Privacy Policy

Vakilkaro is a brand owned and operated by Jsons Solicitors Private Limited, a company incorporated under the Companies Act, 2013, having its registered office at Plot No. 16, Ganesh Nagar 6A, Near Delhi–Ajmer Bye Pass, Behind Kedia House, Murlipura, Jaipur, Rajasthan – 302039, India, CIN U93090RJ2018PTC063248.

In this Privacy Policy, the terms "Vakilkaro", "Company", "we", "us" and "our" refer to Jsons Solicitors Private Limited. The terms "User", "Client", "Customer", "you" and "your" refer to any individual or entity accessing our website, submitting an enquiry, accepting a proposal, making payment, creating an account or availing our services.

This Privacy Policy explains how we collect, receive, use, store, process, disclose, transfer, retain and protect your personal data when you interact with Vakilkaro through:

• www.vakilkaro.com;
• client portals and mobile interfaces;
• online enquiry and service forms;
• email proposals and payment links;
• calls, SMS, WhatsApp and RCS;
• CRM, chatbot and AI-assisted communication systems;
• social-media pages and advertisements;
• offline meetings and document submissions; and
• services provided by Vakilkaro or its authorised professionals.

This Policy should be read together with Vakilkaro’s Terms and Conditions, Refund and Cancellation Policy, Website Disclaimer and applicable Service-Specific Terms.

1. ACCEPTANCE OF THIS PRIVACY POLICY

By doing any of the following, you confirm that you have read and understood this Privacy Policy:

• accessing or using our website;
• submitting an enquiry or callback form;
• checking the consent checkbox;
• accepting a proposal;
• making full or partial payment;
• uploading or sending documents;
• communicating with us through phone, email or WhatsApp;
• creating an account;
• using our portal or software; or
• instructing us to commence a service.

Where processing is based on your consent, you authorise Vakilkaro to collect and process your personal data for the purposes stated in this Policy.

You may choose not to provide personal data. However, where such information is required to verify your identity, prepare documents, make a statutory filing or deliver a service, we may be unable to proceed without it.

2. CATEGORIES OF PERSONAL DATA WE MAY COLLECT

The information collected depends on the service requested. We do not necessarily collect every category from every User.

2.1 Identity and KYC Information

We may collect:

• full name;
• father’s, mother’s or spouse’s name, where required;
• date of birth;
• gender, where legally or operationally required;
• photograph;
• signature;
• nationality and residential status;
• PAN;
• Aadhaar or masked Aadhaar copy;
• passport;
• voter ID;
• driving licence;
• Director Identification Number;
• Digital Signature Certificate details;
• identity-verification records; and
• other documents required under applicable law.

Where full Aadhaar details are not legally necessary, Users may be requested to provide a masked Aadhaar showing only the last four digits. UIDAI defines masked Aadhaar as an Aadhaar copy in which the first eight digits are replaced while only the last four digits remain visible.

Vakilkaro does not intend to collect or store Aadhaar biometric information unless specifically authorised and required under applicable law. Users should not send fingerprint, iris or other biometric authentication information through ordinary email or WhatsApp.

2.2 Contact Information

We may collect:

• mobile number;
• alternate phone number;
• email address;
• residential address;
• registered-office address;
• correspondence address;
• PIN code;
• social-media handles; and
• preferred communication method.

2.3 Business and Organisational Information

We may collect:

• business or entity name;
• proposed company or LLP name;
• business activity and objects;
• incorporation documents;
• CIN, LLPIN, GSTIN or registration numbers;
• shareholding and capital details;
• director, shareholder, partner, trustee or member details;
• beneficial-ownership details;
• registered-office documents;
• board resolutions;
• licences and approvals;
• employee and payroll information;
• customer or vendor information supplied for compliance work;
• organisational structure; and
• details of pending applications, notices or proceedings.

2.4 Financial and Transaction Information

Depending on the service, we may collect:

• bank-account details;
• cancelled cheque;
• bank statements;
• financial statements;
• revenue and expense records;
• invoices;
• loan and liability information;
• capital contribution;
• payment information;
• transaction ID and payment status;
• tax details;
• income information;
• TDS and GST information;
• payroll details; and
• accounting records.

Vakilkaro generally does not directly store complete credit-card or debit-card credentials. Payments may be processed through third-party banks or payment gateways, whose privacy policies and security terms may also apply.

2.5 Intellectual Property Information

For trademark, copyright, patent and related services, we may collect:

• proposed brand name;
• logo or label;
• trademark-user date;
• goods and services description;
• ownership information;
• priority documents;
• artwork and creative material;
• author or applicant details;
• supporting invoices;
• business-use evidence;
• objection or opposition documents; and
• correspondence with intellectual-property authorities.

2.6 Legal and Compliance Information

We may collect:

• court, tribunal or government notices;
• contracts and agreements;
• dispute details;
• legal correspondence;
• transaction records;
• affidavits;
• declarations;
• statutory returns;
• compliance records;
• litigation information;
• evidence and supporting documents; and
• instructions provided for legal drafting or consultation.

2.7 Communications and Call Records

We may collect or retain:

• email exchanges;
• WhatsApp chats;
• SMS and RCS messages;
• chatbot conversations;
• client-portal messages;
• support tickets;
• voice notes;
• meeting notes;
• call date, time, duration and disposition;
• call recordings, where lawful and appropriately notified;
• proposals and approvals; and
• feedback and grievance records.

Calls may be recorded for quality monitoring, training, documenting Client instructions, dispute resolution, fraud prevention, service verification, and regulatory or legal compliance. Where required, a recording notice may be provided before or at the beginning of a call.

2.8 Website, Device and Technical Information

When you access our website or digital systems, we may automatically collect:

• IP address;
• browser type;
• device type;
• operating system;
• device identifiers;
• language preference;
• referring URL;
• pages visited;
• date and time of access;
• session duration;
• clicks and interactions;
• approximate location derived from IP;
• error and diagnostic logs;
• login activity; and
• cookie or advertising identifiers.

2.9 Marketing and Preference Information

We may collect:

• services in which you showed interest;
• communication preferences;
• promotional consent status;
• lead source;
• advertisement interaction;
• campaign information;
• enquiry history;
• opt-in and opt-out records; and
• response to offers, surveys or feedback requests.

2.10 Information About Other Persons

You may sometimes provide information concerning co-directors, shareholders, partners, employees, nominees, beneficial owners, family members, witnesses, clients, vendors or authorised representatives.

By providing another person’s information, you confirm that you are authorised to provide it or that another lawful basis exists for the relevant processing.

3. HOW WE COLLECT PERSONAL DATA

3.1 Directly From You

Information may be collected when you fill an enquiry form, request a callback, speak with our team, accept a proposal, make payment, submit documents, create a portal account, use our chatbot, attend a meeting or training, request support, submit feedback or file a complaint.

3.2 Through Automated Technologies

We may collect technical and usage information through cookies, pixels, web beacons, analytics tools, server logs, call systems, CRM systems, chatbot tools and advertising technologies.

3.3 From Third Parties

Subject to applicable law, we may receive information from payment gateways, banks, authorised professionals, referral partners, lead-generation platforms, social-media and advertising platforms, government portals, publicly available registries, affiliates and associates, verification providers, technology vendors and persons authorised by you.

3.4 From Public Sources

We may access lawfully available information from sources such as MCA records, the GST portal, the IP India database, court and tribunal records, government registries, company websites, professional directories and other legitimate public sources.

4. PURPOSES FOR WHICH WE USE PERSONAL DATA

4.1 Enquiries, Proposals and Onboarding

• respond to enquiries;
• understand your service requirements;
• assess preliminary eligibility;
• prepare quotations and proposals;
• assign a relationship manager;
• create an engagement or order ID;
• complete onboarding; and
• collect required documents.

4.2 Identity Verification and KYC

• confirm identity;
• conduct KYC;
• prevent impersonation;
• verify directors, partners or beneficial owners;
• obtain Digital Signature Certificates;
• prepare statutory forms; and
• comply with legal and professional obligations.

4.3 Service Delivery

• prepare applications and statutory forms;
• draft legal documents;
• provide consultation;
• complete registrations;
• file returns;
• provide accounting and compliance services;
• respond to objections or notices;
• arrange professional certification;
• provide software or training access;
• maintain service records; and
• communicate progress.

4.4 Government and Regulatory Filings

Where necessary, information may be processed and submitted to the Ministry of Corporate Affairs, Registrar of Companies, Income Tax Department, GST authorities, Trademark Registry, Copyright Office, FSSAI, RBI, labour and social-security authorities, courts and tribunals, banks and Certifying Authorities, and other competent authorities.

4.5 Payment and Billing

• generate invoices;
• process payments;
• reconcile transactions;
• issue refunds or service credits;
• maintain tax records;
• prevent payment fraud;
• recover outstanding amounts; and
• address payment disputes or chargebacks.

4.6 Customer Support and Relationship Management

• provide customer support;
• answer questions;
• request missing documents;
• send service updates;
• send compliance and renewal reminders;
• address complaints;
• seek feedback;
• maintain communication history; and
• improve customer experience.

4.7 Fraud Prevention and Security

• detect suspicious activity;
• prevent account misuse;
• identify false documents;
• protect our systems;
• investigate security incidents;
• prevent unlawful use of services;
• maintain audit trails; and
• establish or defend legal claims.

4.8 Internal Administration and Improvement

• administer our business;
• train authorised personnel;
• monitor service quality;
• perform internal audits;
• test and improve systems;
• analyse service performance;
• develop new services;
• improve workflows;
• conduct aggregated analysis; and
• maintain business continuity.

4.9 Communication and Marketing

Subject to your communication preferences and applicable law, we may contact you regarding requested services, active engagements, payment and documentation, due dates and renewals, related compliance requirements, new Vakilkaro services, educational content, offers and promotions, events and training, and feedback or review requests.

Transactional or service-related communications may continue where necessary to fulfil an engagement, even after you opt out of promotional communication.

5. LEGAL BASIS AND CONSENT

Vakilkaro processes personal data only for lawful purposes, including:

• with your consent;
• to perform a service requested by you;
• to take steps before entering into a service engagement;
• to comply with a legal obligation;
• for legitimate uses permitted by applicable law;
• to prevent fraud or security incidents; and
• to establish, exercise or defend legal claims.

Your consent should be free, specific, informed and capable of withdrawal where processing is based on consent. Withdrawal of consent will not invalidate processing lawfully carried out before withdrawal.

Where certain information is essential for a statutory filing or completion of a purchased service, withdrawal may prevent us from continuing that service.

6. AADHAAR, PAN AND KYC DATA

Vakilkaro may request PAN, Aadhaar or another identity document only where it is reasonably required for identity verification, incorporation, DSC issuance, statutory filing, tax registration, professional certification, a bank or regulatory procedure, or another lawful service purpose.

We may ask Users to provide masked Aadhaar where full Aadhaar details are unnecessary. Users should avoid sending Aadhaar openly on public platforms or unsecured channels. UIDAI advises against publicly sharing Aadhaar numbers and recognises masked Aadhaar as a safer format for appropriate use.

Aadhaar data shall not be sold or used for unrelated marketing. Vakilkaro may disclose KYC information only:

• for the selected service;
• with your authorisation;
• to an authorised professional or authority;
• where required by law; or
• to prevent fraud or unlawful activity.

7. CALLS, WHATSAPP, CRM, CHATBOT AND AI-ASSISTED SYSTEMS

Vakilkaro may use third-party communication and workflow systems for calls and call routing, WhatsApp Business messaging, SMS and RCS, email delivery, CRM and lead management, chatbots, automated reminders, proposal follow-ups, customer support, and AI-assisted classification, drafting or support.

Information entered into these systems may include contact details, service enquiry, conversation history, document requirements, service status, payment status, follow-up history and consent preferences.

Where AI-assisted tools are used, Vakilkaro will endeavour to restrict access to authorised personnel and vendors. Automated outputs may be reviewed by a human where they affect service delivery or legal documentation. Users should not submit unnecessary sensitive information through chatbot or ordinary messaging channels.

8. COOKIES AND SIMILAR TECHNOLOGIES

Vakilkaro may use cookies and similar technologies to make its website functional, understand usage and improve services.

8.1 Essential Cookies

Required for website operation, login, security, session management, form submission, payment flow and remembering consent choices.

8.2 Analytics Cookies

Help us understand the number of visitors, pages viewed, traffic sources, website performance, user navigation and technical errors.

8.3 Preference Cookies

May remember language, region, display preferences, form details and previous interactions.

8.4 Advertising and Remarketing Cookies

Where enabled, may be used to measure advertising campaigns, show relevant advertisements, create remarketing audiences, limit repeated advertisements and attribute enquiries to campaigns.

You may manage cookies through our cookie-consent tool (where available), browser settings, device settings or advertising-platform preferences. Disabling essential cookies may prevent parts of the website from functioning properly.

9. ANALYTICS AND ADVERTISING TOOLS

Subject to our actual technology setup, Vakilkaro may use services such as Google Analytics, Google Ads, Meta Pixel, LinkedIn Insight Tag, Microsoft Clarity, call-tracking systems, CRM analytics and similar analytics or marketing platforms. These providers may receive technical or interaction data in accordance with their own privacy terms.

This section is reviewed and updated whenever a material analytics or advertising provider is added or removed.

10. SHARING AND DISCLOSURE OF PERSONAL DATA

Vakilkaro does not sell personal data as a standalone commercial product. We may share personal data only where reasonably necessary and subject to appropriate safeguards.

10.1 Employees and Internal Teams

Authorised employees may access information for sales and onboarding, document collection, service delivery, accounting, compliance, customer support, quality review, security and grievance handling.

10.2 Independent Professionals

Information may be shared with advocates, Chartered Accountants, Company Secretaries, Cost Accountants, trademark or patent professionals, auditors, consultants and other qualified professionals, limited to what is necessary for the selected service.

10.3 Government and Regulatory Authorities

Information may be submitted to or accessed by MCA and ROC, the Income Tax Department, GST authorities, IP India, FSSAI, RBI, labour authorities, courts and tribunals, Certifying Authorities, banks and other competent authorities.

10.4 Technology and Service Providers

Information may be shared with providers supporting cloud hosting, data storage, CRM, email, WhatsApp and SMS, call systems, payment gateways, cybersecurity, document signing, analytics, advertising, customer support, courier services and data backup.

10.5 Affiliates and Business Partners

Where relevant to service delivery, data may be shared with affiliates, group companies, referral partners, empanelled professionals, authorised associates and implementation partners. They may use the information only for the authorised or disclosed purpose.

10.6 Legal and Protective Disclosure

We may disclose information where necessary to comply with law, respond to a court or government order, investigate fraud, prevent cyber incidents, protect a person’s safety, enforce our agreements, recover dues, defend a legal claim, or protect Vakilkaro’s rights and property.

10.7 Business Transfer

If Jsons Solicitors Private Limited undergoes a merger, acquisition, restructuring, sale, insolvency or transfer of business, personal data may form part of the transferred business assets, subject to applicable law and confidentiality requirements.

11. CROSS-BORDER PROCESSING AND STORAGE

Some technology, cloud, communication, analytics or professional-service providers may process or store information outside India. Where personal data is transferred or made available outside India, Vakilkaro will endeavour to:

• comply with applicable restrictions;
• use providers subject to confidentiality and security obligations;
• restrict access to authorised purposes; and
• follow directions or restrictions issued by the Government of India.

12. DATA RETENTION

Vakilkaro retains personal data only for as long as reasonably necessary for providing services, maintaining the Client account, completing statutory filings, complying with tax, accounting and legal obligations, maintaining professional records, addressing complaints, preventing fraud, enforcing agreements, resolving disputes and defending legal claims.

Indicative retention approach:

These periods are indicative and may be extended where required by law, where a dispute is pending, where an investigation is ongoing, where a government filing must be supported, where fraud is suspected, or where retention is necessary for legal claims.

13. DELETION, ANONYMISATION AND ACCOUNT CLOSURE

When personal data is no longer required, Vakilkaro may securely delete it, anonymise it, archive it with restricted access, or destroy physical copies.

A deletion request may not result in immediate deletion where retention is required for tax and accounting records, government filings, corporate records, professional obligations, fraud prevention, pending disputes, regulatory compliance or legal claims. Deletion from active systems may also require a reasonable period to reflect in backup systems.

14. SECURITY MEASURES

Vakilkaro shall endeavour to implement reasonable technical and organisational safeguards, which may include:

• SSL or encrypted transmission;
• role-based access;
• password controls;
• multi-factor authentication where available;
• access logging;
• firewalls;
• malware protection;
• secure backups;
• restricted document access;
• vendor due diligence;
• employee confidentiality obligations;
• incident-response procedures;
• regular software updates; and
• internal access reviews.

Indian law has historically required body corporates handling sensitive personal information to maintain reasonable security practices, and the DPDP framework requires reasonable security safeguards for personal data. Despite reasonable safeguards, no website, email, cloud system or electronic transmission can be guaranteed to be completely secure.

Users are responsible for protecting passwords and OTPs, using secure devices, avoiding public sharing of KYC documents, verifying recipient email addresses, promptly reporting suspicious access, and not sharing portal credentials with unauthorised persons.

15. PERSONAL DATA BREACH

If Vakilkaro becomes aware of a personal-data breach, it may investigate the incident, contain and mitigate the breach, secure affected systems, preserve relevant evidence, notify affected Users where required, notify the Data Protection Board or another authority where applicable, and take corrective and preventive measures. Notices may be sent through email, phone, SMS, website notice or another reasonable channel.

16. YOUR RIGHTS

Subject to applicable law and verification of identity, you may request:

• information about personal data being processed;
• a summary of processing activities;
• correction of inaccurate information;
• completion of incomplete information;
• updating of outdated information;
• erasure of personal data no longer required;
• withdrawal of consent;
• cessation of promotional communication;
• grievance redressal; and
• nomination of another individual to exercise rights in circumstances permitted by law.

Requests may be refused or restricted where identity cannot be verified, the request is fraudulent or abusive, retention is legally required, the information relates to another person, disclosure would compromise security or legal privilege, the data is required for a pending claim or proceeding, or another lawful exception applies.

17. WITHDRAWAL OF CONSENT AND COMMUNICATION PREFERENCES

You may withdraw consent for consent-based processing by contacting Vakilkaro at privacy@vakilkaro.com. For promotional communication, you may use the unsubscribe link, reply with an available opt-out keyword, update communication preferences, contact customer support, or email the privacy or grievance contact.

After opting out, you may still receive payment confirmations, document requests, service updates, statutory reminders, security alerts, complaint-related communication and other necessary transactional messages.

Withdrawal of consent does not affect processing already completed before withdrawal. Where withdrawn data is essential for an ongoing service, Vakilkaro may suspend or terminate that service after informing the Client of the consequences.

18. CHILDREN’S PERSONAL DATA

Vakilkaro’s services are primarily intended for adults and business entities. A person below 18 years should not independently purchase or contract for Vakilkaro’s services.

Where information concerning a child is required for a lawful service, it should be provided by or with the consent of the child’s parent or lawful guardian. Vakilkaro does not knowingly undertake targeted behavioural advertising directed at children.

19. EXTERNAL LINKS

Our website may contain links to government portals, payment gateways, social-media platforms, professional websites, partner sites and third-party resources. Vakilkaro is not responsible for the privacy, content or security practices of an external website. Users should review the relevant third party’s privacy policy before submitting information.

20. PUBLIC REVIEWS AND TESTIMONIALS

Where a Client voluntarily submits a review, rating, testimonial or public comment, Vakilkaro may display or reproduce it for website publication, social-media content, advertising, service improvement and responding to feedback.

Vakilkaro shall obtain separate permission before publishing confidential case information, sensitive documents or a testimonial that is not already public. Users should avoid posting personal identification documents, bank information or confidential legal details in public reviews.

21. AUTOMATED DECISION-MAKING

Vakilkaro may use automation for lead routing, service recommendations, reminder scheduling, document classification, fraud flags, support responses and workflow prioritisation.

Vakilkaro does not intend to make significant legal or regulatory decisions solely through an automated system without appropriate human involvement where such review is reasonably required.

22. ACCURACY OF INFORMATION

You are responsible for ensuring that personal and business information supplied to Vakilkaro is correct, complete, current, authentic and lawfully provided. You must promptly notify us if your information changes.

Vakilkaro shall not be responsible for consequences caused by inaccurate, incomplete or outdated data supplied or approved by the Client.

23. CHANGES TO THIS PRIVACY POLICY

Vakilkaro may update this Privacy Policy to reflect changes in law or regulation, government directions, technology, services, data-processing practices, security requirements or business operations. The updated Policy will display a revised "Last Updated" date and version number.

Where a change materially affects how existing personal data is processed, Vakilkaro may provide notice through email, a website banner, the client portal, SMS or WhatsApp, or another reasonable method. Where fresh consent is legally required, Vakilkaro may request it before continuing the relevant processing.

24. GRIEVANCE REDRESSAL AND PRIVACY CONTACT

Questions, correction requests, consent-withdrawal requests, deletion requests and privacy grievances may be submitted to:

The request should contain:

• full name;
• registered email and phone number;
• service or order ID, if applicable;
• nature of request;
• relevant supporting information; and
• sufficient details to verify identity.

Vakilkaro may request additional information to verify the person making the request, and will endeavour to acknowledge and resolve grievances within the period required under applicable law.

25. CONTACT DETAILS

© 2026 Jsons Solicitors Private Limited. All rights reserved. Vakilkaro is a brand of Jsons Solicitors Private Limited.