Privacy Policy

CiteCheck (citations.counselgrid.com) is an AI-assisted citation checking and legal document review service operated by CounselGrid. For anything in this policy, contact us at grievance@counselgrid.com.

• Account data — your name and email address (or your Google account's name and email if you sign in with Google). Guests are identified only by a random device identifier.
• Documents you upload — the legal documents you submit for a citation check or for scoring. These may contain personal data about you and about third parties named in them (for example, parties to an agreement). You are responsible for having the right to submit a document for analysis.
• Drafts you paste — text you paste into the citation check. The same responsibility applies: only paste text you have the right to send for analysis. See “Storage and retention” for how pasted text is handled, which differs from uploads.
• Analysis output — what our AI produces about your document: citation verdicts and the reasons for them, retrieved authorities and passages, and, for document scoring, scores, findings, clause excerpts, and suggestions.
• Usage and billing data — how many checks you run, your plan and credits, and payment confirmations. Card and payment details are handled by Razorpay; we never see or store them.
• Abuse-prevention data — for guest sessions, a salted one-way hash derived from your IP address, used solely to enforce free-quota limits. Session cookies are essential-only; we use no advertising or analytics trackers.

We process your data only to: run the citation check or analysis you request, show you your reports and history, enforce plan quotas, process payments you initiate, prevent abuse of free tiers, and respond to your support requests. We do not sell personal data or use it for advertising.

Analysis is automated: the text of your draft or document is processed by AI language models to identify citations, check them, and produce findings. Those models are operated by third-party providers — currently OpenAI and Google — and the text sent to them may be processed on servers outside India. They act on our instructions and are not permitted to use your content to train their models.

The output is informational only and is not legal advice. AI can make mistakes — review important documents with a qualified lawyer.

• Uploaded documents are stored encrypted at rest on Google Cloud and automatically deleted within 90 days of upload.
• Pasted drafts are not stored as documents — a citation check on pasted text keeps no copy of it. We do cache the result of a check, keyed by a one-way hash of the submitted text, so that submitting identical text again returns the stored result instead of re-running the analysis. The cached entry holds the citation findings, not your text, and reaching it requires already having the identical text.
• Analysis reports are retained so you can revisit them, until you delete them by deleting your account (below).
• Account and consent records are retained while your account exists, and as required for legal compliance after deletion.

We process your documents and personal data based on the consent you give when creating an account, signing in, starting a guest session, or submitting a draft or document for analysis. You can withdraw consent at any time by deleting your account and data below, or by writing to grievance@counselgrid.com. Withdrawal stops all further processing; it does not affect processing already completed.

Under the DPDP Act, 2023 you have the right to: access a summary of the personal data we hold about you; correct inaccurate data; erase your data (self-serve below); nominate another individual to exercise your rights in case of death or incapacity; and raise a grievance with us — and, if unresolved, with the Data Protection Board of India.

Your data is processed on Google Cloud infrastructure (Firestore and Cloud Storage). Payments are processed by Razorpay. Google sign-in, if you use it, is provided by Google.

AI providers. The text of your draft or document is sent to the AI model providers named under “AI processing” above so the analysis can run.

Indian Kanoon. On paid checks, we search Indian Kanoon to verify citations we cannot confirm from our own case-law sources. What we send is the search query — case names, citations, and legal issues taken from your document — not the document itself. Checks on the free tier never reach Indian Kanoon.

Each of these processes data on our instructions under their own security commitments. We share nothing else with anyone, except where the law requires it.

All traffic is encrypted in transit (TLS). Documents and records are encrypted at rest. Access is restricted to systems that need it to serve you; sessions use httpOnly cookies. In the event of a personal data breach we will notify affected users and the Data Protection Board as the DPDP Act requires.

Grievance Officer: to be appointed — reachable at grievance@counselgrid.com. We acknowledge grievances promptly and aim to resolve them within the timelines prescribed under the DPDP Rules.

Material changes bump the version shown at the top of this page, and you may be asked to consent again the next time you sign in.