This Privacy Policy explains how Vallume (Global) Legal and AI ("Vallume", "we") collects, uses, shares and protects personal data when you use https://www.vallume.com, our apps and services (the "Platform"). We process personal data in line with the Digital Personal Data Protection Act, 2023 ("DPDP Act"), the Information Technology Act, 2000 and the rules made under them. For the purposes of the DPDP Act, Vallume is the Data Fiduciary for the data described here.
1. Data we collect
You give us
- Account data: name, username, email, phone number, password (stored hashed), account type, profile photo.
- Profile data: for advocates and instructors, enrolment number, practice areas, qualifications, experience, bio, office address and documents submitted for verification.
- Payment data: billing name and address, GST number if given, and transaction references. Card, UPI and bank details are collected by Razorpay, not stored by us.
- Payout data: for advocates and instructors, bank account or UPI details and PAN, used to pay you and meet tax obligations.
- Content and communications: questions you ask Vallume GPT, messages and files in consultation chat, call and video sessions, posts, comments, reviews, papers, contact and call-back requests.
Collected automatically
- device and browser details, IP address and approximate location (used, for example, to show prices in INR or USD);
- pages viewed, course progress, quiz results, and how you use features;
- cookies and similar technologies, as described in our Cookie Policy.
From others
- Google or Facebook, if you sign in with them (name, email, profile photo);
- Razorpay, to confirm payment status;
- advocates you book, for the records of your consultation.
2. Why we use it
- to create and run your account and provide the services you ask for, such as bookings, courses, GPT answers and community features;
- to process payments, refunds, invoices and payouts, and keep the records tax law requires;
- to verify advocates and instructors and keep the Platform safe from fraud and abuse;
- to send service messages (receipts, booking reminders, judgment alerts you subscribe to);
- to send marketing, only where you have agreed; you can opt out at any time;
- to understand usage and improve the Platform;
- to comply with law, court orders and lawful requests from authorities.
We process your data on the basis of your consent, or for legitimate uses permitted by Section 7 of the DPDP Act, such as providing a service you asked for or meeting a legal obligation.
3. AI features
Questions you ask Vallume GPT and documents you submit are sent to our AI providers (such as OpenAI) to generate answers. We do not permit them to use your data to train their models under our agreements with them. Do not enter information you are not allowed to share. See the AI Use Policy.
4. Who we share it with
- Advocates and instructors you book or buy from, only what they need to serve you;
- Service providers who process data for us under contract: payment (Razorpay), hosting and storage, email and messaging, video and voice (Agora), video hosting (Vimeo), AI providers, analytics;
- Other users, for content you post publicly and your public profile;
- Authorities, when the law requires it;
- A buyer or successor, if Vallume's business is merged or sold, under the same protections.
We do not sell your personal data.
5. Transfers outside India
Some providers process data outside India. We transfer data only to countries not restricted by the Government of India under Section 16 of the DPDP Act, and with contractual safeguards.
6. How long we keep it
We keep personal data while your account is active and as long as needed for the purpose it was collected for. After you close your account we delete or anonymise it, except what we must keep by law (for example, invoices and tax records, usually 8 years) or to resolve disputes.
7. Your rights
Under the DPDP Act you can:
- ask for a summary of the personal data we hold about you and how it is processed;
- ask us to correct, complete, update or erase it;
- withdraw consent at any time (this does not affect processing already done);
- nominate another person to exercise your rights if you die or become incapable;
- raise a grievance with us, and if not satisfied, complain to the Data Protection Board of India.
Many of these you can do yourself in account settings. Otherwise email legal@vallume.com. We may need to verify your identity first.
8. Children
The Platform is meant for adults. We do not knowingly process data of children under 18 without verifiable consent from a parent or lawful guardian, and we do not track, profile or target advertising at children.
9. Security
We use reasonable security safeguards, including encryption in transit, hashed passwords, access controls and monitoring. No system is completely secure; if a personal data breach occurs we will inform affected users and the Data Protection Board as the law requires.
10. Contact and grievances
For privacy questions or to exercise your rights, contact our Grievance Officer at legal@vallume.com or write to Vallume (Global) Legal and AI, Company Address here. We aim to respond within the timelines in our Grievance Redressal policy.
11. Changes
When we change this policy we publish a new version here with its version number and effective date, and tell you about material changes before they take effect.