Privacy Policy

1. Introduction

Zeptus Pvt. Ltd., operating under the brand name Lawizer (hereinafter referred to as "Lawizer", "we", "us", or "our"), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and disclose information about you when you use our website at www.lawizer.com, our mobile applications, and any associated services (collectively, the "Platform").

By accessing or using the Platform, you agree to the terms of this Privacy Policy. If you do not agree, please discontinue use of the Platform immediately.

2. Definitions

For the purpose of this Privacy Policy:

• "User", "You", "Your" refers to any individual or entity accessing or using the Platform who is competent to enter into binding contracts under the Indian Contract Act, 1872.
• "Personal Data" means any information that can identify you directly or indirectly, such as your name, email address, phone number, or government-issued identification numbers.
• "Sensitive Personal Data (SPD)" means information as defined under the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, including passwords, financial information, health data, and biometric data.
• "Services" refers to all legal, compliance, documentation, and advisory services provided through the Platform.

3. Information We Collect

4. How We Use Your Information

We use your information to:

• Provide, operate, and improve our legal and compliance services.
• Verify your identity and process KYC for government filings (e.g., DSC, DIN, GST registration).
• Communicate service updates, case status notifications, and compliance reminders.
• Send you relevant legal news, guides, and promotional content (you may opt out at any time).
• Process payments and issue invoices.
• Comply with applicable laws, regulations, and court orders.
• Detect and prevent fraud, unauthorised access, and abuse of the Platform.

5. Sharing of Information

We do not sell your personal data. We may share your information with:

• Verified Attorneys and CS/CA Professionals: To provide services you have engaged us for, subject to professional confidentiality obligations.
• Government Authorities: As required for filings with MCA, IP India, GSTN, Income Tax Department, and similar bodies.
• Payment Processors: Razorpay and PhonePe, subject to their respective privacy policies.
• Technology Partners: Cloud hosting providers, CRM systems, and communication tools, all bound by data processing agreements.
• Legal Obligations: When disclosure is required by law, court order, or government authority.

6. Cookies & Tracking Technologies

We use cookies and similar technologies to enhance your experience. Types of cookies we use:

• Essential Cookies: Required for the Platform to function (login sessions, security tokens).
• Analytics Cookies: Google Analytics and similar tools to understand usage patterns (anonymised).
• Marketing Cookies: To serve relevant advertisements on third-party platforms, with your consent.

You can manage cookie preferences through your browser settings. Disabling certain cookies may limit Platform functionality.

7. Data Retention

We retain your personal data for as long as necessary to provide Services and comply with legal obligations. Specifically:

• Account and KYC data: Retained for the duration of the engagement and up to 5 years post-termination, as required under Indian law.
• Financial records and invoices: Retained for 8 years in compliance with the Income Tax Act, 1961 and GST laws.
• Communication records: Retained for 3 years.

Upon your verified request for deletion, we will anonymise or delete data that we are not legally required to retain.

8. Your Rights

Under applicable Indian data protection laws and the Digital Personal Data Protection Act, 2023 (DPDPA), you have the right to:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Erasure: Request deletion of your data (subject to legal retention requirements).
• Grievance Redressal: Raise a grievance with our Data Protection Officer.
• Withdraw Consent: Withdraw marketing consent at any time by emailing admin@lawizer.com.

To exercise any of these rights, write to us at admin@lawizer.com with the subject line "Data Rights Request". We will respond within 30 days.

9. Security

We implement industry-standard security measures including SSL/TLS encryption, access controls, and regular security audits to protect your data. However, no method of transmission over the internet is 100% secure. We encourage you to use a strong password and keep your login credentials confidential.

10. Third-Party Links

The Platform may contain links to third-party websites (e.g., MCA portal, GSTN, IP India). We are not responsible for the privacy practices of these websites. We encourage you to review their privacy policies before providing any personal data.

11. Children's Privacy

Our Services are not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected such data, please contact us immediately and we will take steps to delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law or our practices. We will notify you of material changes by posting the updated policy on the Platform and, where appropriate, by email. Your continued use of the Platform after the effective date constitutes acceptance of the updated policy.

13. Contact Us

For questions, complaints, or Data Rights Requests, contact our Data Protection Officer:

• Email: admin@lawizer.com
• Phone: +91 90628 15535
• Address: Zeptus Pvt. Ltd., Kolkata, West Bengal, India

This policy is governed by the laws of India. Any disputes arising shall be subject to the exclusive jurisdiction of the courts at Kolkata, West Bengal.