Privacy Policy

1. Who we are

Unknown Verdict is operated by The Advocacy — A Law Firm, a law firm registered with the Bar Council of Delhi (Advocate Registration No. D-180-2017). The firm is the data fiduciary for the purposes of the Digital Personal Data Protection Act, 2023 ("DPDPA") and the data controller for the purposes of the EU General Data Protection Regulation ("GDPR"), where applicable.

Contact for privacy matters: upmanyu@advocacyalawfrim.in

2. What this application does with your data

When you submit a query to the search interface:

• The query string is sent to the retrieval engine over HTTPS.
• The engine searches a local full-text index built from public legal documents.
• Matching chunks are returned with their source filename, page number, and a content hash.
• The query string is redacted of personally identifiable information (Aadhaar, PAN, phone number, email address, CNR number, GSTIN, IFSC, and bank account number) before being written to the audit ledger.

The engine does not call any external service. There is no OpenAI, no Anthropic, no Google, no third-party LLM. The only outbound network calls are none — the engine is offline by design.

3. Data we collect

4. What we do not do

• We do not sell or rent your data to any third party.
• We do not share your queries with any external LLM provider.
• We do not use your queries to train any model.
• We do not use cookies, fingerprinting, or cross-site tracking.
• We do not serve advertising.
• We do not profile you for marketing or automated decision-making.

5. Legal basis for processing

Under the DPDPA, we process query text on the basis of legitimate use (Section 7) — the operation of a retrieval tool that returns publicly available legal text. Redacted query strings are retained solely for audit and integrity purposes.

Under the GDPR, our legal basis is legitimate interest (Article 6(1)(f)) — providing a functional legal research tool with a verifiable audit trail.

6. Your rights

Under the DPDPA you have the right to:

• Access the personal data we hold about you.
• Correct any inaccurate personal data.
• Erase your personal data, subject to any legal retention requirement.
• Grievance redressal — see Section 8 below.
• Nominate another individual to exercise your rights in the event of death or incapacity.

Under the GDPR you additionally have the right to data portability, restriction of processing, and objection.

To exercise any of these rights, email upmanyu@advocacyalawfrim.in. We will respond within 30 days.

7. Data security

• All traffic to the retrieval engine uses HTTPS.
• Query text is PII-redacted before it reaches the audit log.
• The audit log is hash-chained; any tamper is detectable.
• The retrieval engine runs on infrastructure controlled by us; no client data is processed outside that infrastructure.

8. Grievance Officer

In accordance with Rule 3(2) of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, the following officer is designated:

• Name: Upmanyu Kumar, Advocate
• Designation: Grievance Officer
• Email: upmanyu@advocacyalawfrim.in
• Address: The Advocacy — A Law Firm, Delhi

The Grievance Officer acknowledges complaints within 24 hours and resolves them within 15 days of receipt.

9. Changes to this policy

We will update this page whenever our data practices change. The "last updated" date at the top reflects the most recent revision. We will not change the substance of this policy without prominently notifying users.

10. Jurisdiction

This policy is governed by the laws of India. Any dispute arising under it is subject to the exclusive jurisdiction of the courts at Delhi.