Privacy Policy

Last updated: 16 July 2026

LegalPrime is a legal practice-management platform operated by AnantaTech Hub Private Limited (“LegalPrime”, “we”, “us” or “our”). We build software that law firms and legal teams use to run matters, clients, HR, payroll and finances, which means you trust us with some of your firm’s most sensitive information. This Privacy Policy explains what we collect, why, how we protect it, and the choices and rights you have. It applies to our website, our web and mobile applications, and all related services (together, the “Services”).

1. Who this policy covers

This policy covers the firm or organisation that subscribes to LegalPrime (our “Customer”), the individual users the Customer authorises, and visitors to our website. For data your firm uploads about its own clients, employees and matters (“Customer Data”), your firm is the data controller and LegalPrime acts as a data processor, handling that data only on your instructions and as needed to provide the Services.

2. Information we collect

• Account & identity data: name, work email, phone number, firm name, designation, role and login credentials for the users you create.
• Customer Data you upload: matter and case records, client and contact details, documents, employee and payroll records, attendance, invoices, expenses and other content you store in the platform.
• Billing data: subscription plan, billing contact, GSTIN and transaction history. Card and payment-instrument details are handled directly by our payment processor (Razorpay) — we never see or store your full card number.
• Technical & usage data: IP address, device and browser type, time zone, pages viewed, feature usage, and audit-log events (who did what, and when) used for security and support.
• Communications: messages, support tickets and demo requests you send us.

3. How we use your information

• To provide, operate, secure and maintain the Services for your firm.
• To authenticate users, enforce permissions and keep audit trails.
• To process subscriptions, payments, renewals and invoices.
• To provide onboarding, support, and respond to your requests.
• To send service and transactional messages (billing, security alerts, product changes) and, where permitted, occasional product updates you can opt out of.
• To detect, prevent and investigate fraud, abuse and security incidents.
• To comply with legal obligations and enforce our Terms.

We do not sell your data, and we do not use Customer Data to train third-party advertising or generative-AI models.

4. Data storage & residency

Your data is stored on secure cloud infrastructure hosted in India, meeting the data-residency expectations of Indian legal practices. Every Customer’s data is logically isolated so one firm can never access another’s records.

5. Data security

We apply appropriate technical and organisational measures to protect your data, including encryption in transit (TLS) and at rest, role-based access control with granular per-module permissions, multi-factor authentication, branch-level scoping, and complete audit logs. Access to production systems is restricted to authorised personnel with a business need. No system is perfectly secure, but we work continuously to protect your information and will notify affected Customers of a breach as required by law.

6. Sharing & third-party processors

We share data only with the sub-processors needed to run the Services — for example our cloud-hosting provider, our payment processor (Razorpay), and communication providers for email, SMS and WhatsApp notifications. Each is bound by contract to protect your data and use it only to provide their service to us. We may also disclose information where required by law, court order, or a valid request from a competent authority.

7. Data retention

We retain Customer Data for as long as your subscription is active. After termination we retain it for a limited grace period so you can export it, then delete or anonymise it in the ordinary course, unless a longer period is required by law (for example, tax or accounting records). See our Account Deletion Policy for details.

8. Your rights

Subject to applicable law, including India’s Digital Personal Data Protection Act, 2023, you may request access to, correction of, or deletion of your personal data, and may withdraw consent for optional processing. Because your firm controls Customer Data, requests from your firm’s clients or employees should usually be directed to the firm; we will assist our Customers in responding. To exercise your rights, contact us using the details below.

9. Cookies

Our website and app use essential cookies to keep you signed in and to remember preferences, and limited analytics to understand usage and improve the product. You can control cookies through your browser settings; disabling essential cookies may break parts of the Services.

10. Children

The Services are intended for use by businesses and are not directed to individuals under 18. We do not knowingly collect personal data from children.

11. Changes to this policy

We may update this policy from time to time. Material changes will be notified through the Services or by email, and the “Last updated” date above will change. Continued use of the Services after an update means you accept the revised policy.

12. Contact us & grievances

For any privacy question, data request or grievance, contact our team at contact@legalprime.app. We aim to respond within one business day.