Privacy Policy
1. Who we are and what this covers
This Privacy Policy explains how WebSquare Software Private Limited, a private limited company (CIN: [CIN]) with its registered office at 311, Third Floor, Center Tower, Central Spine Road, Sector 2, Vidhyadhar Nagar, Jaipur, Rajasthan 302039 ("Taareekh", "we") collects, uses and protects personal data through taareekh.com, app.taareekh.com and the Taareekh Android and iOS apps. It follows the Digital Personal Data Protection Act, 2023 ("DPDP Act") and the Information Technology Act, 2000 and its rules.
We hold personal data in two different roles:
- Your account data — advocates and associates who use Taareekh. Here we are the Data Fiduciary: we decide how this data is used.
- Your clients' data — names, phone numbers and case details you enter about your clients. Here you (the advocate or firm) are the Data Fiduciary and we are your Data Processor: we store and process it only on your instructions, to run the Service for you.
If you are a client of an advocate who uses Taareekh, contact that advocate first about your data. You can also write to us and we will pass your request on. This policy is also available in Hindi, and you may ask us for it in any other language listed in the Eighth Schedule to the Constitution.
2. Data we collect
We collect only what the Service needs to work.
| Category | Examples | Where it comes from |
|---|---|---|
| Account and profile | Name, mobile number, email, Bar enrolment number, firm name, address, profile photo | You, at sign-up and in your profile |
| Associates | Associate's name, mobile number, email, case-level access given | The Account Owner who adds them |
| Client and case data | Client name, phone, address, case number, court, opposite party, hearing dates and outcomes, notes, NOC details | You and your associates |
| Payments | Plan bought, amount, GST details, transaction ID, payment status | You and our payment gateway (Atom). We never receive full card or UPI PIN details |
| Wallet and alerts | Credit balance, purchase history, Tareekh Alerts sent, delivery status | Generated as you use the Service |
| Support | Tickets and messages you send us | You |
| Device and usage | Device model, OS version, app version, push-notification token, IP address, login times, crash logs | Collected automatically by the app and servers |
Biometrics stay on your device. If you turn on fingerprint or face lock, the check is done by your phone's operating system. We never receive or store your fingerprint or face data.
We do not knowingly collect sensitive data such as religion, caste, health or financial account numbers about you. If such information appears in case notes you enter, it is treated as client data under your control.
3. Why we use it
We use your account data on the basis of your consent, given when you sign up, and for legitimate uses allowed by the DPDP Act, such as meeting legal obligations.
- Run the Service: log you in with OTP, show your cases and hearings, send reminders, generate case history and NOC PDFs, and manage associate access.
- Send Tareekh Alerts: deliver the client alerts you have switched on, and deduct or refund wallet credits.
- Billing: process payments, issue GST invoices, and keep the records tax law requires.
- Security: detect fraud, abuse and unauthorised access; apply rate limits on OTP and alerts.
- Support and service messages: answer your tickets and tell you about renewals, outages and changes to our terms.
- Improve the product: look at aggregated, de-identified usage to fix bugs and plan features.
What we never do
- Sell or rent personal data.
- Use client or case data for advertising, profiling or training AI models.
- Send promotional messages to your clients. Clients only receive the alerts you turn on.
You can withdraw consent at any time (see section 6). Some features, such as login and billing, cannot work without the data they need.
4. Who we share it with
We share personal data only with service providers that help us run Taareekh, under contracts that limit them to that purpose, and only as much as each one needs.
| Provider type | What they receive | Why |
|---|---|---|
| Cloud hosting — [PROVIDER NAME, region] | All Service data, encrypted | Store and run the Service |
| Payment gateway — Atom (NTT DATA Payment Services India) | Name, email, mobile, amount, order ID | Process payments |
| WhatsApp Business Solution Provider — [BSP NAME] and Meta | Client's mobile number and the alert text | Deliver Tareekh Alerts you switch on (standard charges may apply) |
| OTP SMS and email providers — [PROVIDER NAMES] | Your mobile number and email | Send login OTPs and service emails |
| Push notifications — Google Firebase / Apple Push Notification service (may process data outside India) | Device push token, notification text | Send hearing reminders to your phone |
| Crash and error reporting — [PROVIDER NAME, if used] | Device and app details, error logs | Fix bugs |
Inside your firm: the Account Owner can see all firm data. Associates see only the cases the Account Owner shares with them.
Legal requests: we may disclose data if required by law, a court order or a lawful request from a government authority, and will tell you where the law allows.
Business transfer: if Taareekh is merged or sold, data may move to the new owner under the same protections, and we will notify you first.
5. Security, storage and retention
Your data is stored on servers in India [confirm hosting region]. If a provider processes data outside India, we use only countries the Government of India has not restricted under the DPDP Act.
How we protect it: OTP-only login with no passwords stored, encryption in transit (HTTPS/TLS), separation between firms so one firm can never read another's data, case-level access control for associates, rate limits on OTP and alerts, access logs, and staff access only when needed for support or security.
If a personal data breach happens, we will inform affected users without delay and report it to the Data Protection Board of India within 72 hours, as the DPDP Act and its Rules require. Cyber security incidents are reported to CERT-In within 6 hours, and system logs are kept in India for 180 days, as required by CERT-In directions.
How long we keep it
| Data | Kept for |
|---|---|
| Account, client and case data | Until you ask us to close your account, even if your plan has expired; deleted or anonymised within 90 days of closure |
| Payment and GST records | 8 years, as required by tax law |
| Tareekh Alert logs | 12 months |
| Security and access logs | 180 days |
| Support tickets | 2 years after closure |
| Backups | Overwritten within 30 days of deletion from live systems |
6. Your rights and choices
Under the DPDP Act you can:
- Access a summary of the personal data we hold about you and how it is used.
- Correct or update inaccurate or incomplete data. Most profile details can be edited in the app.
- Erase your data at any time by asking us to close your account, except records we must keep by law. We do not delete your data on our own just because a plan expired.
- Withdraw consent at any time. This stops future processing but does not affect processing already done.
- Nominate a person to exercise these rights for you in case of death or incapacity.
- Raise a grievance with us, and then with the Data Protection Board of India if you are not satisfied.
Write to privacy@taareekh.com from your registered email. We may verify your identity and will respond within 30 days.
Clients of advocates: to access, correct or delete your data, or stop Tareekh Alerts, contact the advocate who added you. You can also write to us, and we will forward your request to the advocate.
Children: Taareekh is for adults. We do not knowingly allow users under 18. If an advocate records a minor's details as a party to a case, the advocate is responsible for meeting the DPDP Act's requirements for children's data.
Cookies: taareekh.com and app.taareekh.com use essential cookies to keep you logged in and secure. We do not use advertising cookies.
7. Changes and contact
We may update this policy as the Service or the law changes. For material changes we will notify you by email or in the app before they take effect. The date below shows the latest version.
Grievance Officer / Data Protection contact
Mr. MK Palsania, Grievance Officer
WebSquare Software Private Limited, 311, Third Floor, Center Tower, Central Spine Road, Sector 2, Vidhyadhar Nagar, Jaipur, Rajasthan 302039
Email: privacy@taareekh.com
We acknowledge complaints within 24 hours and resolve them within 15 days.
If your grievance is not resolved, you may complain to the Data Protection Board of India.
Version 1.0 · Effective 11 October 2026