Privacy Policy
What you can do here
- We do not store documents you paste or upload
- Accounts are encrypted at rest
- No third-party advertising or data selling
- DPDP Act 2023 compliant
The short version
We collect your account details and the questions and documents you give us, only to provide the service. Documents you upload are processed in real time and are not stored on our servers. To answer you and read those documents, your content is sent to Google's Gemini API, our AI sub-processor. We never sell your data. And like every Indian service, we must comply with valid legal and government orders — we cannot promise your data is beyond lawful access, and we would rather say so than imply otherwise.
What we collect, and where it is kept
Three things. Account information — your name and email at sign-up, handled by Google Firebase Authentication. Content you provide — questions you type, form inputs, and files you upload such as Form 16, GST notices or bank statements. And local preferences — your theme choice and any compliance reminders you set, which are stored in your own browser's local storage rather than on our servers. Account data is kept until you ask us to delete it; uploaded documents are not retained at all.
Our sub-processors, stated honestly
Google Firebase handles sign-in and authentication. The Google Gemini API receives your questions and uploaded documents to analyse them and return an answer. Anthropic is used only as a fallback when the primary AI is unavailable. One caveat we would rather state than bury: AI providers process your content under their own terms, and on some Google API tiers submitted data may be used by Google to improve its services. Until we complete the move to a tier with stronger commitments, avoid uploading anything you would not share with a third-party processor.
Security, and the limit of it
Traffic runs over HTTPS/TLS, account data stored with Firebase is encrypted at rest by Google, uploads are not saved on our servers, rate limiting and access controls are in place, and API keys are held server-side and never exposed to your browser. The honest limit is this: it is not end-to-end encryption. Our AI has to read your documents in order to help you, so your content is processed in readable form by us and by our sub-processors, and it may be subject to lawful disclosure.
Your rights under the DPDP Act 2023
As a Data Principal in India you may access a summary of the personal data we process about you, correct or complete inaccurate data, have data erased once it is no longer needed, nominate another person to exercise your rights, withdraw consent at any time, and raise a grievance and have it addressed. To exercise any of these, or for any privacy question, email our Grievance Officer at privacy@onefiling.in. We do not use third-party tracking cookies, and the service is intended for adults.
Frequently asked questions
Does India Law Simplified store my documents?
No — documents you paste or upload are processed in real time and not stored after your session.
How is account data protected?
Account data is encrypted at rest and in transit using industry-standard encryption.
More free tools
Related reading
India Law Simplified is an AI-assisted research & drafting tool, not a substitute for a licensed advocate or CA. Verify all figures and steps with a professional before acting.