Privacy
Last updated 3 September 2026
In short. Solon holds your matters, your drafts, your clients’ contact details and the papers you upload. We do not sell any of it, we do not train models on it, and we do not use one chamber’s work to serve another. You can export or delete everything at any time.
On this page
1. Who we are
Solon is operated by [REGISTERED ENTITY NAME], at [REGISTERED ADDRESS]. Under India’s Digital Personal Data Protection Act, 2023 we are the Data Fiduciary for the personal data of the advocates and staff who use Solon.
For the personal data of your clients that you put into Solon, you are the Data Fiduciary and we are a Data Processor. We act on your instructions. That distinction matters, and section 9 sets out what follows from it.
2. What we hold
| Category | What it is |
|---|---|
| Account | Your email address, your chamber’s name, your role, and when you last signed in. No password, because Solon does not use one. |
| Matters | Case records retrieved from the public court record: parties, advocates, the presiding officer, stage, hearing dates and orders. |
| Clients | Names, phone numbers, email addresses and addresses you enter. Also which type of identification you hold — never the number itself. |
| Documents | Papers you upload: vakalatnamas, FIRs, chargesheets, affidavits, orders. |
| Drafts | What you write and dictate, the authorities you place, and your chamber’s formatting. |
| Usage | Which authorities you placed or passed over, what you searched, and words you corrected — so Solon ranks better for you. Section 4 explains this. |
| Technical | IP address and browser, kept against sign-in attempts for security. Audio is transcribed and not stored. |
3. Why, and on what basis
We process this to provide Solon: to show your docket, retrieve judgments, write drafts, send updates to your clients when you ask us to, and bill you. The lawful basis is your consent, given when you sign up, and the performance of our contract with you.
We do not process your data for advertising. We have no advertising.
4. How AI is used, and what it is never used for
Solon sends text to AI models to classify how a judgment treated an earlier one, to write headnotes, to explain a section, to transcribe dictation, and to prepare the overnight brief.
We do not train models on your data. Not on your drafts, not on your matters, not on your clients’ papers. Our providers are engaged on terms that prohibit training on data we send. If that ever changed we would tell you before it took effect, not after.
Solon does get better at serving your chamber — but by remembering what you chose, what you rejected and what you corrected, and letting that reorder what it shows you. That memory is scoped to your chamber and is never used to serve another.
5. Who else sees it
Nobody, except the processors that make Solon work:
| Processor | What it handles |
|---|---|
| Supabase | Database and file storage |
| Vercel | Application hosting |
| Anthropic | Classification, headnotes, drafting assistance |
| OpenAI | Audio transcription only |
| Resend | Sign-in codes and client updates |
| eCourtsIndia, Indian Kanoon | Court records and judgments. We send queries, not your data |
| Razorpay | Payments. We never see or hold your card details |
We do not sell personal data. We do not share it with advertisers, data brokers or anyone else. We disclose it only where the law requires and, where we are lawfully able, we will tell you first.
6. Where it sits
Your database and documents are held in Seoul, South Korea. Requests to AI providers are processed on their infrastructure, principally in the United States.
The DPDP Act permits transfer outside India except to countries the Central Government restricts. We hold no payment instrument data, so RBI localisation requirements do not apply to us. If you require storage within India, tell us — it is a change we can make for a firm that needs it.
7. How long we keep it
| What | Kept for |
|---|---|
| Matters, drafts, clients, documents | As long as your account is open |
| After you close your account | 30 days, then permanently deleted |
| Sign-in codes | 10 minutes live, purged after 2 days |
| Sessions | 30 days, or until you sign out |
| Invoices | 8 years, as tax law requires |
| Audio recordings | Not kept. Transcribed and discarded |
| Petitions uploaded to teach formatting | Not kept. The layout is read and the file discarded |
The 30 days exist so an account closed by mistake can be recovered. Ask us to delete immediately and we will.
8. Your rights
Under the DPDP Act you may:
- Access — ask what we hold about you and why
- Correct — have anything inaccurate put right
- Erase — have your data deleted
- Nominate — name someone to exercise these rights if you cannot
- Complain — to our Grievance Officer, and then to the Data Protection Board of India
You can export everything from your account page without asking us. For anything else, write to the Grievance Officer below — we answer within 30 days.
You may withdraw consent at any time. Doing so closes your account, because there is no version of Solon that works without holding your matters.
9. Your clients’ data
When you enter a client’s details or upload their papers, you are the Data Fiduciary. You are responsible for having a lawful basis, which in practice is your retainer. We process on your instructions only.
Accordingly, we:
- never contact your clients except when you tell us to
- show a client the status of their own matters and nothing else — never a draft, never a note, never your strategy
- never display, reverse or allow entry of party names a court has masked by order
- delete a client’s data when you do
A portal link is a bearer credential. Anyone holding it can see that client’s matters. Send it to the client and nobody else, and revoke it from the Clients page if it goes astray.
10. Security
- Encrypted in transit and at rest
- Row-level isolation — one chamber’s data is unreachable from another’s
- Documents in private storage, reachable only through links that expire in five minutes
- No passwords to steal. Sign-in codes are stored hashed, expire in ten minutes and allow five attempts
- Identification numbers are never stored — only which type of document you saw
No system is perfect. If we discover a breach affecting your data we will tell you and the Data Protection Board of India as the Act requires. See Security for detail, or write to us if you have found something.
11. Children
Solon is for practising advocates and their staff. It is not for anyone under 18 and we do not knowingly hold a child’s personal data as a user. Where a matter concerns a minor, that data is case data you control, and the masking rules in section 9 apply.
12. Changes
If we change this policy materially we will email you at least 14 days before it takes effect. The date at the top always reflects the current version.
13. Grievance Officer
As required by section 13 of the DPDP Act and the Information Technology Rules:
[GRIEVANCE OFFICER NAME]
Grievance Officer, Solon
grievance@solonai.legal
[REGISTERED ADDRESS]
We acknowledge within 72 hours and resolve within 30 days. Unsatisfied, you may complain to the Data Protection Board of India.
Questions about any of this: contact us.