Privacy Notice

Cassie ("we", "us") runs cassie.in, an AI legal assistant for Indian law. This notice explains how we handle your personal data. Cassie is for people aged 18 or older.

1. What we collect

• Account: Your name, email address and profile picture, from Google sign-in or email sign-up.
• Your legal questions: What you type into chat, research and analysis, and the details you add, such as your city, state, age or gender. These can be sensitive, so share only what the question needs.
• Documents you upload: The files themselves and the text we read from them.
• Lawyer profiles: For lawyers: enrolment details, practice areas, location, photo and the verification documents you submit.
• Payments: Name, email and phone number for paid plans. Card and UPI details stay with our payment provider, Cashfree. We never see or store them.
• Messages: Messages between you and a lawyer are end-to-end encrypted. We store them but cannot read them.
• Technical data: Your IP address, browser type and error reports, used to run and protect the service.

2. Why we use it

• To answer you: Producing legal information, analysis and research from Indian law and court judgments.
• To run your account: Sign-in, saved chats, lawyer profiles, messages and payments.
• To keep Cassie safe: Stopping fraud, abuse and unauthorised access.
• To count visits: Vercel Analytics counts page views without cookies and without identifying you. If you are signed in, this happens only if you turn on Usage Analytics.

We do not use your questions or documents to train AI models, and Google's paid terms do not let it either (see section 3).

3. Who processes it for us

These companies process data on our behalf, only for the purposes above:

• Google Gemini (paid plan): Our main AI. It reads your questions and uploaded documents to answer them. Google's paid terms do not let it train its models on this data.
• Voyage AI: Turns research questions into search vectors so we can find relevant judgments.
• Supabase: Stores your account, chats and files (servers in Mumbai).
• Cockroach Labs: Holds our database of public judgments and Acts. It holds no personal data about you.
• Vercel: Hosts the website and counts page views.
• Cashfree Payments: Takes payments for paid plans.
• Resend: Sends account and newsletter emails.
• Sentry: Collects technical error reports.
• Google sign-in: Lets you sign in with your Google account.
• Fly.io: Runs the service that looks up case status on eCourts.
• Deepgram: Reads published articles aloud. It sees only article text.

Some of these companies process data outside India, which Indian law allows. We share data with the police or a court only when the law requires it.

4. Your consent and how to withdraw it

We ask for your consent when you first sign in. You can change your choices at any time in Settings, under Privacy & Control:

• Chat history: Turn it off and we delete your saved chats.
• Document processing: Turn it off and we stop reading uploads.
• Usage Analytics: Off unless you turn it on.

Withdrawing is as easy as giving consent. It does not affect what we did before you withdrew. To withdraw everything, ask us to close your account (section 5).

5. Your rights

You can ask us to:

• Show you your data: A summary of what we hold and who we shared it with.
• Correct or complete it: Fix anything wrong or out of date.
• Delete it: Close your account and erase your data.
• Nominate someone: Name a person who can use these rights for you if you die or cannot act.

Email contact@cassie.in from the address on your account. We reply within 15 days at the latest.

6. How long we keep it

• Account and saved chats: Until you delete them or close your account.
• Security records: Sign-in and access records are kept for up to one year, as the DPDP Rules require.
• Payment records: For as long as tax and accounting law requires.

7. Security and breaches

Your data is encrypted in transit and at rest, and access to it is limited to the people and systems that need it. If a breach affects you, we will tell you without delay, along with what happened and what you can do, and we will report it to the Data Protection Board of India and CERT-In as the law requires.

8. Cookies and browser storage

We use only the cookies needed to keep you signed in. We do not use advertising or tracking cookies. Your browser also stores some app state, such as your current chat, so the page works smoothly.

9. Age

Cassie is for people aged 18 or older. When you first sign in, you confirm you are 18 or older. If we learn that an account belongs to someone under 18, we close it and delete its data.

10. Grievance Officer and complaints

Our Grievance Officer is Ashraya Singh. Email contact@cassie.in for any question or complaint about your data or anything on Cassie. We acknowledge it within 24 hours and resolve it within 15 days.

If you are not satisfied with our answer, you can complain to the Data Protection Board of India.

This notice is available in Hindi or any other language listed in the Eighth Schedule of the Constitution. Email us to ask for one.