Home › Privacy Policy

Privacy Policy

Effective: 21 October 2026

1. Who we are

Orjur ("we", "us") provides AI-assisted legal research and practice-management tools at orjur.com and in the Orjur mobile apps. This policy explains how we handle personal data, in line with India's Digital Personal Data Protection Act, 2023. It applies together with our Terms of Service.

2. What we collect

  • Account details: name, username, email, password (stored only as a one-way hash), and optionally phone, profession, organisation, Bar Council number, and the billing details you enter for invoices (GSTIN, PAN, address, bank details).
  • Sign-in with Google or Apple: your name, email and an account identifier from that provider.
  • Content you add: questions you ask, conversations, cases, clients, hearing dates, notes, invoices, time entries, and documents or photos you upload.
  • Usage data: searches and queries made, pages visited, referring site, approximate country, device type, and the IP address of your last sign-in.
  • Device data (mobile apps): a push-notification token so we can send hearing reminders. Face ID or fingerprint unlock is handled entirely by your device; we never receive biometric data.
  • Payments: plan, amount and payment status. Card, UPI and bank details are collected by Razorpay, not by us.

3. Why we use it

  • To provide the service: answer legal research questions, run searches, manage your cases and clients, and generate documents and invoices.
  • To run your account: sign-in, security (including two-factor authentication), usage limits, subscriptions and billing.
  • To send emails and notifications you've enabled, such as verification codes, hearing reminders and digests. You can turn reminders and newsletters off in Settings.
  • To keep the service secure, fix problems, and understand which features are used.

We do not sell your personal data, and we do not use it for advertising.

4. Who processes it for us

  • Hosting: Microsoft Azure, on servers in India.
  • AI model providers: the text of your questions, and of documents you ask us to analyse, is sent to a third-party AI model to generate answers. We currently use Microsoft Azure OpenAI and may use Anthropic or DeepSeek. Avoid including details in a question that you don't want processed this way.
  • Court records: when you look up a case by CNR or case number, that number is sent to the Government of India's eCourts portals to fetch the case status.
  • Payments: Razorpay.
  • Email: our email delivery providers.
  • Push notifications: Expo, which delivers through Google Firebase Cloud Messaging and Apple Push Notification service.
  • Sign-in: Google and Apple, if you choose to sign in with them.

If you belong to a firm on Orjur, cases and clients you share with the firm are visible to its members. We may also disclose data where the law requires it.

5. How long we keep it

  • Account data: while your account exists.
  • Conversations with Lex: the full text for two years, after which we keep only a copy with personal details removed.
  • Payment and invoice records: as long as tax and accounting law requires, even after your account is deleted.
  • Deleted accounts: see the next section.

6. Deleting your account

You can delete your account in the app (More → Settings → Delete account) or on the web at orjur.com/delete-account. You're signed out immediately. After 30 days we permanently delete your profile, conversations, search history, and the cases, clients, invoices and documents you manage on your own. Payment records are kept as described above, and cases you shared with a firm stay with the firm with your name replaced by "Deleted user". Email us within the 30 days to restore your account.

7. Your rights

You can ask to access, correct or erase your personal data, withdraw consent, nominate someone to exercise these rights on your behalf, and raise a grievance. Most details can be edited directly in Settings; for anything else, write to support@orjur.com. If you're not satisfied with our response, you may complain to the Data Protection Board of India.

8. Security

Data is encrypted in transit (HTTPS), passwords are stored as one-way hashes, and access to our servers is restricted. No system is completely secure, so please use a strong password and enable two-factor authentication.

9. Children

Orjur is meant for adults and legal professionals. It is not directed at anyone under 18, and we don't knowingly collect their data.

10. Changes and contact

We'll post any changes here and update the effective date; for significant changes we'll also notify you by email. Questions or grievances: support@orjur.com.

Stay Updated

Subscribe to the Orjur newsletter

Legal updates, new features, and research tips — no spam, unsubscribe anytime.