Privacy Policy

1. Introduction

Welcome to LawLens, a service operated and provided by ZIPF TECHNOLOGIES PRIVATE LIMITED.We are committed to protecting your privacy and handling your data in an open and transparent manner. This Privacy Policy explains how LawLens ("we," "us," or "our"), located at Swargate, Pune, Maharashtra 411042, India, collects, uses, and shares information that identifies you or is linked to you (“Personal Data”).

Crucial Distinction: Your Personal Data vs. Your Work

This Privacy Policy applies to the Personal Data we collect to manage your account and provide our services.

This Policy also applies to Personal Data contained in documents, queries, or chat history you submit to LawLens ("User Content"), including MCP tool inputs. Ownership and permitted use of User Content are covered by our Terms of Service. Features that save User Content store it to provide those features, such as conversation and work history; MCP-specific processing is explained below. We will never use your private User Content to train our AI models.

2. Information We Collect

We collect Personal Data in the following ways:

a) Information You Provide Directly:

• Account Information: When you register for LawLens, we collect your name, email address, password, and any professional details you provide, such as your job title or organization.
• Payment Information: When you subscribe to a paid plan, we collect transaction and billing information. This is processed by our secure third-party payment providers, and we do not store your full credit card details.
• Communications Information: When you contact us for support via email at [email protected], complete a survey, or provide feedback, we collect your contact information and the content of your message.

b) Information We Collect Automatically:

• Log and Usage Data: We automatically log technical information when you use our services, including your IP address, browser type, dates and times of access, and how you interact with our platform (e.g., features used, buttons clicked). This helps us improve our service and ensure its security.
• Cookies: We use essential cookies to operate our services, for example, to keep you logged in to your account. We may also use cookies for analytics purposes to understand how our website is used.

c) LawLens Search MCP Integration:

• Tool Inputs: We receive the arguments sent by your MCP client, such as search keywords, text conditions, party or judge names, courts, dates, act and provision references, neutral citations, document IDs, and pagination settings. These inputs are processed by our MCP service and search backend to answer the requested search or retrieval.
• Source Results: We return indexed public judgments and legislation to the requesting client. Results can include document IDs, source links, text excerpts, party and judge names, dates, citations, and other available legal-source metadata. These names and details come from the indexed sources, not from access to your private LawLens account.
• No LawLens Sign-in or Payment: This read-only integration does not require a LawLens account or payment. The MCP proxy does not forward account cookies or authorization credentials to the search worker. The tools do not request your account profile, stored conversations, or unrelated files.
• Technical Data and Rate Limits: Our service and hosting infrastructure process connection information and operational logs, such as network addresses, request methods and paths, timestamps, response status, and errors. We also log MCP request and response bodies, including tool inputs and returned results, together with the network address and user agent, to operate, secure, and debug the service. A network address may belong to your MCP provider or a proxy rather than your device. The MCP worker uses a hashed network-address key and in-memory request counters to enforce rate limits; these safeguards are separate from account or marketing profiles.
• Limit What You Send: Submit only information needed for public-source research. Do not include confidential client files, privileged communications, passwords, access tokens, payment details, or other unnecessary sensitive information in MCP tool inputs.

3. How We Use Your Personal Data

We use your Personal Data for the following purposes:

• To provide, operate, and maintain the LawLens service.
• To process MCP tool inputs, return matching indexed sources, enforce request limits, and diagnose service errors.
• To manage your account, process payments, and send you transactional confirmations.
• To respond to your questions and provide customer support.
• To send you important service updates, security alerts, and changes to our policies.
• To send you marketing communications about new features or offers. You can opt out of these at any time.
• To monitor and analyze usage to improve our platform’s features and user experience.
• To enhance the security of our services, prevent fraud, and enforce our Terms of Service.
• To comply with applicable Indian laws and legal obligations.

4. How We Share Your Personal Data

We do not sell your Personal Data. We share information as described below to provide the Service, support client integrations, meet legal requirements, or handle business transfers:

• Hosting and Infrastructure Providers: We use industry-leading, secure hosting services (such as Hetzner and Cloudflare) to store our data. These providers are compliant with high security standards like SOC 2 and GDPR.
• Analytics Providers: We use services like Google Analytics, PostHog and Microsoft Clarity to understand website traffic and improve our service. This data is aggregated and does not identify you personally.
• MCP Client Providers: When you use LawLens Search through Claude or ChatGPT, Anthropic or OpenAI sends tool inputs to our endpoint and receives the results for use in your conversation. Other MCP clients perform the same role. Inputs and returned public-source text may contain Personal Data, depending on the request and the indexed material. The client provider's processing, storage, and use of that information are governed by its own terms, privacy policy, and your settings with that provider.
• MCP Infrastructure: Our hosting, network, and search infrastructure process the tool inputs and technical data needed to deliver results and protect the service. Depending on infrastructure and client-provider locations, this processing may occur outside your country.
• Legal Compliance: We may disclose your Personal Data if required by law, a court order, or a government request in India, or to protect the rights, property, or safety of LawLens, our users, or the public.
• Business Transfers: If LawLens is involved in a merger, acquisition, or sale of assets, your Personal Data may be transferred as part of that transaction, with prior notice to you.

5. Data Retention and Deletion

We retain your Personal Data for as long as your account is active or as needed to provide you with our services and comply with our legal obligations.

You are in control of your data. LawLens provides you with tools to manage your information directly:

• You can delete individual chats or documents at any time.
• You can delete your entire account through your account settings. Upon deletion, we will permanently remove your Personal Data and User Content from our active systems in accordance with our Terms of Service. Data may persist in secure backup archives for a limited period before being completely erased.

MCP Requests and Your Controls

The MCP search handler processes tool inputs to answer each request; it does not create a saved LawLens conversation or an account-linked search-history record. Request logs described above are not linked to a LawLens account. Its in-memory rate-limit counters use a 60-second request window. Older counters are cleared during subsequent requests or when the worker restarts; this does not mean infrastructure logs are deleted after 60 seconds.

Operational logs and support correspondence are separate from those counters and may remain after a request ends, subject to the service-operation, security, support, and legal purposes described in this Policy. To ask about retention or request access to or deletion of Personal Data we hold from MCP use, contact [email protected]. An anonymous MCP request is not linked to a LawLens account, so account deletion does not by itself identify or remove every associated infrastructure record.

You can stop sending new requests by disabling or removing the LawLens connection in your MCP client. Conversation history and copies of results stored by ChatGPT or another client are controlled through that provider. Removing the connection or deleting a client conversation does not automatically delete records held separately by LawLens or its infrastructure providers.

6. Security of Your Data

We implement industry-standard technical and organizational security measures to protect your Personal Data from unauthorized access, loss, or misuse. This includes encryption for data in transit (SSL/TLS) and at rest. However, no system is 100% secure, and we cannot guarantee absolute security.

7. Your Rights and Choices (In Accordance with Indian Law)

As a user in India, you have rights over your Personal Data under the Digital Personal Data Protection Act (DPDPA). You have the right to:

• Access and Correct: Access and update your account information directly through your account settings.
• Deletion (Erasure): Delete your personal data and account as described in Section 5.
• Opt-out of Marketing: Unsubscribe from our marketing emails by clicking the "unsubscribe" link in any email.
• Grievance Redressal: If you have any concerns, please contact us first at [email protected].

To exercise any rights not available through your account settings, please contact us.

8. Children's Privacy

LawLens is not intended for or directed at individuals under the age of 18. We do not knowingly collect Personal Data from children. If we become aware that we have, we will take steps to delete such information promptly.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on this page and, where appropriate, through email.

10. How to Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:

ZIPF TECHNOLOGIES PRIVATE LIMITED
Swargate, Pune, Maharashtra 411042
India
Email: [email protected]