This Privacy Policy (“Policy”) details how LegalParihar Online Services, operating the platform DocScore AI (“DocScore AI,” “Company,” “we,” “us,” or “our”), collects, processes, stores, protects, and discloses personal data and document content when users (“User,” “you,” or “your”) access or utilize our website, document analysis engines, AI drafting tools, APIs, and associated web services (collectively, the “Services”).
We believe in absolute transparency. We do not hide or misrepresent our technical workflows, data handling practices, or use of third-party artificial intelligence infrastructure. By accessing or using DocScore AI, you acknowledge that you have reviewed and accepted the terms of this Policy.
1. Regulatory Scope & Legal Compliance
This Policy is established in accordance with applicable data protection statutes and principles, including:
India: The Digital Personal Data Protection Act, 2023 (“DPDP Act”) and the Information Technology Act, 2000 along with associated Reasonable Security Practices Rules.
Global Frameworks: Recognized international principles of lawfulness, purpose limitation, transparency, data minimization, accuracy, and storage limitation under frameworks such as the European Union General Data Protection Regulation (EU GDPR) and the California Consumer Privacy Act (CCPA).
2. Nature of the Services & AI Disclaimer
DocScore AI is an automated, cloud-based software-as-a-service (SaaS) platform that assists users with document analysis, automated clause risk scoring, and interactive legal drafting.
Important Clarification on the Nature of Outputs:
The Services operate using automated algorithms and probabilistic artificial intelligence models.
DocScore AI is a technology platform and not a law firm. Our services do not create an attorney-client relationship.
AI-generated reviews, scores, suggestions, and drafted clauses are decision-support aids provided for informational purposes only. They do not constitute formal legal advice, statutory certifications, or judicial guarantees.
3. Information We Collect
3.1 Information You Voluntarily Provide
Account Data: Name, email address, authentication credentials, and profile identifiers.
Document & Draft Content (“User Content”): Documents, text files (PDF, DOCX, TXT), contract clauses, names of contracting parties, terms, and transaction details submitted for analysis or drafting.
Clarification Responses: Specific factual parameters and answers you provide during interactive drafting sessions (e.g. party addresses, jurisdiction, rent amounts, notice periods).
Support Inquiries: Communications and queries submitted through our feedback channels.
3.2 Information Collected Automatically
Technical Identifiers: IP address, browser type and version, operating system, and device metadata.
Session & Diagnostic Logs: Timestamps of access, feature interaction metrics, error logs, and performance metrics.
3.3 Sensitive Personal Data & Redaction Guidance
DocScore AI does not require, nor intentionally solicit, sensitive personal records such as biometric data, passwords, medical records, or banking credentials. When uploading agreements or contracts for review, we advise users to redact unneeded sensitive personal identifiers unless strictly required for formal draft execution.
4. Full Disclosure: Third-Party AI Models & Data Processing Architecture
In full transparency and adherence to honest business practices, DocScore AI discloses the technical architecture of how your documents and drafting requests are processed:
Utilization of Enterprise Third-Party AI Models
DocScore AI does not operate standalone, on-premise foundation models. To deliver high-accuracy analysis and generation, we utilize trusted enterprise cloud artificial intelligence APIs, primarily Google Cloud Vertex AI / Gemini API (provided by Google LLC).
Data Transmission for Inference: When you upload a document or prompt our drafting agent, the relevant document text and contextual instructions are securely transmitted over encrypted channels (HTTPS/TLS) to enterprise AI APIs strictly to compute the analysis or generate the requested draft.
No Public Model Training: Under our commercial enterprise API agreements with Google Cloud Vertex AI, your confidential customer inputs, document texts, prompts, and generated drafts are NOT used to train, retrain, or improve public foundational AI models.
Ephemeral Processing: Third-party AI model APIs process the data transiently to generate the completion response and do not retain ownership or perpetual rights over your document content.
5. Data Sharing, Sub-processors & No-Sale Commitment
🔒 Our Strict Commitment: DocScore AI does NOT sell, rent, monetize, or trade your personal data, uploaded documents, or generated drafts to data brokers, advertisers, or third-party marketing companies.
We share data exclusively on a need-to-know basis with vetted third-party service providers (“Sub-processors”) necessary to operate the platform:
AI Cloud Service Providers: Google LLC (Google Cloud Vertex AI) for programmatic text processing, parsing, and generative drafting.
Database & Authentication Infrastructure: Supabase Inc. (hosted on secure Amazon Web Services infrastructure) for user authentication, encrypted database storage, and session state persistence.
Hosting & Edge Delivery: Vercel Inc. for global content delivery, edge routing, and application hosting.
Statutory Authorities: Disclosed only when strictly required by a binding judicial subpoena, valid court order, or applicable legal obligation under Indian or international law.
6. Purpose of Data Processing
We process personal data strictly for lawful operational purposes, including:
Executing document risk analysis and generating compliance summaries requested by you.
Powering the conversational AI draftbot and drafting workflows.
Maintaining your account, saved documents, and revision history.
Ensuring platform integrity, preventing automated scraping, and mitigating malicious usage.
Providing user support and responding to technical inquiries.
7. Data Storage, Retention & Deletion
Uploaded documents and generated drafts are stored securely in encrypted cloud databases to allow you to view, edit, download, and manage your documents in your personal dashboard.
User-Initiated Deletion: You may delete any document or drafting session directly from your dashboard at any time. When deleted, the document content and analysis records are removed from active databases.
Account Deletion: You may submit an account deletion request at any time. Upon verification, your account credentials and associated document records will be permanently purged, except where limited retention is mandated by law (e.g. accounting, fraud prevention, or tax audit records).
8. Data Security & Limitations
We employ standard technical and administrative safeguards to protect your data, including HTTPS/TLS 1.3 encryption in transit, encrypted storage at rest (AES-256), strict database role-level security (RLS), and isolated environment configurations.
Security Disclaimer: While we implement industry-accepted security practices, you acknowledge that no digital transmission over the internet or cloud storage architecture can be guaranteed 100% immune from unauthorized access, zero-day vulnerabilities, or interception. Users are responsible for maintaining the confidentiality of their login credentials.
9. Your Rights as a Data Principal (India DPDP Act & Global Standards)
Under the Digital Personal Data Protection Act, 2023 and applicable privacy frameworks, you have specific enforceable rights:
Right to Access: The right to obtain a summary of your personal data processed by us and the identities of data processors with whom data has been shared.
Right to Correction & Erasure: The right to request correction of inaccurate data or deletion of personal data no longer necessary for the purpose for which it was collected.
Right of Grievance Redressal: The right to access a readily available grievance redressal mechanism regarding our processing of your personal data.
Right to Nominate: The right to nominate an individual who, in the event of death or incapacity, may exercise your data rights.
10. Grievance Officer & Contact Details (India)
In compliance with Section 19 of the Digital Personal Data Protection Act, 2023 and the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, the designated Grievance Officer for DocScore AI / LegalParihar Online Services is:
Name: Abhishek Singh Parihar
Designation: Grievance Officer
Entity: DocScore AI Opereated under LegalParihar Online Services
Jurisdiction & Address: Satna, Madhya Pradesh, India
Redressal Timeline: Grievances are acknowledged within 48 hours and addressed within 30 days as prescribed by law.
11. Updates to this Policy
We may periodically update this Privacy Policy to reflect enhancements to our service architecture, regulatory changes, or evolving legal standards. Changes become effective upon posting with an updated “Last Updated” date. Continued access or use of DocScore AI following any update confirms your agreement to the modified Policy.
