Privacy Policy

DocScore by CounselGrid · Version 2026-07-18 · Drafted for compliance with the Digital Personal Data Protection Act, 2023 (India)

Who we are

DocScore (docscore.counselgrid.com) is an AI-assisted legal document scoring service operated by CounselGrid. For anything in this policy, contact us at grievance@counselgrid.com.

What we collect

  • Account data — your name and email address (or your Google account's name and email if you sign in with Google). Guests are identified only by a random device identifier.
  • Documents you upload — the legal documents you submit for scoring. These may contain personal data about you and about third parties named in them (for example, parties to an agreement). You are responsible for having the right to submit a document for analysis.
  • Analysis output — the scores, findings, clause excerpts, and suggestions our AI produces about your document.
  • Usage and billing data — how many scores you run, your plan and credits, and payment confirmations. Card and payment details are handled by Razorpay; we never see or store them.
  • Abuse-prevention data — for guest sessions, a salted one-way hash derived from your IP address, used solely to enforce free-quota limits. Session cookies are essential-only; we use no advertising or analytics trackers.

Why we process it (purpose)

We process your data only to: run the document analysis you request, show you your reports and history, enforce plan quotas, process payments you initiate, prevent abuse of free tiers, and respond to your support requests. We do not sell personal data or use it for advertising.

AI processing

Document analysis is automated: your document's text is processed by AI language models to produce scores and findings. The output is informational only and is not legal advice. AI can make mistakes — review important documents with a qualified lawyer.

Storage and retention

  • Uploaded documents are stored encrypted at rest on Google Cloud and automatically deleted within 90 days of upload.
  • Analysis reports are retained so you can revisit them, until you delete them by deleting your account (below).
  • Account and consent records are retained while your account exists, and as required for legal compliance after deletion.

Consent and withdrawal

We process your documents and personal data based on the consent you give when creating an account, signing in, starting a guest session, or uploading a document. You can withdraw consent at any time by deleting your account and data below, or by writing to grievance@counselgrid.com. Withdrawal stops all further processing; it does not affect processing already completed.

Your rights

Under the DPDP Act, 2023 you have the right to: access a summary of the personal data we hold about you; correct inaccurate data; erase your data (self-serve below); nominate another individual to exercise your rights in case of death or incapacity; and raise a grievance with us — and, if unresolved, with the Data Protection Board of India.

Who we share data with

Your data is processed on Google Cloud infrastructure (Firestore and Cloud Storage). Payments are processed by Razorpay. Google sign-in, if you use it, is provided by Google. Each processes data on our instructions under their own security commitments. We share nothing else with anyone, except where the law requires it.

Security

All traffic is encrypted in transit (TLS). Documents and records are encrypted at rest. Access is restricted to systems that need it to serve you; sessions use httpOnly cookies. In the event of a personal data breach we will notify affected users and the Data Protection Board as the DPDP Act requires.

Grievance redressal

Grievance Officer: to be appointed — reachable at grievance@counselgrid.com. We acknowledge grievances promptly and aim to resolve them within the timelines prescribed under the DPDP Rules.

Changes to this policy

Material changes bump the version shown at the top of this page, and you may be asked to consent again the next time you sign in.

Delete my account and data

Sign in first, then return here to delete your account and data. If you scored documents as a guest, the same request from the guest session (same browser) deletes those analyses.

See also our Terms of Service.