Privacy Policy

Last updated: 26 July 2026

This Privacy Policy explains how JusticeTrack, operated by Borangi, collects, uses, and protects your personal information. By using the Service you consent to the practices described here.

1. Information we collect

• Account data: name, email, firm name, phone, password (hashed).
• Firm profile: address, PAN, GST, bar council number, bank details for invoices.
• Customer content: case records, client contacts, hearings, tasks, invoices, documents, updates you enter.
• Usage data: log timestamps, IP address, browser type, pages visited.
• Payment data: processed by Razorpay; we store only the transaction reference, not full card details.

2. How we use your information

• To provide, maintain, and improve the Service.
• To authenticate you and secure your account.
• To send transactional emails (invoices, notifications, password resets).
• To process payments via Razorpay.
• To communicate service updates. Marketing emails are opt-in and can be unsubscribed anytime.

3. Legal basis

We process personal data on the basis of contract (to provide the Service you've signed up for), consent (for optional communications), and legitimate interests (fraud prevention, service improvement).

4. Data sharing

We do not sell your personal information. We share data only with:

• Infrastructure providers (Vercel for hosting, Neon for database, Vercel Blob for file storage) — data-processing agreements in place.
• Payment processor (Razorpay) for subscription billing.
• Email service (Resend) for transactional email delivery.
• Law enforcement when legally compelled.

5. Confidentiality of legal work

Case and client information you enter is treated as strictly confidential. Access is restricted to authorized users of your workspace and Borangi personnel strictly on a need-to-know basis for support or security.

6. Data retention

Active account data is retained while your subscription is active. After account termination, data is deleted within 30 days unless you request earlier deletion or export. Some records (invoices, transaction logs) may be retained longer to meet tax and accounting obligations under Indian law.

7. Security

We use industry-standard measures: TLS for data in transit, encrypted database storage, hashed passwords (bcrypt), least-privilege access controls, and regular security reviews. No system is 100% secure — you must also safeguard credentials on your end.

8. Your rights

Under Indian data-protection law (DPDP Act 2023) and applicable regulations, you have the right to access, correct, export, or delete your personal data. Contact privacy@justicetrack.tech to exercise these rights.

9. Children's data

The Service is not intended for use by anyone under 18. We do not knowingly collect data from minors.

10. Cookies

We use essential cookies for authentication and session management. We do not use third-party advertising cookies.

11. International transfers

Data may be processed on servers located outside India by our infrastructure providers. We ensure appropriate safeguards through contractual clauses with those providers.

12. Changes

We will notify you of material changes to this policy via email or in-app notice.

13. Contact

Grievance officer: privacy@justicetrack.tech. We aim to respond within 30 days.