Skip to content
☰

Privacy Policy

Last updated: 17 July 2026

This Privacy Policy explains how DharaSetu ("DharaSetu", "we", "us") collects, uses, shares, and protects your personal data when you use DharaSetu (the "Service") at dharasetu.com. We are the data fiduciary for the personal data described below and handle it in line with India's Digital Personal Data Protection Act, 2023 (the "DPDP Act"). By using the Service you agree to this policy.

1. Information we collect

We collect only what the Service needs to work:

  • Account data. When you sign in, we collect your email address, and (if you use Google sign-in) your name and profile photo as provided by Google. Sign-in is passwordless — we never see or store a password.
  • Profile data (optional). If you choose to complete your profile, we store what you enter: name, phone number, occupation, firm/chamber name, bar council number, GST name and number, and billing address. All of this is optional and provided by you to make invoices and drafts more useful.
  • Payment data. Subscriptions are processed by our payment partner, Razorpay. We do not receive or store your card number, UPI PIN, CVV, or bank credentials — those go directly to Razorpay. We store only the payment record needed to give you access and issue an invoice: order ID, payment ID, amount, status, and the name/email/phone associated with the purchase.
  • Usage data. To improve the Service and show you your own history, we log basic usage events (for example, that a section lookup or export happened, and the date). We also keep the sections you bookmark or save.
  • Technical data. Standard server logs (IP address, browser type, timestamps) used for security, rate-limiting, and debugging.

2. How we use your information

  • To create and secure your account and keep you signed in.
  • To provide the tools, save your work (bookmarks, history), and personalise your dashboard.
  • To process subscription payments and issue GST invoices.
  • To send you essential service emails — a sign-in code, a payment confirmation, or a renewal reminder.
  • To prevent abuse, enforce rate limits, and keep the Service secure.
  • To understand aggregate usage so we can improve the product.

We do not sell your personal data, and we do not use your data to train AI models.

3. Who we share it with (sub-processors)

We share data only with the service providers that run the Service, each acting on our instructions:

  • Supabase — database, authentication, and secure storage of your account and profile data.
  • Razorpay — payment processing (governed by Razorpay's own privacy policy).
  • Resend — delivery of transactional emails (sign-in codes, receipts).
  • Google — if you choose Google sign-in, for authentication only.
  • Vercel — application hosting and delivery.

We may also disclose data if required by law, or to protect the rights, safety, and security of our users and the Service.

4. Cookies

We use only essential cookies: a secure, httpOnly session cookie that keeps you signed in, and a small preference cookie that remembers your language and light/dark theme. We do not use advertising or cross-site tracking cookies.

5. Data retention

We keep your account and profile data for as long as your account is active. Payment and invoice records are retained as long as required for tax, accounting, and legal obligations. If you delete your account, we remove your personal data except where we are legally required to retain certain records.

6. Your rights

Under the DPDP Act you may:

  • Access the personal data we hold about you.
  • Correct or update it — most profile data you can edit yourself on your profile page.
  • Delete your account and personal data by contacting us (subject to legal retention).
  • Withdraw consent for optional processing, and grievance redressal if you have a complaint.

To exercise any of these, email support@dharasetu.com. We respond to verified requests within a reasonable time.

7. Security

We use industry-standard measures — encrypted connections (HTTPS), row-level security on the database, passwordless authentication, and server-side verification of every payment. No system is perfectly secure, but we work to protect your data and to limit what we collect in the first place.

8. Children

The Service is intended for legal professionals, students, and adults. It is not directed at children under 18, and we do not knowingly collect their personal data.

9. Changes to this policy

We may update this policy as the Service evolves or the law changes. We will revise the "last updated" date above, and for significant changes we will make reasonable efforts to notify you.

10. Contact & grievances

For any privacy question or grievance, contact our grievance officer at support@dharasetu.com, or by post at DharaSetu, EWS-89, Neem Sarai Colony, Mundera, Prayagraj (Allahabad), Uttar Pradesh, India.