Privacy
Privacy Policy
How ALM handles your personal data, your case files and your conversations — and the rights you hold over them.
Last updated
ALM is operated by Altair Solutions Private Limited, Mumbai, which is the data fiduciary for the personal data described here. This policy sets out what we collect when you use the ALM app or this website, why we collect it, how long we keep it, and how you can exercise your rights. It is written in plain language on purpose: a policy you cannot read protects nobody.
Information we collect
We collect what ALM needs to follow your matters, answer questions about them, and keep both sides of a case in touch. Nothing more.
What you give us
- Your name, mobile number and email address — and, for an advocate, your enrolment details and the chambers or firm you practise with.
- The matters you add: a CNR, a case number, or the court, case type and year you search by.
- Documents you upload — orders, pleadings, notices, and any scan or photograph you ask ALM to read.
- Notes and tasks you keep in a case diary, and the messages you send in chat.
- The billing details needed to raise a GST invoice. Card and UPI details are entered on Razorpay's payment page and are never stored by ALM.
What ALM records automatically
- Device model, operating system, app version, and the language you read in.
- IP address and the approximate city it resolves to, used for security and fraud prevention.
- Which screens you open and which features you use, so we can see what needs fixing.
- Diagnostic logs — crashes, failed requests, and the time each occurred.
What ALM brings in from the public court record
- Once you add a matter, ALM reads that case's entry on the public eCourts record: the parties, the hearing dates, cause-list movement, and the orders and judgments the court has published. That information is already public. ALM assembles it into your file — it does not create it, and it cannot change it.
How we use your information
Every use below is one you would expect from a case-tracking app. We do not use your case data or your documents to train third-party AI models, and we do not use them for advertising.
Running your matters
Importing a case, checking it against the public court record, and putting each new order and date into the file.
Answering questions about a file
The AI assistant reads your own case documents to summarise an order or answer a question, and cites what it relied on.
Reminders and alerts
Telling you about a new order, a listed date, or a change in the cause list, by notification or email.
Payments and invoices
Taking payment through Razorpay, raising a GST invoice, and keeping the records tax law requires.
Security and fraud prevention
Detecting unauthorised access, abuse and automated scraping, and keeping an audit trail of who saw what.
Support and improvement
Answering your questions, fixing defects, and understanding which features are actually used.
We cannot read your chats
Messages between an advocate and a litigant are end-to-end encrypted. Their contents are not available to ALM, which means we cannot read them, cannot analyse them, and cannot produce them to anyone.
When we share data, and with whom
We do not sell your personal data and we do not share it for advertising. Data leaves ALM only in the situations below.
Service providers
Cloud hosting, notification delivery, payment processing and analytics providers, acting on our instructions under contract, and only for the purpose we engaged them for.
The people on your own case
Where you connect an advocate and a litigant, or work in a firm's shared workspace, the people you grant access to can see the matters you share with them. Roles decide who sees what.
Legal obligation
Where a court, tribunal or an authority acting under law requires disclosure, we disclose only what the demand covers — and we tell you, unless the law forbids it.
Business transfer
If the business is merged, acquired or reorganised, data may transfer with it. The successor stays bound by this policy, and we will tell you before anything changes.
With your consent
Anything else happens only if you have asked for it, and only for as long as that consent stands.
How we protect your data
A case file is confidential, and often privileged. The platform is built on that assumption rather than adding it afterwards.
Encrypted in transit and at rest
TLS on every connection, and AES-256 encryption for data stored on our servers.
End-to-end encrypted chat
Message content is encrypted between the participants' devices. ALM carries it; ALM cannot read it.
Hosted in India
Case data is stored on servers located in India, in line with local requirements.
Role-based access
Inside a firm, permissions decide which matters each person can open. Our own staff access is restricted and logged.
A full audit trail
Access to a matter, and every change in it, is recorded — so a firm can account for who did what, and when.
Reviewed on a cycle
We patch dependencies, review our systems and test our defences on a regular schedule, not only after an incident.
If something goes wrong
No system is perfect. If we discover a personal data breach, we will notify the Data Protection Board of India and every user affected, in the manner the Digital Personal Data Protection Act, 2023 requires.
How long we keep it
We keep personal data only while the purpose it was collected for survives, or for as long as the law requires.
- While your account is active — your profile, matters, documents and diary stay with you.
- After you delete your account — personal data is erased within 90 days, except where the law requires us to keep it.
- Financial records — invoices and payment records are kept for the period tax and company law prescribe.
- Diagnostic logs — kept for a rolling 180 days, then discarded.
- Court records — orders and case details taken from the public eCourts record are public records in their own right. Deleting your account removes your file, not the court's.
Your rights over your data
Under the Digital Personal Data Protection Act, 2023 you are a Data Principal, and the rights below are yours. Write to us and we will act on a request within 30 days.
Access
A summary of the personal data we hold about you, and of what we have done with it.
Correction and completion
Have inaccurate data corrected, incomplete data completed, and out-of-date data brought up to date.
Erasure
Have your personal data deleted, except where we are required to keep it.
Export
Take your matters, documents and diary out in a portable format, at any time.
Withdraw consent
Withdraw a consent as easily as you gave it. Withdrawal applies from that point on, not backwards.
Nominate
Name someone to exercise these rights on your behalf if you die or become unable to exercise them yourself.
To exercise any of these rights, write to us using the details in the last clause. Please write from the email address or mobile number registered on your account, so that we can be satisfied the request is yours.
Children's data
ALM is for adults. You must be 18 or older to hold an account, and we do not knowingly collect a child's personal data, profile children, or direct advertising at them.
Court papers are a different matter. A case document may name a minor — in a custody dispute, a maintenance petition or a proceeding under a protective statute — and ALM does not strip that out, because a file with the parties removed is not the file. Such data is held as part of your case file, encrypted, confidential, and visible only to the people you have given access to. Ask us to remove a document and we will, so far as the law allows.
If you believe a child holds an ALM account, tell us and we will close it and delete the data.
Changes to this policy
We will update this policy when our practices, our technology or the law changes. When a change is material, we will:
- change the “Last updated” date at the top of this page;
- tell you in the app, or by email to your registered address, before the change takes effect;
- set out in short what has changed, so that you do not have to compare two documents.
Earlier versions are kept. Ask us and we will send you the one that applied on a given date.
Contact and grievance redressal
Questions about this policy, or about the data we hold on you, come straight to us. Every grievance is answered, and answered in writing.
Grievance Officer
Complaints under this policy, and under the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, are handled by the Grievance Officer, Altair Solutions Private Limited, at the address below. We acknowledge a complaint within 24 hours and resolve it within 15 days.
If we do not resolve it
Where we have not resolved your grievance, you may complain to the Data Protection Board of India, which is the authority constituted under the Digital Personal Data Protection Act, 2023.
By using ALM you confirm that you have read this policy and understood how your data is handled.
See alsoTerms & Conditions