How Lawfly handles your data and uses AI.
This page sets out what we do with case data and how AI features work, in plain language. Statements here are kept short and factual. Sections not yet published are marked.
What the AI does, and what it does not
Lawfly uses AI to answer research questions, summarise and read documents, extract case details, translate, and help start drafts from case context. AI-generated text can be wrong or incomplete, including citations. It is labelled inside the product and must be checked by an advocate before it is relied on. Lawfly does not provide legal advice.
Which AI services process your text
Lawfly's AI features use Google's Gemini API. Reading scanned pages (OCR) uses Google Document AI. Only the text needed for a task is sent: your question or instruction and the relevant case details or document text.
Lawfly masks Aadhaar and PAN numbers in many, but not yet all, of the places where text is sent to the Gemini API; for example, a number typed into a research question can be sent as it is. Names and other case facts are not masked, so the provider receives them. Scanned pages are sent to Document AI as they are. "Read aloud" sends the answer text to Google Cloud Text-to-Speech as it is.
For web research, Gemini can search Google; Google's terms say it keeps those prompts, any context provided and the results for 30 days.
Document AI reads scanned pages in Google Cloud's Mumbai region (asia-south1). The Gemini API and Text-to-Speech do not let us choose where text is processed.
Your data is not used to train AI models
Lawfly does not use your information, or your clients' information, to train or improve AI models.
AI providers have their own terms. Google's Gemini API terms treat use through a Google Cloud project with active billing as a paid service. For paid services, Google says it does not use prompts or responses to improve its products, logs them for a limited period to detect misuse and meet legal requirements, and may store them temporarily in any country where it or its agents have facilities. Lawfly has enabled billing for its production use of the Gemini API.
What Lawfly keeps from AI work
Lawfly stores your research conversations and generated drafts, with the three most recent versions of each generated draft document, so your work can be recovered and reviewed. Research can remember your stated preferences (for example, how you like answers laid out); you can delete remembered preferences in the application.
Lawfly records the number of AI requests, the model used and their estimated cost, for usage limits and billing. If you use "read aloud", the audio is kept so it can be replayed.
We have not yet set retention periods for these. The Privacy Notice explains what is kept today.
Research answers show their sources
Research summaries include references to the material they draw on so that you can open and read each source. A reference is a pointer for your own verification, not a guarantee that the summary is correct.
The advocate stays in control
Lawfly does not file documents with any court. Drafts remain editable until you export them, and you decide what is shared with clients.
Who can see your cases
Cases are shared with the lawyer who owns them and, for a firm case, with the firm's members. Information already shown on a device can stay visible on that device until it reconnects or signs out.
Where case data lives and how it is protected
Lawfly runs on Google Cloud, with sign-in through Google Firebase. The application and its database run in Google Cloud's Mumbai region (asia-south1) and uploaded documents are stored in Google Cloud's Asia multi-region; some parts run in the United States, as listed in the Privacy Notice.
Information travels over encrypted (HTTPS) connections, and Google Cloud encrypts stored information by default. Automated daily database backups are kept for 7 to 15 days. This page makes no certification claim and does not claim that every system is in India.
How long data is kept, and how to remove it
You can delete documents, research conversations and remembered preferences in the application. For other requests, including account closure, write to support@lawfly.in. Closing one lawyer's account does not delete a firm's cases or other members' work.
Third parties that process data for Lawfly
Google Cloud (hosting, database, storage, logs); Google Firebase (sign-in, verification, hosting, application analytics); Google Gemini API (AI features); Google Document AI (reading scanned pages); Google Cloud Text-to-Speech (reading answers aloud); an eCourts data provider (case status, orders and cause lists you request). The Privacy Notice lists what each receives.
No payment provider receives data at present, because paid plans cannot yet be bought. Where each provider processes data is set out in the Privacy Notice.
How to reach us about security, privacy or AI behaviour
Write to support@lawfly.in if you believe you have found a security issue, think your account or information has been misused, want to make a privacy request or complaint, or want an AI output reviewed. The mailbox is monitored.
Grievance Officer: Pranay Banka. Contact: support@lawfly.in. We acknowledge every complaint within 48 hours of receiving it and resolve it within one month of receiving it. We follow any shorter deadline required by applicable law. We have not yet published response times for security reports.
