1. Who we are
“Opakhya” (“we”, “us”, or “our”) provides an AI-assisted platform for discovering tax-litigation precedents, summarising orders, and drafting submissions. This Privacy Policy applies to the Opakhya website and application (the “Service”). If you have any questions, contact us at support@opakhya.com.
2. Information we collect
- Account information — your name, email address, and password (stored only as a salted hash). If you sign in with Google, we receive your verified email and basic profile from Google.
- Content you upload — the documents, orders, case files, notes, and queries you add to your workspace so the Service can index, search, summarise, and draft on your behalf.
- Usage and device data — log data such as IP address, browser type, pages accessed, and timestamps, used for security, abuse prevention, and improving reliability.
- Cookies — strictly-necessary cookies for authentication and session management. See the Cookies section below.
3. How we use your information
- To provide, operate, and secure the Service, including authentication and single-session control.
- To index and search your repository, generate case summaries, and draft submissions you request.
- To manage subscriptions, trials, workspace sharing, and support requests.
- To detect, prevent, and respond to fraud, abuse, and security incidents.
- To comply with applicable legal obligations.
4. AI processing — we do not train on your documents
Opakhya uses trusted cloud AI providers (including Amazon Web Services) to power search, summarisation, and drafting. We never use your documents, queries, or workspace content to train foundation or machine-learning models, and our AI providers do not use your content to train their models. Your content is processed only to return the result you asked for, and then it is not retained by the AI provider for training.
5. Where your data is stored and how we protect it
- Hosted in India — your data is stored and processed on Amazon Web Services infrastructure in the Asia Pacific (Mumbai) ap-south-1 region.
- Encryption — data is encrypted in transit using TLS and encrypted at rest.
- Access controls — role-based access, multi-factor authentication for administrators, session timeouts, account lockout, and audit logging.
- Secrets management — credentials and signing keys are held in a managed secrets vault, not in application code.
No method of transmission or storage is perfectly secure, but we work to protect your data using industry-standard safeguards and to notify you of material incidents where required by law.
6. How we share information
We do not sell your personal data or your uploaded content. We share information only with:
- Service providers (sub-processors) who host our infrastructure and provide AI processing, under contractual confidentiality and security obligations.
- Payment processors, when you purchase a paid plan, to handle the transaction — we do not store your full card details.
- Legal and safety — where required by law, regulation, or valid legal process, or to protect the rights and safety of users and the public.
- People you invite — content in a shared workspace is visible to members you add via a share code.
7. Data retention
We retain your account and content for as long as your account is active. You may delete documents at any time. When you close your account, we delete or anonymise your personal data within a reasonable period, except where we must retain limited records to meet legal, tax, accounting, or security obligations.
8. Your rights (DPDP Act, 2023)
We handle personal data in alignment with India’s Digital Personal Data Protection Act, 2023. You have the right to:
- access a summary of the personal data we process about you;
- request correction or updating of inaccurate or incomplete data;
- request erasure of your personal data, subject to legal retention requirements;
- nominate another individual to exercise your rights in the event of death or incapacity;
- raise a grievance about how your data is handled.
To exercise any of these rights, or to reach our Grievance Officer, email support@opakhya.com. We will respond within the timelines required by applicable law.
9. Cookies
We use only strictly-necessary cookies to keep you signed in and to maintain session security. We do not use third-party advertising cookies. Blocking essential cookies may prevent you from signing in.
10. Children
The Service is intended for legal professionals and is not directed to children. We do not knowingly collect personal data from anyone under the age of 18.
11. Changes to this policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, notify you within the Service.
12. Contact us
Questions about this policy or your data? Email us at support@opakhya.com.