1. Information We Collect

• Phone Number: For authentication via OTP verification.
• Profile Information: Name, email (optional), Bar Council ID, specialization, city.
• Audio Recordings: Client meeting recordings that you choose to process with our AI.
• Case Data: Case details, client names, notes you enter.
• Usage Data: Number of recordings, app usage patterns.

2. How We Use Your Information

• To provide AI-powered transcription and summarization of your recordings.
• To store and organize your case data securely.
• To authenticate you and maintain your account.
• To improve our AI accuracy and services.

3. Data Storage & Security

• All data is stored on AWS servers in Mumbai, India (ap-south-1).
• Audio recordings are encrypted at rest in Amazon S3.
• Audio files are automatically deleted after 90 days.
• Database entries are encrypted using AWS managed encryption.
• API communications use HTTPS/TLS encryption.

4. Third-Party Services

• Firebase (Google): Phone number verification only.
• Groq: Audio transcription (Whisper AI model).
• OpenAI: Text summarization (GPT-4o-mini).
• AWS: Cloud infrastructure and storage.
• Resend: Email verification delivery.

Audio is processed and discarded by AI providers — they do not store your recordings.

4A. AI Data Processing & User Consent

Before any data is sent to AI services, we explicitly ask for your consent via an in-app dialog. No data is transmitted until you agree.

What data is sent:

• Audio recordings are sent to Groq (groq.com) for speech-to-text transcription using the Whisper model.
• Transcribed text is sent to OpenAI (openai.com) for summarization using the GPT-4o-mini model.
• PDF documents you upload are sent to OpenAI for text analysis and case note generation.

Who receives the data:

• Groq Inc. (San Francisco, CA) — audio transcription only
• OpenAI Inc. (San Francisco, CA) — text summarization only

How the data is handled by third parties:

• Audio and text are processed in real-time and not stored after processing.
• Neither Groq nor OpenAI uses your data to train their AI models.
• Both providers maintain SOC 2 Type II compliance for data security.

You can revoke consent at any time by contacting us. If consent is revoked, AI features will be disabled but your existing notes will remain accessible.

5. Client-Attorney Privilege

We understand the sensitive nature of legal communications. We do not:

• Access or read your recordings or transcripts manually.
• Share your data with any third party for marketing purposes.
• Use your case data to train AI models.
• Sell your information to anyone.

6. Your Rights

• Delete your account and all associated data at any time from Settings → Delete Account.
• Export your data — download all cases, notes, and summaries from Settings → Export My Data.
• Request information about what data we hold.
• Opt out of email communications.

7. Data Retention

• Audio recordings: Auto-deleted after 90 days from S3.
• Case data and notes: Retained until you delete them or your account.
• Account data: Retained until account deletion.
• Upon account deletion: All data is permanently removed within 24 hours.

8. Geographic Scope

Vakil Notes AI is currently available in India only. All data is processed and stored within India (AWS Mumbai region).

9. Contact Us

For privacy concerns or data requests:

Email: karun.khurana1@gmail.com

Company: Dyro Labs, India