Draft for legal review. This text is a working template and is not yet the final agreement.

Privacy Policy

Legal CRM · version 2026-10

This policy covers personal data Legal CRM handles about the people who use the service (lawyers and staff of our customer firms) and visitors to this website. Client data that firms put into their workspace is handled under the Data Processing Agreement: for that data the firm is the Data Fiduciary under the Digital Personal Data Protection Act, 2023, and we are its Data Processor. Each firm publishes its own notice to its clients.

What we collect about users

• Account details: name, work email, mobile number, role, and the firm you belong to.
• Security data: sign-in times, IP addresses and device type for active sessions, two-step verification status, and audit records of actions taken.
• Billing contacts and GST details for invoices.
• Support conversations with us.

Why

To provide and secure the service, invoice the firm, send account and service emails (which you can partly switch off), and improve the product using aggregate usage counts that contain no client content.

Where and how long

Stored on servers in India, encrypted. Account data is kept while the firm’s workspace exists and deleted when it closes, except invoices, which we keep as tax law requires.

Who we share it with

Only the service providers listed on our sub-processors page, under contracts that protect it. We do not sell personal data and do not use it to train AI models.

Your rights

You can ask to access, correct or erase your data, and to withdraw consent, by writing to us. You may also complain to the Data Protection Board of India.

Grievance officer

Write to support@corp8labs.com with “Grievance” in the subject. We acknowledge within 48 hours.