Privacy Policy

Last updated: 20 June 2026

This Privacy Policy describes how Vaksera (“Vaksera”, “we”, “us”, “our”) collects, uses, stores, shares, and protects personal information when you access or use the Vaksera website and related services at https://vaksera.com (collectively, the “Platform”).

By registering, browsing, or using the Platform, you acknowledge that you have read this Privacy Policy. If you do not agree, please do not use the Platform.

1. Scope and applicability

This policy applies to visitors, registered users, advocates, and anyone who contacts us through the Platform or support channels. It does not apply to third-party websites linked from Vaksera (including payment gateways, social networks, or advocate-owned sites), which have their own privacy practices.

We process personal data in accordance with applicable Indian law, including the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and rules thereunder, as applicable.

2. Definitions

  • Personal data / personal information — information that identifies or can reasonably identify you.
  • Sensitive personal data — includes passwords, financial information, biometric data, health information, and similar categories as defined under Indian law.
  • Data principal — you, the individual to whom the personal data relates.
  • Data fiduciary — Vaksera, which determines the purpose and means of processing personal data on the Platform.

3. Information we collect

3.1 Information you provide directly

  • Registration & account: name, email address, mobile number, password (stored in hashed form), user type (advocate/client), and OTP verification records.
  • Advocate profile: enrolment number, Bar Council state, practice areas, courts, cities, biography, photograph, fee indications, languages, and other fields you choose to publish.
  • Court availability & diary: dates, courts, matter descriptions, hearing dates, and notes you enter.
  • Drafting tool: text and field values entered into petition templates for preview, session save, and document generation.
  • Payments: billing name, transaction identifiers, and payment status when you purchase lead credits (card/UPI details are handled by our payment partner).
  • Communications: messages sent via the contact form, support email, or in-platform notifications you initiate.
  • Reviews & interactions: ratings or feedback where such features are enabled.

3.2 Information collected automatically

  • IP address, browser type and version, device type, operating system, and referring URL.
  • Pages viewed, features used, click paths, session duration, and approximate geographic location derived from IP.
  • Log files, error reports, and security events (failed logins, suspicious activity).
  • Cookies, session identifiers, and similar technologies (see Section 8).

3.3 Information from third parties

We may receive verification signals from email/SMS providers, payment confirmation from Cashfree or similar gateways, and fraud-prevention data. We do not purchase personal data lists for marketing.

4. How we use your information

We use personal data for the following purposes:

  • Creating and managing your account, including OTP verification and advocate approval workflows.
  • Providing core services: template fill, preview, download, act browsing, search, diary, and lead unlock.
  • Displaying advocate profiles and availability to other users according to your settings.
  • Processing payments, invoices, and lead-credit balances.
  • Sending service-related communications (security alerts, account notices, OTPs).
  • Responding to support requests and dispute enquiries.
  • Improving the Platform through analytics, debugging, and feature development.
  • Detecting, preventing, and investigating fraud, abuse, scraping, or Terms violations.
  • Complying with legal obligations, court orders, and lawful government requests.
  • Protecting the rights, property, and safety of Vaksera, users, and the public.

We do not use your drafted petition content to provide legal advice. We may use aggregated, de-identified usage statistics to understand which templates and acts are most accessed.

5. Legal basis for processing

Depending on context, we rely on one or more of the following:

  • Contract — processing necessary to provide services you request.
  • Consent — where you opt in (e.g. publishing profile data, marketing if offered).
  • Legitimate interests — security, analytics, and service improvement, balanced against your rights.
  • Legal obligation — retention or disclosure required by law.

6. How we share information

We do not sell your personal data. We may share data with:

  • Other users — when you publish a profile, availability listing, or other public-facing content.
  • Service providers — hosting, email/SMS, analytics, customer support, and payment processors under confidentiality obligations.
  • Professional advisers — lawyers, auditors, or insurers where necessary and subject to duty of confidentiality.
  • Authorities — when required by law, regulation, court order, or to protect rights and safety.
  • Business transfers — in connection with merger, acquisition, or asset sale, with notice where practicable.

Payment partners process transactions under their own privacy policies. We encourage you to review Cashfree’s policy when making purchases.

7. Data retention

We retain personal data for as long as your account is active or as needed to provide services. After account closure or deletion request, we may retain certain records for:

  • Legal, tax, and regulatory compliance (typically up to statutory limitation periods).
  • Resolution of disputes and enforcement of agreements.
  • Security logs and fraud prevention (for a limited period).
  • Backups that are rotated and deleted on schedule.

Anonymised or aggregated data that cannot identify you may be retained indefinitely for analytics.

8. Cookies and tracking

We use essential cookies for login sessions, CSRF protection, and security. We may use analytics cookies to understand traffic patterns. You can manage cookies in your browser; disabling essential cookies may prevent login or certain features from working.

We do not currently respond to “Do Not Track” browser signals in a uniform way across all browsers.

9. Security measures

We implement reasonable administrative, technical, and physical safeguards, including encrypted connections (HTTPS), access controls, hashed passwords, and server hardening. No method of transmission or storage is 100% secure. You are responsible for maintaining the confidentiality of your password and for activity on your account.

Notify us immediately at support@vaksera.in if you suspect unauthorised access.

10. Your rights

Subject to applicable law, you may have the right to:

  • Access — obtain a copy of personal data we hold about you.
  • Correction — update inaccurate or incomplete data via your profile or by contacting us.
  • Erasure — request deletion of your account and associated data, subject to legal retention.
  • Withdraw consent — where processing is consent-based, without affecting prior lawful processing.
  • Grievance redressal — lodge a complaint with us; if unsatisfied, with the Data Protection Board of India under the DPDP Act when applicable.

To exercise rights, email support@vaksera.in with subject line “Privacy request” and sufficient detail to verify your identity. We may respond within timelines prescribed by law.

11. Children

The Platform is not directed at persons under 18. We do not knowingly collect personal data from children. If you believe a child has provided data, contact us for deletion.

12. International users

The Platform is intended primarily for users in India. If you access from outside India, you consent to processing in India and transfer to our servers and service providers located in India or other jurisdictions where they operate.

13. Third-party links

Links to India Code, court websites, or advocate microsites are provided for convenience. We are not responsible for their privacy practices.

14. Changes to this policy

We may update this Privacy Policy to reflect legal, technical, or business changes. The “Last updated” date at the top will change. Material changes may be notified by email or a notice on the Platform. Continued use after the effective date constitutes acceptance unless law requires otherwise.

15. Contact & grievance officer

For privacy questions, data requests, or complaints: