Privacy Policy
e MunshiJi
1. Who we are
e MunshiJi ("the Service", "we", "us", "our") is operated by Divya Srivastava, sole proprietor, trading as e MunshiJi, a micro enterprise registered under Udyam Registration Number UDYAM-UP-50-0300200, having its place of business at Gold Line Residency, Anora Kalan, Faizabad Road, Lucknow, Uttar Pradesh 226010, India.
For the purposes of the Digital Personal Data Protection Act, 2023 ("DPDP Act"), we are the Data Fiduciary in respect of the personal data described in this policy.
- Service channel: WhatsApp +91 87668 17939
- Website: https://emunshiji.in
- Support: help@emunshiji.in · +91 70224 57957
This Privacy Policy forms an integral part of our Terms & Conditions (Clause 8.7) and must be read together with them and with our Refund & Cancellation Policy.
2. Scope and what this policy covers
This policy explains what personal data we collect when you use e MunshiJi, why we collect it, who we share it with, how long we keep it, and what rights you have.
It applies to all users of the Service, whether on a free trial, a paid subscription, or a limited free tier.
3. A special note for advocates about client information
e MunshiJi is used by advocates and legal practitioners. In the ordinary course of using the Service, you may submit documents, photographs, facts and case details relating to your clients and to other persons — including opposing parties, witnesses and third parties.
You should understand the following clearly:
3.1 In respect of your own personal data (your name, your mobile number, your court or city of practice, your subscription and payment records), we are the Data Fiduciary.
3.2 In respect of personal data belonging to your clients and other third parties that you submit to the Service, you remain the Data Fiduciary. We act as a Data Processor on your behalf and process that material solely to produce the output you have requested.
3.3 By submitting such material, you confirm that you are authorised to do so and that you have obtained any consent required under the DPDP Act and under your own professional obligations. We do not independently verify this and cannot do so.
3.4 Material you submit may be subject to advocate–client privilege. We do not waive, and do not ask you to waive, any privilege. We treat all submitted material as confidential. You remain responsible for deciding what is appropriate to submit.
3.5 We recommend that you do not submit documents containing personal data that is not necessary for the task you are asking the Service to perform.
4. What personal data we collect
4.1 Collected automatically when you message us
| Data | Why |
|---|---|
| Your WhatsApp mobile number | To identify your account, deliver replies, and apply your plan limits |
| The content of messages you send us | To understand and carry out your request |
| Message identifiers and timestamps | To avoid processing the same message twice, and for troubleshooting |
| Your language preference (Hindi/English) | To reply in the language you have chosen |
4.2 Collected when you start a free trial or subscribe
| Data | Why |
|---|---|
| Your name | To address you correctly and to identify your account |
| Your court or city of practice | To understand who the Service is being used by, and to improve it for that practice context |
| Your record of acceptance of our Terms | To evidence that the contract was formed with your consent |
4.3 Collected when you use specific features
| Data | Why |
|---|---|
| Photographs and documents you send for drafting | To read the case material and generate the draft you asked for |
| Facts and instructions you type for a draft | Same as above |
| Case diary entries — case title, case number, client name, opposing party, court, judge, fee, hearing dates, notes | To maintain the case diary you have asked us to maintain |
| Reminder details — title, date, court | To send you the hearing reminders you have set |
| Search queries for case law and bare acts | To run the search you requested |
4.4 Collected in connection with payment
We collect the plan you selected, the amount, the payment reference issued by our payment gateway, the payment status, and the date and time.
We do not collect, see, or store your UPI PIN, card number, CVV, bank credentials, or any other payment authentication detail. Payments are processed entirely by our payment gateway (Razorpay), which is regulated by the Reserve Bank of India and maintains PCI DSS compliance. We receive only confirmation that a payment succeeded or failed.
4.5 Collected for service operation and cost control
We maintain operational logs that record usage in a pseudonymised form — your mobile number is stored as an irreversible hash rather than in the clear — together with the plan tier, the AI model used, the volume of text processed, and the estimated cost. We also record short-lived counts of messages received per number, to enforce rate limits and detect abuse.
4.6 What we do not collect
We do not collect your Aadhaar, PAN, Bar Council enrolment number, photograph, location data, device identifiers, or contact list. We do not use cookies or web tracking on the WhatsApp Service. We do not buy personal data from third parties.
5. Why we process your data, and on what basis
Under the DPDP Act we process personal data on the basis of your consent, given when you start a trial or subscribe and accept our Terms, and for legitimate uses permitted by the Act where applicable.
We process your data in order to:
- provide the Service you have asked for — drafting, legal research, arguments, case diary and reminders;
- create, activate, maintain and renew your subscription;
- apply and enforce the daily limits of your plan;
- process payments and issue confirmations;
- send you service messages — activation confirmations, hearing reminders, expiry notices and similar operational communications;
- maintain the security, availability and integrity of the Service, and prevent misuse;
- understand aggregate usage and cost so that we can operate the Service sustainably; and
- comply with applicable law, including tax and accounting obligations.
We do not sell your personal data. We do not share it for advertising. We do not use it to build profiles for marketing by third parties.
6. Artificial intelligence and your data
The Service uses third-party artificial intelligence systems to generate drafts, arguments and summaries.
6.1 When you request a draft or an argument, the material you have submitted — including the text you type and the documents or photographs you send — is transmitted to our AI provider for the sole purpose of generating that output, and the output is returned to you.
6.2 Our AI provider processes this material as a service provider to us. We do not authorise the use of your material to train third-party AI models.
6.3 AI output is generated automatically and may contain errors. It is provided in draft form for your independent professional review, as set out in our Terms. No decision producing legal effects is taken about you by automated means.
6.4 Where we offer a Premium personalised drafting capability, any material used to personalise your drafting style is strictly isolated to your own account. One advocate's documents, drafts or drafting style are never used for another advocate.
7. Who we share your data with
We share personal data only with the following categories of recipients, and only to the extent necessary:
| Recipient | Purpose | What is shared |
|---|---|---|
| Twilio Inc. | Delivery of WhatsApp messages (our messaging provider) | Your mobile number and message content |
| Meta Platforms (WhatsApp) | The WhatsApp platform itself | Your mobile number and message content, subject to WhatsApp's own terms |
| Anthropic (Claude) and, where configured, other AI providers | Generating drafts, arguments and summaries | The material you submit for that task |
| Indian Kanoon | Running case-law and bare-act searches | Your search query only — not your identity |
| Razorpay | Processing payments | Payment amount, reference and status |
| Railway | Cloud hosting of the application and database | All data stored by the Service, at rest |
We may also disclose personal data where we are required to do so by law, by a court of competent jurisdiction, or by a lawful order of a government authority. Where we are permitted to inform you of such a disclosure, we will.
We do not otherwise disclose your data to any third party.
8. Where your data is stored — transfer outside India
Please read this clause carefully.
Our application and database are presently hosted with Railway in a data centre located in the western United States. Your personal data — including case diary entries and material you submit for drafting — is therefore stored outside India. Our AI and messaging providers are also located outside India.
Such transfers are made in reliance on Section 16 of the DPDP Act, which permits transfer of personal data outside India except to territories restricted by the Central Government.
We intend to migrate hosting to an Indian data centre region. We will update this policy and inform users when that migration is completed.
9. How long we keep your data
| Data | Retention |
|---|---|
| Documents and photographs you submit for drafting | Deleted as soon as the draft has been generated, and in any event within 24 hours of submission |
| Generated draft download links and their contents | 24 hours from generation, after which they are permanently deleted and the link stops working |
| Case diary entries and reminders | For as long as your account exists, or until you ask us to delete them |
| Your account record — name, mobile number, court/city, plan, language | For as long as your account exists, and for a reasonable period afterwards to handle renewals and disputes |
| Payment records | As required under applicable tax, accounting and consumer-protection law |
| Pseudonymised usage and cost logs | Retained for operational analysis; these do not identify you |
| Message-deduplication and rate-limit records | Short-lived operational records, cleared routinely |
When retention is no longer necessary and no legal obligation requires us to keep the data, we erase it.
10. How we protect your data
We apply the following measures, and keep them under review:
- all communication with the Service takes place over encrypted channels (HTTPS/TLS);
- incoming messages are cryptographically verified to confirm they genuinely originate from our messaging provider, and forged requests are rejected;
- payment confirmations are verified by cryptographic signature before any subscription is activated, so a payment cannot be faked;
- each user's data is isolated to their own account; no user can access another user's cases, documents or drafts;
- administrative access is read-only and not exposed on the public internet;
- credentials and keys are held in secure configuration, never in source code;
- access to production data is limited to the proprietor and to persons authorised by the proprietor, on a need-to-know basis.
No system can be guaranteed absolutely secure. We do not claim that it can be. We commit to reasonable security safeguards proportionate to the sensitivity of the material involved.
11. Personal data breach
If a personal data breach occurs, we will notify the Data Protection Board of India and each affected user, in the manner and within the timelines required by the DPDP Act and the rules made under it. Our notification will describe, as far as known, the nature of the breach, its likely consequences, and the measures taken.
12. Your rights
Subject to the DPDP Act, you have the following rights:
12.1 Right to access — to obtain a summary of the personal data we hold about you and how it is being processed, and the identities of those with whom it has been shared.
12.2 Right to correction and completion — to have inaccurate or misleading data corrected, incomplete data completed, and data updated.
12.3 Right to erasure — to ask us to delete your personal data where it is no longer needed for the purpose for which it was collected, and where no law requires us to retain it. Note that erasing your case diary will permanently remove your hearing records and reminders.
12.4 Right to withdraw consent — you may withdraw your consent at any time. Withdrawal is not retrospective, and the Service may no longer be usable once consent is withdrawn.
12.5 Right of grievance redressal — to complain to us about how your data has been handled (see Clause 13).
12.6 Right to nominate — to nominate another individual to exercise your rights in the event of your death or incapacity.
12.7 How to exercise your rights — send a message on WhatsApp to +91 70224 57957, or email help@emunshiji.in, from the mobile number or email address linked to your account. We will acknowledge your request within 48 hours and respond substantively within 30 days. We may ask you to verify your identity before acting, to protect your data from unauthorised requests.
12.8 Your duties — the DPDP Act requires you not to impersonate another person, not to suppress material information when providing data, and not to raise false or frivolous complaints.
13. Grievance Officer
If you have any concern about how we handle your personal data, you may contact our Grievance Officer:
Grievance Officer: Devika Srivastava Email: help@emunshiji.in Telephone: +91 70224 57957 Address: Gold Line Residency, Anora Kalan, Faizabad Road, Lucknow, Uttar Pradesh 226010 Hours: Monday–Saturday, 10:00–18:00 IST
Complaints are acknowledged within 48 hours and ordinarily resolved within 30 days, in accordance with the DPDP Act, the Information Technology Act, 2000, and the Consumer Protection (E-Commerce) Rules, 2020.
If you remain dissatisfied, you may approach the Data Protection Board of India established under the DPDP Act.
14. Children
The Service is offered only to persons who are eighteen (18) years of age or older and competent to contract, as stated in our Terms. We do not knowingly collect personal data of children. If we become aware that we have done so, we will delete it.
15. Changes to this policy
We may revise this policy from time to time. Where a revision materially affects how we handle your personal data, we will notify you on WhatsApp before it takes effect. The version number and date at the top of this page always indicate the current version. Continued use of the Service after a revision takes effect constitutes acceptance of the revised policy.
16. Governing law
This policy is governed by the laws of India, including the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000. Subject to the Consumer Protection Act, 2019, the courts at Lucknow, Uttar Pradesh shall have jurisdiction.
17. Contact
e MunshiJi Divya Srivastava, Proprietor Gold Line Residency, Anora Kalan, Faizabad Road, Lucknow, Uttar Pradesh 226010 Udyam Registration No. UDYAM-UP-50-0300200 WhatsApp: +91 87668 17939 · Support: +91 70224 57957 Email: help@emunshiji.in · Website: https://emunshiji.in