This Privacy Policy explains how M/s Pleatech, a partnership firm registered under the Indian Partnership Act, 1932, and having its registered office at No. L51, 5th Floor, 2B Main Road, HSR Layout, Sector 6, Bengaluru – 560102 (“Pleatech”, “we”, “us”, or “our”), collects, uses, stores, discloses, and otherwise processes Personal Data and Client Data in connection with the Platform and Services. This Privacy Policy forms part of, and should be read together with, the Terms of Use.

1. Information We Collect

1.1 Information You Provide Directly

We collect information you provide when you register, subscribe, or use the Platform, including:

•     Account registration information: name, email address, firm name, bar admission details, job title, and billing information.

•     Profile information: profile photo, contact details, and professional credentials.

•     Client Data: case files, legal documents, matter details, client records, time entries, billing information, and any other content you upload or create within the Platform.

•     Communications: messages you send to Pleatech support, feedback forms, or in-platform messaging features.

1.2 Information Collected Automatically

When you use the Platform, we automatically collect certain technical information, including:

•     Log data: IP address, browser type, operating system, device identifiers, pages visited, and timestamps.

•     Usage data: features used, actions taken, session duration, search queries within the Platform, and interaction patterns.

•     Device information: hardware model, mobile network information, and app version for mobile users.

•     Cookies and similar technologies: session cookies, authentication tokens, and analytics identifiers

1.3 Information from Third Parties

We may receive information from third-party integrations you authorize, such as court e-filing systems, e-signature services, calendar applications, accounting software, and payment processors. The information received depends on the permissions you grant.

2. How We Use Your Information

We use the information we collect for the following purposes:

2.1 Providing and Operating the Platform

•     Creating and managing your account and Subscription.

•     Delivering case management, document management, law firm management, and team management features.

•     Processing payments and managing billing.

•     Facilitating integrations with third-party services you authorize.

2.2 Platform Improvement and Development

•     Analyzing aggregated, de-identified usage data to understand how the Platform is used and to improve features.

•     Conducting internal research and product development.

•     Debugging, testing, and monitoring Platform performance and security.

2.3 Communications

•     Sending account-related notices (billing alerts, security notifications, service updates).

•     Responding to support inquiries and customer service requests.

2.4 Legal and Compliance

•     Complying with applicable laws, regulations, and court orders.

•     Enforcing our Terms of Use and other agreements.

•     Detecting, investigating, and preventing fraud, unauthorized access, or other illegal activities.

•     Protecting the rights, property, and safety of Pleatech Users, and third parties.

3. How We Share Your Information

3.1 Within Your Firm

Client Data and account information may be visible to other Authorized Users within your Firm's account, subject to the role-based permissions configured by your Firm administrator. Pleatech does not control intra-firm data sharing decisions.

3.2 Service Providers

We engage trusted third-party service providers who process data on our behalf, including:

•     Cloud infrastructure and hosting providers.

•     Payment processors (who handle payment card data under their own PCI-DSS compliant environments).

•     Analytics and monitoring tools.

•     Customer support and communication platforms.

All service providers are bound by data processing agreements requiring them to protect your information and use it only for specified purposes.

3.3 Legal Requirements

We may disclose information if required to do so by law, subpoena, court order, or other legal process, or to protect Pleatech’s rights, property, or safety, or the rights, property, or safety of others. To the extent permitted by law, we will provide you with prior notice of such disclosures.

3.4 Business Transfers

If Pleatech is involved in a merger, acquisition, asset sale, or other corporate transaction, Client Data and account information may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy.

3.5 With Your Consent

We may share your information with third parties when you have expressly consented to such sharing.

3.6 We Do Not Sell Your Data

Pleatech does not sell, rent, or trade your personal information or Client Data to third parties for their marketing purposes.

4. Role of Pleatech

In relation to Client Data submitted to or processed through the Platform on behalf of a Firm, Pleatech generally acts as a service provider, processor, or equivalent intermediary acting on the instructions of the relevant Firm, except where Applicable Law requires otherwise. In relation to account administration data, billing information, security logs, product analytics, support communications, and similar operational data, Pleatech may act as an independent controller, fiduciary, or equivalent entity for its own legitimate business and legal compliance purposes.

5. Client Data and Confidentiality

Pleatech treats Client Data — including case information, legal documents, and client records — with the highest level of confidentiality. We implement strict technical and organizational measures to prevent unauthorized access to Client Data.

Pleatech employees and contractors access Client Data only to the extent necessary to provide technical support, resolve issues, or comply with legal obligations. All personnel with access to Client Data are bound by confidentiality obligations.

Pleatech does not use Client Data to train artificial intelligence or machine learning models without your express written consent.

6. Data Security

We implement industry-standard security measures to protect your information.

Despite these measures, no system is completely secure. You are responsible for maintaining the confidentiality of your account credentials. In the event of a data breach affecting your personal information, we will notify you as required by applicable law.

7. Cookies and Tracking Technologies

We use cookies, web beacons, and similar technologies to operate and improve the Platform:

•     Strictly Necessary Cookies: Required for Platform functionality, authentication, and security. These cannot be disabled.

•     Functional Cookies: Enable preferences, settings, and personalized features.

•     Analytics Cookies: Help us understand how the Platform is used and identify areas for improvement. We use aggregated, anonymized data for this purpose.

You can manage cookie preferences through your browser settings or our in-Platform cookie preference center, except for strictly necessary cookies. Disabling certain cookies may affect Platform functionality.

The Platform does not respond to "Do Not Track" browser signals at this time, but we do not track users across third-party sites for advertising purposes.

8. Data Retention

We retain Personal Data and Client Data  for as long as necessary to provide the Services and fulfill the purposes described in this Privacy Policy, comply with the Applicable Law, resolve disputes, enforce agreements and maintain appropriate business and security records. All data will be retained for the period of subscription.

Upon your written request, we will save or delete your personal information earlier, subject to legal retention obligations and legitimate business needs.

9. Children and Minors

The Platform is intended for use by legal professionals, firms, and authorized personnel and is not directed to individuals under eighteen (18) years of age. Pleatech does not knowingly collect Personal Data directly from children in connection with the Platform. If you believe that a child has provided Personal Data to Pleatech in violation of this Policy, please contact us so that appropriate action may be taken.

10. Your Rights and Choices

Subject to Applicable Law, you may have the right to request access to, correction of, update of, deletion of, or restriction of processing of your Personal Data, and to withdraw consent where processing is based on consent. You may also request closure of your account or export of certain information, subject to technical feasibility, legal retention obligations, and the rights of the relevant Firm in relation to Client Data.

Where Pleatech processes Client Data on behalf of a Firm, requests relating to such Client Data may need to be directed to the relevant Firm, which controls that data and determines how it is used within the Platform. Pleatech may require verification of identity before responding to privacy-related requests and may decline requests where permitted by Applicable Law.  

11. International Transfers and Data Hosting

Your information may be stored, processed, or accessed in jurisdictions other than the jurisdiction in which it was originally collected, including through Pleatech’s service providers and infrastructure partners, subject to appropriate contractual, technical, and organizational safeguards. Where required by Applicable Law, Pleatech will take reasonable steps to ensure that cross-border transfers of Personal Data are carried out in accordance with applicable legal requirements.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the Platform's features. We will notify you of material changes by posting the updated Policy on our Platform  and via email or in-Platform notification at least thirty (30) days before the changes take effect. Your continued use of the Platform following the effective date of any changes constitutes your acceptance of the updated Policy.

13. Contact, Complaints, and Grievances

For privacy-related questions, requests, complaints, or grievances, you may contact Pleatech at [.]. Legal notices may be sent to support@pleatech.com. Pleatech’s registered office is located at No. L51, 5th Floor, 2B Main Road, HSR Layout, Sector 6, Bengaluru – 560102.

If Pleatech designates a Grievance Officer or similar contact under Applicable Law, details of such officer, including name, designation, and contact information, will be made available on the Platform or communicated through appropriate notice channels. Pleatech will make reasonable efforts to acknowledge and address privacy-related complaints within the timelines required by the Applicable Law.