Privacy Policy
Last updated: 1 June 2026 · Effective: 1 June 2026
This Privacy Policy governs the collection, use, and deletion of personal data by SLP Craft ("we", "us", "our") in compliance with the Digital Personal Data Protection Act, 2023 (DPDPA). The Supreme Court of India's AI Committee has not yet notified rules governing AI-assisted legal drafting; the AI-related disclosures in this policy are voluntary best practice and will be updated to conform to official rules once notified.
1. Overview
SLP Craft is a software-as-a-service (SaaS) platform owned and operated by Digital EFX ("Company", "we", "us"), providing AI-assisted Special Leave Petition drafting-assistance tools for advocates practicing before the Supreme Court of India. We act as a Data Fiduciary under the DPDPA 2023 with respect to the personal data of our users and, where applicable, the personal data of parties named in court documents uploaded to our platform.
We are committed to the principle of data minimisation: we collect only what is necessary for the purpose of SLP generation, and we delete it as soon as that purpose is served.
Digital EFX is not a law firm and does not provide legal advice. All outputs are AI-generated drafts that must be independently reviewed by a qualified legal professional before filing — see our Terms of Service, Section 8 for the full disclaimer.
2. Data We Collect
Account Data
- · Full name
- · Email address
- · Bar Council Enrolment Number (optional)
- · Designation and firm name (optional)
- · Phone number (optional)
Purpose: Account creation, billing, Annexure I AI Disclosure Note generation.
Uploaded Court Documents
- · High Court / Tribunal orders (PDF)
- · Petitions and applications (PDF)
- · Affidavits, replies, rejoinders (PDF)
- · Any other documents uploaded for a generation job
Purpose: Solely for AI-assisted SLP generation. Processed by our pipeline (OCR, translation, embedding, Claude AI generation). NOT stored for training.
Billing Data
- · Credit/debit card details (held by Razorpay, not by us)
- · Transaction history
- · Subscription status
Purpose: Payment processing and invoice generation. Card details are never stored on our servers.
Usage Data
- · IP address
- · Browser and device type
- · Pages visited and features used
- · Job creation timestamps
- · Credit consumption logs
Purpose: Service improvement, fraud prevention, and our own voluntary AI-use audit trail.
3. How We Use Your Data
- To create and manage your SLP Craft account
- To process uploaded court documents through the 8-stage AI pipeline (OCR → Translate → Embed → Generate → Format → Package)
- To generate SLP drafts, AI Transparency Reports, and the Annexure I AI Disclosure Note
- To process subscription payments via Razorpay
- To send transactional emails (generation complete, invoice, credit alerts)
- To maintain our own voluntary AI-use audit logs and transparency reports
- To prevent fraud and maintain platform security
4. AI & Third-Party Processing
Your uploaded documents are processed by the following third-party services. By using SLP Craft, you acknowledge and consent to this processing (as disclosed in the mandatory Data Processing Notice shown before upload).
Anthropic (Claude API)
AI SLP text generation
Documents sent as in-context data. Anthropic's usage policy prohibits using API data for training without consent.
Google Cloud Vision API
OCR of scanned PDFs and Indian-language documents
Google Cloud Translation API
Auto-translation of Hindi, Tamil, Telugu and other Indian languages
Supabase
Encrypted document storage (AES-256 at rest, TLS 1.3 in transit)
Files stored in India-region bucket where available.
Razorpay
Payment processing
We never see or store your full card number.
5. Retention & Deletion
Uploaded source PDFs
Deleted within 24h after HITL review confirmation (recommended), OR automatically after 30 days — whichever is earlier
Legal basis: DPDPA 2023 §8(7) — data minimisation
Generated DOCX outputs & reports
90 days after generation, or until account deletion
Legal basis: User convenience; our own voluntary audit trail
Account data
Until account deletion, plus 3 years for billing records
Legal basis: Accounting Act obligations; limitation period for disputes
Usage logs & audit trails
2 years
Legal basis: Our own voluntary transparency & audit practice
6. Your Rights Under DPDPA 2023
Right to Access (§11)
Request a copy of all personal data we hold about you.
Right to Correction (§12)
Request correction of inaccurate personal data.
Right to Erasure (§12)
Request deletion of your personal data when the purpose is fulfilled.
Right to Grievance Redressal (§13)
Lodge a complaint with our Data Protection Officer.
Right to Nominate (§14)
Nominate a person to exercise rights on your behalf in case of death or incapacity.
Right to Withdraw Consent (§6)
Withdraw processing consent at any time (subject to platform functionality).
To exercise any of these rights, email privacy@slpcraft.in. We will respond within 30 days.
7. Security
We implement the following security measures to protect your data:
- TLS 1.3 encryption for all data in transit
- AES-256 encryption for all files at rest (Supabase Storage)
- Access controls: uploaded documents are accessible only to your account
- No plaintext passwords: bcrypt hashing with salt
- Automated deletion: cron jobs enforce 30-day document deletion
- Audit logging: all generation jobs and data access events are logged
8. Contact & Grievance Officer
Data Protection Officer / Grievance Officer:
SLP Craft Privacy Team
Email: privacy@slpcraft.in
Response time: within 30 days (DPDPA 2023 §13(3))
If you are dissatisfied with our response, you may approach the Data Protection Board of India under §25 of the DPDPA 2023.