ClariCase – Privacy Policy

1.1 This Privacy Policy describes how ClariCase (“ClariCase”, “we”, “us” or “our”) collects, uses, stores, processes, protects and discloses information in connection with the Platform and the Services.

1.2 This Privacy Policy applies to all Users who access or use the Platform, create an Account, purchase a Subscription Plan, communicate with ClariCase, upload information through the Platform or otherwise interact with the Services.

1.3 This Privacy Policy forms an integral part of the ClariCase Terms of Service. Capitalised terms not defined in this Privacy Policy shall have the meanings assigned to them in the Terms of Service.

1.4 This Privacy Policy applies only to information processed by ClariCase in connection with the Platform and the Services. It does not govern the independent collection or processing of information by Independent Lawyers or other third parties, each of whom maintains their own privacy practices and legal obligations.

1.5 Where required by Applicable Law, ClariCase will obtain any consent necessary before collecting, using or processing information for a particular purpose. Where processing is based upon consent, such consent may be withdrawn at any time, subject to Applicable Law and any other lawful ground for continued processing.

1.6 Nothing in this Privacy Policy limits any rights or obligations arising under Applicable Law, including any rights that cannot lawfully be excluded or restricted.

1.7 References in this Privacy Policy to the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025 apply to the extent the relevant provisions have been brought into force and are applicable from time to time. ClariCase implements safeguards in advance of statutory commencement as a matter of responsible practice.

2.1 This Privacy Policy governs the collection and processing of information by ClariCase in connection with:

(a) the Platform;

(b) the Services;

(c) User Accounts;

(d) Subscription Plans;

(e) communications between Users and ClariCase;

(f) customer support and administrative interactions;

(g) payment and billing processes relating to Subscription Plans;

(h) document management, case management and other Platform functionality; and

(i) any other interaction through which ClariCase collects or processes information in connection with the Platform or the Services.

2.2 This Privacy Policy applies regardless of whether the Platform is accessed through a website, mobile application, desktop application or any other technology through which the Services are made available.

2.3 Certain features of the Platform may integrate with or rely upon Third-Party Services. The collection or processing of information by those providers is governed by their respective privacy policies and terms, and not by this Privacy Policy, except to the extent ClariCase determines the purpose and means of such processing under Applicable Law.

2.4 The Platform may contain links to third-party websites, applications or services. ClariCase does not control and is not responsible for the privacy practices, security measures or content of such third-party services. Users are encouraged to review the applicable privacy policies before providing information to any third party.

2.5 Where ClariCase introduces new products, features or functionality, this Privacy Policy shall apply to such products or features unless a separate privacy notice is expressly provided.

For the purposes of this Privacy Policy, the following words and expressions shall have the meanings assigned to them below. Unless otherwise defined in this Privacy Policy, capitalised terms shall have the meanings assigned to them in the Terms of Service.

3.1 “Account Information” means information provided by a User when creating, maintaining or updating an Account, including names, usernames, contact details, login credentials and similar account-related information.

3.2 “Applicable Law” means all applicable statutes, rules, regulations, notifications, governmental directions, judicial decisions and legally binding requirements relating to privacy, data protection, information security and any other applicable laws.

3.3 “Case Information” means information relating to a User’s legal matter that is uploaded, submitted, stored, transmitted or otherwise processed through the Platform, including matter descriptions, case status, hearing schedules, timelines, communications, documents and administrative records relating to the User’s legal journey.

3.4 “Data Fiduciary”, “Data Principal” and “Data Processor” have the meanings assigned to them under the Digital Personal Data Protection Act, 2023, to the extent applicable.

3.5 “Legal Documents” means pleadings, petitions, agreements, contracts, affidavits, evidence, correspondence, court filings, legal notices and any other documents uploaded or processed through the Platform in connection with a User’s legal matter.

3.6 “Personal Data” means any data about an individual who is identifiable by or in relation to such data, and includes any information that constitutes personal data, personal information or a similar concept under Applicable Law.

3.7 “Personal Data Breach” means any unauthorised processing of Personal Data, or accidental disclosure, acquisition, sharing, use, alteration, destruction or loss of access to Personal Data, that compromises its confidentiality, integrity or availability.

3.8 “Platform Data” means technical, operational and usage-related information generated through the use of the Platform, including device information, browser information, IP addresses, system logs, diagnostic information, feature usage, analytics and similar technical data.

3.9 “Purpose-Specific Notice” means a concise, independently understandable notice presented at or before collection that identifies the Personal Data concerned, the specified purpose, the Service or use enabled, the mechanism for exercising rights and the grievance channel.

3.10 References in this Privacy Policy to the collection, processing, use, storage or disclosure of information shall be interpreted in accordance with Applicable Law and include any equivalent activity recognised under such laws.

4.1 ClariCase collects information necessary to provide, operate, improve and secure the Platform and the Services. The information collected depends upon how a User interacts with the Platform, the Services and the features used.

4.2 At each relevant collection point, ClariCase will identify information that is required to provide the requested Service and information that is optional. Refusal to provide optional information will not prevent access to an unrelated Service.

4.3 ClariCase may collect the following categories of information.

4.4 Account Information

ClariCase may collect Account Information, including:

(a) full name;

(b) email address;

(c) mobile number;

(d) username;

(e) password or authentication credentials;

(f) profile information; and

(g) any other information voluntarily provided when creating or updating an Account.

4.5 Identity Information

Where reasonably necessary for identity verification, regulatory compliance or fraud prevention, ClariCase may collect identity-related information, including government-issued identification documents or other information voluntarily provided by the User. ClariCase will collect the minimum identity information required and will avoid collecting identifiers that are not necessary for the relevant purpose.

4.6 Subscription and Payment Information

ClariCase may collect information relating to Subscription Plans, billing and payments, including:

(a) subscription details;

(b) invoices;

(c) payment status;

(d) billing address;

(e) transaction history; and

(f) other information necessary for processing Subscription Fees.

Payment card information and other financial credentials are collected and processed directly by authorised third-party payment providers. ClariCase does not ordinarily store complete payment card information except to the extent necessary for billing records or where permitted by Applicable Law.

4.7 Case Information

Users may voluntarily submit or generate Case Information through the Platform, including:

(a) descriptions of legal matters;

(b) case status;

(c) hearing schedules;

(d) timelines;

(e) communications relating to legal matters;

(f) administrative notes;

(g) matter history; and

(h) other information relating to the management of a User’s legal journey.

4.8 Legal Documents

Users may upload Legal Documents through the Platform, including contracts, agreements, petitions, pleadings, affidavits, notices, correspondence, evidence, court filings and other legal records necessary for the Services.

4.9 User Content

ClariCase may collect and process User Content voluntarily uploaded, submitted, stored or transmitted through the Platform, including text, images, files, communications, documents and other materials necessary for providing the Services.

4.10 Communications

ClariCase may collect information contained in communications between Users and ClariCase, including customer support requests, emails, chat messages, feedback, surveys, telephone conversations where lawfully recorded, and other communications relating to the Platform or the Services.

4.11 Platform Data

When Users access or use the Platform, ClariCase may automatically collect Platform Data, including:

(a) IP address;

(b) browser type;

(c) operating system;

(d) device identifiers;

(e) access dates and times;

(f) session information;

(g) diagnostic logs;

(h) feature usage;

(i) crash reports; and

(j) similar technical information necessary for operating, maintaining and securing the Platform.

4.12 Cookies and Similar Technologies

ClariCase may collect information through cookies, pixels, local storage, software development kits and similar technologies. Further information is provided in Section 10.

4.13 Information from Third Parties

ClariCase may receive information from Third-Party Services where reasonably necessary to provide the Services, including payment providers, identity verification providers, communication providers, cloud service providers and other technology partners.

4.14 Information Provided by Independent Lawyers

Where reasonably necessary for the administration of a User’s legal journey, ClariCase may receive limited information from an Independent Lawyer relating to scheduling, case status, document coordination or other administrative matters connected with the Services.

4.15 Information Required by Law

ClariCase may collect information where required to comply with Applicable Law, lawful governmental requests, court orders, regulatory obligations or legal proceedings.

4.16 Information About Other Persons

Legal matters may require information about counterparties, witnesses, employees, family members or other individuals. Users must have a lawful basis to provide such information and should disclose only what is reasonably necessary. ClariCase may restrict or remove information that appears excessive, unlawfully obtained or unrelated to the Service.

4.17 Voluntary Information

Users should avoid providing information that is unrelated to the requested Service. Information voluntarily submitted but not specifically requested will be processed only where it is relevant, lawful and reasonably necessary for the provision of the Platform or the Services.

5.1 ClariCase uses information only where reasonably necessary to operate the Platform, provide the Services, comply with Applicable Law, protect rights and safety, or otherwise fulfil the purposes described in this Privacy Policy.

5.2 ClariCase seeks to collect, use and retain only such information as is reasonably necessary for those purposes. Depending upon the circumstances, ClariCase may use information for one or more of the following purposes.

5.3 Provision of the Services

To create and maintain User Accounts, provide access to Subscription Plans, operate the Platform and deliver the Services requested by the User.

5.4 Platform Administration

To administer legal matters through the Platform, maintain Case Information, organise Legal Documents, coordinate workflows, manage timelines, maintain hearing schedules and facilitate other administrative functions relating to a User’s legal journey.

5.5 Communication

To communicate with Users regarding Accounts, Subscription Plans, support requests, security notifications, service updates, billing matters, Platform functionality and other matters relating to the Services.

5.6 Coordination with Independent Lawyers

To facilitate administrative coordination between Users and Independent Lawyers, including scheduling consultations, sharing documents where authorised, coordinating communications and supporting the management of legal matters through the Platform.

5.7 Customer Support

To respond to enquiries, investigate issues, provide technical assistance, resolve complaints and improve the quality of customer support.

5.8 Billing and Payment

To process Subscription Fees, maintain billing records, issue invoices, detect payment-related fraud and administer Subscription Plans.

5.9 Security

To protect the Platform, Users and the Services by detecting unauthorised access, fraud, security incidents, malicious activity, abuse and other threats affecting the integrity or availability of the Platform.

5.10 Platform Improvement

To understand how Users interact with the Platform, improve functionality, develop new features, troubleshoot technical issues, perform analytics, monitor performance and enhance the overall User experience.

5.11 Business Operations

To conduct internal business operations, maintain records, perform audits, manage risk, support corporate governance, ensure business continuity and improve operational efficiency.

5.12 Protection of Rights

To establish, exercise or defend legal claims, enforce the Terms of Service and other applicable policies, protect the rights, property or safety of ClariCase, Users, Independent Lawyers and third parties, and investigate suspected violations of Applicable Law.

5.13 Legal and Regulatory Compliance

To comply with Applicable Law, lawful governmental requests, judicial orders, regulatory requirements, legal proceedings and other legal obligations applicable to ClariCase.

5.14 Research and Analytics

ClariCase may use aggregated, anonymised or de-identified information for statistical analysis, research, service improvement, reporting and business intelligence, provided that such information cannot reasonably be used to identify an individual.

5.15 Automated Technologies and Artificial Intelligence

(a) ClariCase may use automated tools to support administrative functions such as document classification, search, workflow management, reminders, fraud detection and platform security.

(b) Where Legal Documents or confidential matter information would be sent to an external artificial intelligence provider, ClariCase will disclose the provider category, purpose, retention period and model-training position, and will obtain separate permission where required.

(c) ClariCase will not authorise any provider to train a general-purpose model on User Legal Documents unless the User gives separate, informed and optional consent.

(d) Automated outputs are subject to human review where they may materially affect a User. They do not constitute legal advice and do not replace the professional judgment of an Independent Lawyer.

5.16 Call Recordings

Calls may be recorded only where permitted by Applicable Law and after appropriate notice or consent. The purpose, retention period and the method for objecting or using an alternative channel will be communicated before recording begins.

5.17 Other Compatible or Lawful Purposes

ClariCase may process information for another purpose only where that purpose is compatible with the original purpose, is separately authorised by the User, is required by law, is permitted as a certain legitimate use, or is otherwise lawfully exempt. A fresh notice and consent will be obtained where required.

6.1 ClariCase processes Personal Data only for a lawful purpose and on a ground permitted under Applicable Law.

6.2 Depending on the activity and the law in force, processing may be based on:

(a) the Data Principal’s free, specific, informed, unconditional and unambiguous consent expressed through a clear affirmative action;

(b) a certain legitimate use specifically recognised under Section 7 of the Digital Personal Data Protection Act, 2023, to the extent applicable;

(c) compliance with a legal obligation, court order or lawful governmental requirement;

(d) the establishment, exercise or defence of legal rights or claims, where permitted; or

(e) any other statutory permission or exemption applicable to the processing.

6.3 ClariCase does not rely on an open-ended “legitimate interests” balancing test where Indian law requires consent or a specifically recognised legitimate use.

6.4 Where consent is relied upon, ClariCase will retain evidence of the applicable notice, the consent wording and version, the date and method of the affirmative action, and any later withdrawal or modification.

6.5 Consent may be withdrawn with ease comparable to the manner in which it was given. Withdrawal does not affect processing already lawfully completed and may not prevent retention or processing that is independently required or permitted by law.

7.1 ClariCase may share or disclose information only where reasonably necessary to provide the Platform or the Services, comply with Applicable Law, protect rights and safety, or otherwise as described in this Privacy Policy.

7.2 Depending upon the circumstances, ClariCase may share information with one or more of the following categories of recipients.

7.3 Independent Lawyers

(a) ClariCase may share limited matter information with one or more Independent Lawyers for conflict checks, availability assessment or an engagement discussion, only after the User requests such assistance and receives an appropriate notice. Sharing for an initial conflict check will be limited to the minimum information reasonably required.

(b) Complete documents or detailed matter information will be shared with a selected Independent Lawyer only to the extent authorised by the User or otherwise lawfully necessary.

(c) Once an Independent Lawyer independently determines the purposes and means of processing information received under a Lawyer Engagement, that lawyer acts as a separate Data Fiduciary or equivalent independent controller and is responsible for their own professional and privacy obligations.

7.4 Case Managers and Personnel

Information may be accessed by Case Managers, employees, contractors, consultants or other authorised personnel of ClariCase strictly on a need-to-know basis for the purpose of providing the Platform or the Services.

7.5 Service Providers

ClariCase may share information with third-party service providers that perform services on its behalf, including providers of:

(a) cloud hosting;

(b) payment processing;

(c) customer support;

(d) communications;

(e) identity verification;

(f) cybersecurity;

(g) analytics;

(h) infrastructure management;

(i) software development; and

(j) other operational or administrative services reasonably necessary for the Platform or the Services.

ClariCase requires such service providers to process information only for authorised purposes and to maintain appropriate confidentiality and security measures consistent with Applicable Law.

7.6 Business Transactions

Information may be disclosed in connection with an actual or proposed merger, acquisition, investment, financing, corporate restructuring, sale of assets or similar business transaction, provided that appropriate measures are taken to protect the confidentiality of such information.

7.7 Legal and Regulatory Requirements

ClariCase may disclose information where reasonably necessary to:

(a) comply with Applicable Law;

(b) comply with a lawful order of a court, tribunal or governmental authority;

(c) respond to lawful regulatory requests;

(d) investigate suspected fraud, security incidents or unlawful activity;

(e) enforce the Terms of Service or other applicable policies; or

(f) protect the rights, property or safety of ClariCase, Users, Independent Lawyers or third parties.

7.8 With User Consent

ClariCase may disclose information to other persons or organisations where the User has expressly authorised or instructed ClariCase to do so.

7.9 Aggregated and De-Identified Information

ClariCase may use, publish or disclose aggregated, anonymised or de-identified information for research, analytics, reporting, service improvement or other lawful business purposes, provided that such information cannot reasonably be used to identify an individual.

8.1 ClariCase provides technology-enabled legal journey management Services and does not provide Legal Services.

8.2 Independent Lawyers are independent professionals with separate confidentiality, recordkeeping, conflict and privacy obligations.

8.3 Communications directly between a User and an engaged Independent Lawyer may be protected by professional confidentiality or legal privilege under Applicable Law. Communications with ClariCase, Case Managers or support personnel are contractually confidential but do not automatically attract lawyer-client privilege.

8.4 Users should avoid providing unnecessary privileged or highly sensitive material before an Independent Lawyer has accepted the engagement and disclosure has been authorised.

8.5 ClariCase personnel may access lawyer-client communications or documents only where operationally necessary, technically required, authorised by the User or the Independent Lawyer, or legally required. Where available, lawyer-only or restricted folders are subject to role-based permissions.

8.6 Questions concerning an Independent Lawyer’s privacy practices, professional files or retention obligations should be directed to that Independent Lawyer.

9.1 The Platform may integrate with or rely upon Third-Party Services to provide certain functionality or improve the operation of the Platform.

9.2 Such Third-Party Services may include:

(a) cloud hosting providers;

(b) payment gateways;

(c) communication platforms;

(d) identity verification providers;

(e) analytics providers;

(f) customer support platforms;

(g) cybersecurity providers;

(h) infrastructure providers;

(i) productivity tools;

(j) approved artificial intelligence providers; and

(k) other technology partners reasonably necessary for operating the Platform or the Services.

9.3 The collection or processing of information by a third-party provider may be governed by that provider’s own terms of service and privacy policy.

9.4 ClariCase encourages Users to review the applicable privacy policies of third-party providers before providing information directly to them.

9.5 While ClariCase carefully selects reputable service providers where reasonably practicable, ClariCase does not control and is not responsible for the independent acts, omissions or privacy practices of third-party providers, except to the extent responsibility cannot lawfully be excluded under Applicable Law.

9.6 Where third-party providers process information on behalf of ClariCase, ClariCase takes reasonable steps to require such providers to process information only for authorised purposes and to implement appropriate security measures consistent with Applicable Law.

10.1 ClariCase may use cookies, local storage, pixels, software development kits and similar technologies.

10.2 Strictly necessary technologies may be used to authenticate Users, maintain sessions, prevent fraud, remember security settings and deliver requested functionality.

10.3 Analytics, advertising or other non-essential technologies will be used only after any consent required by Applicable Law has been obtained. Optional choices will not be pre-selected and may be changed through the cookie preference interface.

10.4 Disabling necessary technologies may prevent portions of the Platform from functioning. Refusing optional technologies will not prevent access to core Services unrelated to those technologies.

10.5 Further details, including provider categories, duration and controls, will be stated in the Cookie Policy or preference centre.

11.1 ClariCase maintains administrative, technical and organisational safeguards proportionate to the nature and sensitivity of the information and the risks of processing.

11.2 Safeguards include, as appropriate, encryption or equivalent protection, role-based access control, multi-factor authentication for privileged access, logging and monitoring, secure backups, vulnerability management, secure development practices, personnel confidentiality obligations, vendor security obligations and incident response procedures.

11.3 Access to Personal Data, Case Information and Legal Documents is limited to authorised persons on a need-to-know and least-privilege basis. Access rights are reviewed periodically and revoked promptly when no longer required.

11.4 No system can guarantee absolute security. Users must protect their credentials, use available security features and promptly report suspected unauthorised access.

11.5 Personal Data Breach Response

(a) ClariCase will investigate and contain an actual or suspected Personal Data Breach, preserve relevant evidence, assess likely consequences and take reasonable remediation measures.

(b) Where Applicable Law requires notification, ClariCase will inform affected individuals without undue delay and will notify the competent authority within the applicable period. When Rule 7 of the Digital Personal Data Protection Rules, 2025 is in force and applicable, this includes intimation to the Data Protection Board of India without delay and a detailed report within seventy-two (72) hours of becoming aware of the breach, or such longer period as the Board may permit.

(d) A breach notice may describe the nature and timing of the incident, its likely consequences, mitigation measures taken, recommended protective steps and a contact point for questions.

12.1 ClariCase retains information only for a documented purpose and in accordance with an internal records retention schedule. Retention may be extended where required by law, a court order, an active dispute, a security investigation or a preservation obligation.

12.2 Indicative retention categories are as follows:

(a) Account and profile information – while the Account is active and for a limited period after closure for support, fraud prevention and legal claims;

(b) Case Information and uploaded documents – while the matter or Subscription is active, during the export window, and thereafter only for the period required by the selected retention setting, a legal obligation or a documented dispute;

(c) Consent and notice records – for the period necessary to demonstrate compliance and resolve disputes;

(d) Payment, invoice and tax records – for the period required under applicable tax, accounting and corporate law;

(e) Call recordings – for the period stated in the recording notice and ordinarily no longer than necessary for quality, verification or dispute purposes;

(f) Grievance and support records – for the period necessary to resolve the request and manage legal or regulatory obligations;

(g) Security, access and processing logs – for at least the minimum period required by Applicable Law, and ordinarily not less than one year where the relevant provisions of the Digital Personal Data Protection Rules, 2025 apply and not less than one hundred and eighty (180) days where the CERT-In directions apply; and

(h) Backups – until overwritten or deleted under the applicable backup cycle, subject to continued protection and restricted restoration.

12.3 Export and Erasure

(a) ClariCase will provide a reasonable opportunity to export available User Content before permanent account closure, except where access must be restricted for legal, security or safety reasons.

(b) When a purpose is complete and retention is no longer required, ClariCase will securely delete, anonymise or otherwise dispose of the information and will require relevant Data Processors to do the same, subject to backup cycles and lawful exceptions.

13.1 Subject to Applicable Law and its commencement, a Data Principal may request:

(a) a summary of the Personal Data being processed and the processing activities undertaken;

(b) information concerning the Data Fiduciaries or Data Processors with whom Personal Data has been shared, subject to lawful exceptions;

(c) correction of inaccurate or misleading Personal Data;

(d) completion of incomplete Personal Data;

(e) updating of Personal Data;

(f) erasure of Personal Data where retention is no longer necessary for the specified purpose or for compliance with law;

(g) withdrawal or modification of consent;

(h) grievance redressal; and

(i) nomination of another individual to exercise rights in the event of death or incapacity, where applicable.

13.2 Requests may be submitted through the Account, through the privacy request form or by email to connect@claricase.com. ClariCase may request reasonable identity and authority verification.

13.3 ClariCase may decline or limit a request where permitted or required by law, including to protect another person, preserve legal privilege, comply with retention obligations, prevent fraud, or protect an active legal proceeding. Reasons will be communicated where required.

13.4 Optional communications, cookie choices and other permissions may be managed through the relevant preference controls. Service and security communications cannot be disabled while they remain necessary to administer an active Account or transaction.

14.1 Accounts may be created only by persons aged eighteen (18) years or older.

14.2 Where a legal matter concerns a child, the Account must be created and managed by the child’s parent, lawful guardian or legally authorised representative.

14.3 Before processing a child’s Personal Data where verifiable parental consent is required, ClariCase will use appropriate identity, age and authority verification measures in accordance with Applicable Law.

14.4 ClariCase will not knowingly undertake tracking, behavioural monitoring or targeted advertising directed at children, and will not process a child’s Personal Data in a manner likely to cause a detrimental effect on the child’s well-being.

14.5 If ClariCase learns that a child has created an Account, or that information was collected without the required authority, it may restrict the Account and delete or otherwise lawfully handle the information.

15.1 ClariCase may use infrastructure or service providers located outside the User’s jurisdiction where permitted by Applicable Law.

15.2 Cross-border processing will be subject to any restrictions notified by the Central Government under Section 16 of the Digital Personal Data Protection Act, 2023, and to contractual confidentiality and security safeguards, vendor due diligence, access controls and requirements concerning return or deletion.

15.3 Additional restrictions applicable to particular categories of data, regulated entities or jurisdictions will prevail over this Section.

16.1 The Platform may display Purpose-Specific Notices at account creation, identity verification, matter intake, lawyer matching, document sharing, payment, call recording, optional communications, non-essential cookies and external artificial intelligence processing.

16.2 Each consent control will identify the purpose and the relevant data, will avoid bundled or pre-selected optional consent, and will provide a reasonably accessible withdrawal or preference mechanism.

16.3 ClariCase maintains records of notices, permissions and withdrawals sufficient to demonstrate the applicable processing authority.

17.1 ClariCase may amend this Privacy Policy to reflect legal, service, technology, security or operational changes.

17.2 Material changes will be notified reasonably in advance where required. A revised policy will not be treated as consent to a new optional purpose; a separate affirmative action will be requested where consent is required.

17.3 The version number and “Last Updated” date will be displayed at the beginning of this Privacy Policy. Earlier versions may be retained for compliance and reference.

Privacy questions, rights requests and concerns may be submitted to:

Grievance Officer: Mr. Atul Sharma

Email: connect@claricase.com

Telephone: +91 70611 67931

Registered Office: BE Block, Flat No. 153 SFS, Janakpuri, West Delhi – 110058, New Delhi, India

19.1 ClariCase will acknowledge a privacy grievance within forty-eight (48) hours and will endeavour to resolve it within thirty (30) days, or within any shorter or other mandatory period prescribed by Applicable Law. Where the grievance concerns information hosted or transmitted through the Platform and the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 apply, the shorter timelines set out in the Grievance Redressal Policy will be followed.

19.2 A Data Principal may be required to use ClariCase’s grievance mechanism before approaching the Data Protection Board of India, where Applicable Law so requires.

19.3 Nothing in this Privacy Policy limits a right to approach a competent authority, court or statutory forum.

19.4 Requests should include sufficient information to identify the requester, the relevant Account or matter, the action requested and any supporting details. Highly sensitive documents should be sent only through an approved secure channel.