Legal
Privacy notice
Last updated 23 September 2026
Ruvara provides a case-file management service to advocates and law firms ("chambers"). This notice explains what personal data we handle, why, and what we do not do with it.
Two kinds of data
What a chamber puts into Ruvara — client names, case papers, notes and similar. The chamber decides what goes in and why. Under India's Digital Personal Data Protection Act, 2023, the chamber is the Data Fiduciary for this data and Ruvara is its Data Processor: we handle it only to provide the service, and only as the chamber instructs.
Account data about the people who use the service — name, email address, role, a hash of the password, and a record of sign-ins and actions including the IP address they came from. We use this to run accounts, keep them secure and keep the audit trail the chamber relies on.
What we do not do
- We do not sell personal data, or share it for anyone's marketing.
- We do not use a chamber's documents to advertise to anyone.
- We do not look at a chamber's documents except when the chamber asks us to help with a problem, or where the law requires it.
Where it is kept
On servers in the Amazon Web Services Mumbai region, in India, on encrypted disks. Daily backups are kept for fourteen days and then deleted automatically.
Service providers we rely on
- Amazon Web Services — hosting and storage, Mumbai region.
- Automated reading of documents. If a chamber turns on AI-assisted reading, the text of the pages it sends is processed by the reading service the chamber has chosen in its settings, only to extract case details, and is not kept by us for any other purpose.
How long we keep it
For as long as the chamber uses the service. When a chamber leaves, it can take a full export of its files; we then delete its data from the live system within thirty days, and it disappears from backups when those roll off fourteen days later.
If something goes wrong
If we become aware of a breach affecting a chamber's data, we will tell that chamber without undue delay and give it the information it needs to meet its own obligations.
Your rights
If your information is held in a chamber's files, the chamber is the right place to ask to see, correct or erase it; we will help them do so. For your own account data, write to us directly.
Cookies
The app uses one cookie, which keeps you signed in. It is strictly necessary and is not used for tracking. This public website sets no cookies of its own; it loads its typefaces from Google Fonts, which means your browser contacts Google to fetch them.
Contact
Write to us. We will update this notice as the service changes, and show the date of the latest version at the top.