1. Who we are
Lō (the “App”, together with this website the “Service”) is operated by Lō Technologies Private Limited, Registered office address, City, State, PIN, India (“Lō”, “we”, “us”). For the purposes of the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and the rules made under it, we are the Data Fiduciary for the personal data described in this policy. We also follow the Information Technology Act, 2000 and the rules made under it.
This policy applies to the Lō apps on Android and iOS and to this website. By using the Service you agree to the processing described here. Where we rely on your consent, you can withdraw it at any time (see Your rights).
2. Data we collect
Information you give us
- Account details: your name, mobile number, email address (optional), preferred language and city.
- Questions and conversations: what you type or ask Si, and Si's responses.
- Voice: audio you record when you use “Talk to Si” or voice input, and the transcript we create from it.
- Documents: photos and PDFs you upload (for example legal notices, court orders, FIRs and contracts), any context you add, and the analysis we produce. These documents may contain personal data about you and about other people.
- Draft inputs: details you enter into Ready-to-File Draft forms (such as names, addresses, rent or salary amounts) and the drafts generated.
- Consultations: if you consult an advocate, the advocate you chose, the time and duration of the consultation, messages exchanged in the App, any ratings or reviews you leave, and records of payment.
- Support: messages you send to our support or grievance teams.
Information collected automatically
- Device and log data: device model, operating system, app version, IP address, language settings, and timestamps.
- Usage data: features you use and screens you visit, used to keep the App working and improve it.
- Diagnostics: crash reports and performance data.
Payment information
Payments are handled by our payment partners. We receive a payment confirmation, amount and transaction reference. We do not store your full card number, UPI PIN or net banking credentials.
Advocates
If you register as an advocate, we also collect your Bar Council enrolment details, practice areas, years of experience, location, profile photo, rates and payout (bank) details, and use them to verify and display your profile.
3. App permissions
The App asks for device permissions only when you use a feature that needs them. You can turn them off at any time in your device settings; the related feature will stop working but the rest of the App will not.
| Permission | Used for |
|---|---|
| Microphone | Talk to Si, voice input, and audio consultations with advocates. |
| Camera | Photographing a notice or document for analysis. |
| Photos / files | Choosing an image or PDF to upload, and saving drafts you generate. |
| Notifications | Consultation reminders and updates about your requests. |
We do not access your contacts, SMS messages, call logs or precise location.
4. How we use your data
- To create and secure your account, including verifying your mobile number by OTP.
- To answer your questions, analyse your documents, interpret judgments, generate drafts, and transcribe and translate between languages.
- To store your documents and drafts in your vault so you can return to them.
- To connect you with an advocate you choose and to process payments.
- To provide support and resolve grievances.
- To keep the Service safe: detect fraud, abuse and security incidents, and enforce our Terms & Conditions.
- To understand how the Service is used and improve it, using aggregated or de-identified data where possible.
- To comply with law, court orders and lawful requests from authorities.
We process your data on the basis of your consent, and for legitimate uses permitted by Section 7 of the DPDP Act, such as complying with law or responding to a medical emergency.
We do not sell your personal data, and we do not use your documents or conversations for advertising.
5. How AI processing works
Si is powered by large language models and speech models. When you ask a question, upload a document or use voice, the relevant content is sent to AI service providers that process it on our behalf to generate a response. These providers act as our processors: they are contractually bound to use your data only to provide the service to us, to keep it confidential and secure, and not to use it to train their own models.
We do not use the contents of your documents or conversations to train AI models unless you have opted in. You can change this choice at any time in the App.
AI output can be incomplete or wrong. It is general information and not legal advice; see our Terms & Conditions.
6. Who we share data with
- Advocates you choose. When you start a consultation, the advocate receives your name and the information you choose to share. Advocates are independent professionals and are responsible for how they handle your information under their professional obligations.
- Service providers who process data for us under contract: cloud hosting and storage, AI and speech processing, OTP and messaging, payment gateways, analytics and crash reporting, and customer support tools.
- Authorities, when required by law, court order or a lawful request, or to protect the rights, property or safety of our users, the public or Lō.
- A successor if Lō is involved in a merger, acquisition or sale of assets, in which case this policy will continue to apply to your data.
7. International transfers
Some of our service providers, including AI providers, may process data on servers outside India. We transfer personal data only to countries not restricted by the Government of India under Section 16 of the DPDP Act, and with contractual safeguards in place.
8. How long we keep data
| Data | Retention |
|---|---|
| Account details | While your account is active. Deleted within 30 days of account deletion. |
| Documents, drafts, conversations and voice recordings | Until you delete them or your account. Deleted from live systems within 30 days, and from backups within a further 60 days. |
| Payment and invoice records | Up to 8 years, as required by tax and accounting laws. |
| Consultation records (advocate, date, duration, amount) | Up to 3 years after the consultation, to handle disputes and refunds. |
| Security and access logs | 180 days, or longer where required by law. |
| Grievance and support correspondence | Up to 3 years after the matter is closed. |
We may keep data for longer if required by law, or to establish, exercise or defend legal claims. See Data Deletion and Account Deletion.
9. Your rights
Under the DPDP Act you have the right to:
- Access a summary of the personal data we process about you and the processing activities.
- Correct, complete or update inaccurate or incomplete personal data.
- Erase your personal data, unless we must keep it to comply with law.
- Withdraw consent at any time. This does not affect processing that already took place, and some features may stop working.
- Nominate another person to exercise your rights in the event of your death or incapacity.
- Grievance redressal, through our Grievance Officer and, after that, the Data Protection Board of India.
You can exercise most of these in the App, or by emailing privacy@lo.example.com from, or quoting, your registered mobile number. We may verify your identity before acting on a request and will respond within 30 days.
10. Children
The Service is intended for people aged 18 and over. We do not knowingly process personal data of children without verifiable consent of a parent or lawful guardian. If you believe a child has given us personal data, contact us and we will delete it.
11. Security
We use reasonable security practices and procedures, including encryption of data in transit, access controls, and restricting access to personal data to staff and processors who need it. No system is completely secure. If a personal data breach occurs, we will notify affected users and the Data Protection Board as required by law.
12. Contact and Grievance Officer
If you have a question or complaint about how we handle your data, contact our Grievance Officer. We acknowledge complaints within 24 hours and aim to resolve them within 15 days.
- Lō Technologies Private Limited, Registered office address, City, State, PIN, India
- Privacy queries: privacy@lo.example.com
- Grievance Officer: Grievance Officer name, grievance@lo.example.com
13. Changes to this policy
We may update this policy from time to time. We will post the new version here with a new effective date and, for material changes, notify you in the App before they take effect.