Privacy Policy

This Privacy Policy explains how Blingwork Technologies Pvt. Ltd. (“Lawpatra”, “we”, “us”, or “our”) collects, uses, shares, and protects your personal information when you use our website, mobile applications, and related services (the “Platform”). We are the data fiduciary for the personal data described below under India’s Digital Personal Data Protection Act, 2023 (“DPDP Act”) and the data controller for users in other jurisdictions where applicable.

By using the Platform, you agree to the practices described in this Policy. If you do not agree, please do not use the Platform.

We collect the categories of personal data described below. “Personal data” means any data about an identified or identifiable individual.

1.1 Information you provide

• Account details: name, email address, mobile number, profile photo, date of birth, gender (optional), and the exam(s) you are preparing for. We use one-time passwords (OTPs) sent to your email or mobile number to authenticate you — we do not ask you to set or share a password.
• Educational information: your target exam, preferred language, target year, current college or coaching institute (optional).
• Payment information: for paid enrolments, the payment gateway collects your card or bank details directly. We receive only a transaction reference, masked instrument details, and the status of the transaction.
• Tutor conversations: the messages you send to the AI tutor and the responses returned.
• User-generated content: answers, notes, bookmarks, feedback, and support correspondence.

1.2 Information collected automatically

• Usage data: tests attempted, questions answered, time spent per question, accuracy, marks, mock-test results, and confidence-score history.
• Device and log data: IP address, device identifier, browser type and version, operating system, referring URL, pages visited, and timestamps.
• Cookies and similar technologies: see Section 6.

1.3 Information from third parties

• If you sign in with Google or another federated identity provider, we receive your name, email, and profile picture from that provider.
• Payment gateways share transaction status and masked instrument details.

We process personal data for the following purposes:

• To create and authenticate your account and let you access the Platform;
• To deliver core learning features — mock tests, practice tests, analytics, flashcards, and the AI tutor — tailored to your selected exam;
• To compute your performance metrics, accuracy trends, and AI-generated estimated exam scores;
• To process payments, issue invoices, and manage your enrolments;
• To communicate with you about your account, service updates, support requests, and (with your consent) marketing communications;
• To detect, prevent, and investigate fraud, abuse, and violations of our Terms of Use;
• To comply with applicable law, court orders, and regulatory requests;
• To improve the Platform — including model and content quality — using aggregated or de-identified data wherever possible.

Where the DPDP Act or other applicable law requires a specific legal basis, we rely on:

• Your consent — for creating an account, processing tutor conversations through third-party AI providers, and sending you marketing communications;
• Performance of a contract — to deliver paid courses and the services you have enrolled in;
• Legitimate uses / legitimate interests — to secure the Platform, prevent fraud, conduct analytics, and improve our services;
• Legal obligation — to comply with tax, accounting, and law-enforcement requirements.

You may withdraw consent at any time by writing to legal@lawpatra.ai. Withdrawal will not affect the lawfulness of processing carried out before withdrawal and may prevent us from offering certain features.

We do not sell your personal data. We share it only in the circumstances described below.

4.1 Service providers (data processors)

We engage trusted third parties to operate the Platform. These providers process your data only on our instructions and under written agreements that require appropriate security and confidentiality. Categories include:

• Cloud hosting and storage (e.g., AWS, Google Cloud);
• AI / large-language-model providers that power the AI tutor (e.g., Anthropic, OpenAI, or comparable providers);
• Payment gateways (e.g., Razorpay, Stripe);
• Analytics, error-monitoring, and product-telemetry providers;
• Email, SMS, and push-notification providers;
• Customer-support tooling.

4.2 Business transfers

If Lawpatra is involved in a merger, acquisition, financing, or sale of assets, your personal data may be transferred as part of that transaction, subject to standard confidentiality undertakings. We will notify you of any such change in ownership and of any choices you may have.

4.3 Legal disclosures

We may disclose personal data when required by law, court order, or other lawful request from public authorities, or where we believe disclosure is necessary to (i) enforce our Terms of Use, (ii) protect the rights, property, or safety of Lawpatra, our users, or the public, or (iii) detect or prevent fraud or security incidents.

4.4 With your consent

We may share information with other parties where you have specifically consented — for example, if you opt to share your performance with a coaching institute or mentor.

We primarily store data on servers located in India. Some of our service providers (in particular, AI providers and analytics tools) may process data in the United States or other jurisdictions outside India. Where we transfer personal data internationally, we rely on contractual safeguards and the transfer mechanisms permitted under the DPDP Act and applicable law, and we ensure that the recipient is bound to provide a comparable standard of protection.

We use cookies and similar technologies to:

• Keep you signed in (essential authentication cookies);
• Remember your preferences such as language and theme;
• Measure how the Platform is used so we can improve it (analytics cookies);
• Detect and prevent abuse and security incidents.

You can control cookies through your browser settings. Disabling essential cookies will prevent the Platform from functioning correctly.

We retain personal data only for as long as is necessary to provide the Platform and to fulfil the purposes described in this Policy, unless a longer retention period is required by law (for example, tax records). Indicative retention periods:

• Account data: retained while your account is active and for up to 24 months after closure, after which it is deleted or anonymized.
• Test attempts and analytics: retained while your account is active so you can review your history.
• Tutor conversations: retained for the lifetime of your account so you can revisit prior sessions; you may delete individual sessions where the Platform supports it.
• Payment records and invoices: retained for at least eight (8) years to comply with Indian tax law.
• Server logs: typically retained for 90 days for security purposes.

We implement reasonable administrative, technical, and physical safeguards designed to protect your personal data, including encryption in transit (TLS), encryption at rest for sensitive fields, OTP-based authentication (we do not store user passwords), role-based access controls, audit logging, and routine security reviews.

No system is perfectly secure. If we become aware of a personal data breach that is likely to result in significant harm, we will notify you and the Data Protection Board of India in accordance with the DPDP Act and applicable law.

Subject to applicable law, you have the following rights with respect to your personal data:

• Access: obtain a copy of the personal data we hold about you;
• Correction: ask us to correct inaccurate or incomplete data;
• Erasure: ask us to delete your personal data, subject to legal exceptions (e.g., tax records);
• Withdrawal of consent: withdraw any consent you have previously given;
• Portability: receive a structured copy of certain data you have provided to us;
• Grievance redressal: raise concerns about how we handle your data with our Grievance Officer (see Section 12).

To exercise any of these rights, write to legal@lawpatra.ai from the email address registered to your account. We will respond within the timelines required by applicable law, typically within 30 days.

Lawpatra is an educational platform and is open to learners of all ages. Where a user is a child or minor under the law of their jurisdiction, we process their personal data in accordance with the additional safeguards required by the DPDP Act, 2023 and other applicable law — including obtaining verifiable consent of a parent or legal guardian where required, and refraining from tracking, behavioural monitoring, or targeted advertising directed at children.

Parents and guardians who believe their child has provided personal data without appropriate consent may contact us at legal@lawpatra.ai and we will take appropriate steps to address the concern, including deletion of the data where required.

Where permitted by law, we may send you product updates, course recommendations, and promotional offers by email, SMS, or push notification. You can opt out at any time by clicking the “unsubscribe” link in our emails, replying STOP to SMS, disabling notifications in your device settings, or writing to support@lawpatra.ai. Transactional messages (account, payment, and security alerts) cannot be opted out of while your account is active.

In accordance with Indian law, including the DPDP Act and the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, you may contact our Grievance Officer:

We will acknowledge your grievance within 48 hours and aim to resolve it within 30 days.

We may update this Privacy Policy from time to time. The updated version will be posted here with a revised “Last updated” date. If changes are material, we will notify you by email or through an in-app notice before they take effect.

For any question about this Privacy Policy or about how we process your personal data, contact us at: