Privacy Policy

This policy explains how Star Analytix Pvt Ltd handles personal data in CourtMan, in line with the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000.

1. Data we process

• Account data: name, work email, firm or company name, and login records.
• Case documents and extracted facts: files you upload and data derived from them. These often include personal, financial and health information of your clients and other parties. For this data you are the data fiduciary and we act as your processor.
• Usage and security data: audit logs of actions in your organisation, device and browser information.
• Payment data: billing details processed by our payment partner; we do not store card or bank credentials.

2. How we use it

To provide the Service (reading documents, extracting facts, generating and checking drafts, exporting files), to secure accounts, to provide support, to bill, and to meet legal obligations. We do not sell personal data and do not use case documents to train AI models.

3. Where data is stored and who processes it

• Supabase: database, authentication and file storage, hosted in Mumbai, India.
• Vercel: application hosting, with server functions running in Mumbai, India.
• Anthropic: AI models that read documents and generate drafts. Content is sent over encrypted connections, processed outside India, and not used for model training.
• Inngest: background job scheduling (receives identifiers, not document content).
• Payment gateway: payment processing, when payments are enabled.

4. Security

Data is encrypted in transit and at rest. Every organisation's cases, documents and drafts are isolated by database access rules, files are private and accessed through short-lived links, and actions are recorded in an audit log.

5. Retention and deletion

Case documents and drafts are kept while your account is active so you can return to your cases. You can delete documents at any time, and request deletion of cases or your whole organisation at ai@ostaran.com. We delete Customer Data within 30 days of an account closure request, except where the law requires us to retain records such as invoices.

6. Your rights

You may request access to, correction or erasure of your personal data, withdraw consent, and nominate another person to exercise your rights. Individuals whose data appears in a firm's case documents should contact that firm first; we will assist the firm in responding.

7. Grievance officer

Grievance Officer, Star Analytix Pvt Ltd, Mira Road East, Mumbai, Maharashtra, India – 401107. Email grievance@ostaran.com. We acknowledge grievances within 48 hours and aim to resolve them within 15 days.