Infrastructure operated by PeasTech on virtual private servers under our exclusive administrative control, with access restricted to authorised personnel on a need-to-know basis.

No system is completely secure. If a personal data breach is likely to affect you, we will notify you and the Data Protection Board of India as the DPDP Act requires. Report a suspected vulnerability or breach to privacy@docket-ai.tech.

8. How Long We Keep It

When a retention period ends, data is deleted or irreversibly de-identified, and removed from backups on their normal expiry cycle. Where a record is needed for a live legal claim or a statutory obligation, we retain it until the matter is resolved even if erasure has been requested — and we will tell you when that applies.

9. Your Rights

As a Data Principal under the DPDP Act, you have the right to:

• Access — a summary of the personal data held about you and how it is processed.
• Correction and erasure — have inaccurate or incomplete data corrected, and have personal data erased unless retention is required by law or for a purpose that is still live.
• Grievance redressal — complain to our Grievance Officer (clause 13), and then to the Data Protection Board of India if you are not satisfied.
• Nomination — nominate a person to exercise your rights in the event of your death or incapacity.

For data where the Customer Organisation is the fiduciary — case and matter data — your request routes to that organisation, and PeasTech assists it as processor in giving effect to the outcome. Note that court-registry data mirrors the public judicial record, and litigation files of a government organisation are themselves subject to statutory retention that limits erasure.

To exercise a right, email privacy@docket-ai.tech from your registered email address. We may ask you to verify your identity, and we may decline a request that is manifestly unfounded, repetitive, or that would reveal another person’s data. You also have duties under section 15 of the DPDP Act — do not impersonate another person, do not suppress material information, and do not file a false or frivolous grievance.

10. Cookies

DocketAI uses only cookies that are strictly necessary: the authentication session that keeps you signed in. We use no advertising cookies, no cross-site trackers, and no third-party analytics — which is why you see no cookie banner. Blocking essential cookies will prevent you from signing in.

11. Children

DocketAI is a professional tool for government legal departments and litigation staff. It is not directed at children, and we do not knowingly create accounts for anyone under 18. Names of minors may appear inside court records where a court’s own public record contains them; that content is part of the judicial record, and the Customer Organisation handles it under its own legal obligations.

12. Changes to This Policy

We may update this Policy as the platform and the law evolve. Material changes will be announced on this page, and the “Last updated” date above will change. Continued use of the platform after the effective date constitutes acceptance of the updated Policy.

13. Grievance Officer

Under the DPDP Act, 2023 and the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, our Grievance Officer is:

• Name: Poojita Ramineni
• Designation: Grievance Officer & Data Protection Officer
• Entity: PeasTech AI Solutions Private Limited
• Email: grievance@docket-ai.tech
• Phone: +91 96423 66377
• Address: 40-12-5, Flat No. 304, Vijaya Raghava Enclave, Patamata, Vijayawada (Urban) – 520010, Krishna, Andhra Pradesh, India

Grievances are acknowledged within 24 hours and resolved within 15 days of receipt, as the IT Rules 2021 require. If your grievance is not resolved to your satisfaction, you may escalate to the Data Protection Board of India.

14. Contact

Privacy questions: privacy@docket-ai.tech. General inquiries: hello@docket-ai.tech or our contact page. Our support desk is available Monday – Saturday, 9:00 AM – 7:00 PM IST.