Privacy Policy

Janman Legal Aid (“Janman”, “we”, “our”) is a platform operated by Janman People's Foundation that connects community members in need of legal assistance with social workers, paralegal volunteers, advocates, and supporting administrative staff. Our application is reachable at app.janmanindia.org.

We only collect information that is needed to deliver legal-aid services:

• Account information: name, email address, phone number (optional), profile photo, role within the platform (community member, social worker, advocate, HR, finance, administrator, director, super admin), employee ID where applicable, and the date you joined or left the organisation.
• Google sign-in data: when you sign in with Google, we receive your Google account ID, email, profile name, and profile picture, along with a refresh token that lets us keep your calendar in sync (see section 4).
• Case and matter data: if you are a community member, we store the case details you submit (case title, case type, supporting documents, hearing dates, notes) so that the assigned social worker and advocate can act on your behalf.
• Operational data: activities, appointments, attendance, daily reports, expense submissions, training enrolments, and chat messages between staff members. This data is visible only to the people involved in the matter and to authorised supervisors.
• Technical data: standard server logs (IP address, user-agent, timestamp) used for security and abuse-prevention.

• To authenticate you and route you to the correct dashboard for your role.
• To match community members to social workers and advocates.
• To track cases, hearings, and outcomes through their lifecycle.
• To synchronise scheduled work to your Google Calendar so you don't miss it.
• To enable internal collaboration (chat, daily reports, attendance).
• To comply with applicable Indian law and respond to lawful requests.

We do not sell your data, share it with advertisers, or use it to train AI models.

When you sign in with Google, we request the calendar.events scope so that activities, appointments, and offline trainings assigned to you on Janman appear automatically on your Google Calendar. Specifically, we use this access to:

• Create a calendar event when an activity / appointment / training is scheduled with you.
• Update that event when its time, title, or attendee list changes inside Janman.
• Delete that event when the underlying item is cancelled or removed.
• Add other invited Janman users as attendees on the event so it propagates to their calendars.

We do notread your existing calendar entries, do not list your other calendars, and do not access events that Janman itself didn't create. Janman's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

You can revoke our access at any time at myaccount.google.com/permissions. Revoking access will stop calendar sync; events already created on your calendar will remain there until you delete them.

• Within Janman: only with the people involved in handling your case (the assigned social worker and advocate, the director who oversees them, and HR / finance / administrator staff for operational matters such as invoices and attendance).
• With Google: to deliver calendar invitations to attendees of an event you are part of.
• With infrastructure providers: MongoDB Atlas (database hosting) and Cloudflare R2 (file storage). These providers process data on our behalf under their respective data processing terms.
• With authorities: if compelled by a valid Indian legal process, or to protect the safety of a person where there is a risk of imminent harm.

Account information is retained for the lifetime of your account and for up to 7 years after deactivation, in line with general record-keeping obligations for legal-aid organisations. Case data is retained for the legal life of the matter plus any statutory archival period. Server logs are retained for up to 90 days. You can request earlier deletion of personally identifiable data by writing to us (see section 9), subject to overriding legal obligations.

Data is encrypted in transit (HTTPS) and at rest (provider-managed encryption). Access is gated by role-based permissions and audited on the server. Refresh tokens for Google Calendar are stored encrypted and excluded from regular database queries by default.

You can:

• Access your data through your profile page.
• Correct your profile details there.
• Disconnect Google Calendar from the profile page.
• Request deletion or export of your data (see section 9).

For privacy questions, deletion requests, or anything else, write to shashwat@janmanindia.org. We aim to respond within 30 days.

We may update this policy as the platform evolves. The “Last updated” date at the top of the page reflects the most recent revision. Material changes will be notified through the app and / or email.