AdvoTech legal

Privacy Policy

How AdvoTech handles information across our website, firm workspaces, and mobile app.

Last updated:

1. Who we are and how this policy applies

AdvoTech operates a law firm management service based in Nepal. This policy describes information handled when you register, sign in, use a firm workspace, or use the AdvoTech mobile app. Contact us at kel.advotech@gmail.com for privacy questions.

A law firm decides what client and case information it adds, why it uses that information, and which members can access it. AdvoTech provides the software and processing needed to operate the service. Contact the relevant firm about the accuracy, use, or disclosure of records that it controls.

2. Information we handle

The information processed depends on the features you and your firm use. It can include:

  • Account and authentication information: name, email address, phone number, profile image, verification status, account identifiers, and session/security information.
  • Firm information: registration details, addresses, contacts, tax information, memberships, roles, invitations, and permissions.
  • Client and matter records: client and party details, court and case information, hearings, appointments, contacts, notes, tasks, reminders, and related correspondence.
  • Content you provide: documents, scans, selected photos/files, attachments, messages, voice recordings, and information extracted or generated from that content.
  • Commercial and accounting records: subscriptions, resource credits, invoices, expenses, receivables, payables, and payment-related information entered into the service.
  • Device and operational information: installation identifiers, notification tokens, device/platform information, IP addresses, user agents, activity logs, and records of access, downloads, or processing operations.

3. How information is used

We process information to authenticate users, administer firms and permissions, store and retrieve records, synchronize workspaces, support offline access, deliver communications and reminders, account for subscriptions and credits, provide requested OCR/AI features, and respond to support inquiries.

We also use relevant operational records to protect accounts, investigate failures or misuse, maintain the service, and meet applicable legal obligations. Firm users are responsible for having authority to provide personal and confidential information about other people.

4. Access, sharing, and service providers

Information within a firm is accessible to users according to the firm’s roles and permissions. Content may also be shared when an authorized user sends a message, exports a file, or uses another sharing feature. Your firm is responsible for choosing appropriate recipients.

AdvoTech uses service providers to deliver the service. Clerk handles identity and sessions; Google supports Google sign-in; Firebase Cloud Messaging supports push notifications. Configured email and SMS delivery services, including Mailtrap and SMSPasal, process the recipient details and message content needed for delivery. Files are stored through the service’s configured storage infrastructure, which can include S3-compatible storage.

Where an OCR or AI feature is used, documents or their extracted text may be sent to external processing providers. Current document processing uses DataLab for OCR and Gemini for embeddings and AI-related processing. Do not submit material to these features unless you and your firm are authorized to have it processed in this way.

We may disclose relevant information where required by law or a valid legal process, to investigate misuse or protect rights and security, or in connection with a lawful transfer of the service. Providers may process information in countries other than your own; the processing location depends on the provider and service configuration.

5. Mobile permissions and device features

Device permissions are requested for the features that need them. You can manage permissions in your device settings, although disabling a permission can prevent its related feature from working.

  • Camera: scanning or capturing legal documents.
  • Microphone: recording voice notes or audio messages.
  • Photos and files: selecting content to upload or choosing where to save or share an export.
  • Notifications: delivering enabled alerts, reminders, and account or workspace updates.
  • Biometric sign-in: verifying access using your device’s biometric and secure credential facilities. AdvoTech does not receive your fingerprint or face templates through this feature.

6. Offline copies, downloads, and exports

Selected matter records and documents can be saved on a device for offline use. Access and refresh depend on the signed-in account, firm permissions, installation, and applicable offline-access checks. Changes to access may only be reflected after the device reconnects.

Signing out clears account-owned offline content managed by the app. Files that you separately export, share, or save outside the app may remain under your or the recipient’s control. Keep devices and exported documents secure and follow your firm’s confidentiality requirements.

7. Cookies, local storage, and security

Our web and mobile authentication services use cookies, session tokens, secure device storage, or similar storage to maintain sign-in, protect sessions, and remember relevant settings. The app also keeps local state and downloaded content needed for its enabled features. Browser and device controls can restrict or clear this storage, which may sign you out or affect functionality.

Access controls, authenticated requests, secure credential facilities, and HTTPS connections are used to protect supported service operations. No system can guarantee complete security. Protect your credentials, limit access to your devices, and report suspected unauthorized access promptly.

8. Retention and your privacy requests

Information is retained as needed to provide the service, maintain firm records, resolve disputes, protect security, and meet applicable legal or accounting obligations. Retention depends on the type of record and its purpose. Archiving a record, removing a membership, or disabling an account does not necessarily erase the underlying records, stored files, or backups.

Firm-controlled client, case, document, communication, and accounting records may need to remain available independently of a member’s access. Contact the responsible firm about those records. Exported copies held by users or other recipients are outside AdvoTech’s direct control.

You may contact kel.advotech@gmail.com to ask about your information or request access, correction, or deletion, subject to applicable rights and legitimate retention requirements. We may need to verify your identity and coordinate with the responsible firm. Do not include passwords or confidential case files in your initial email.

9. Account deletion

You can request deletion of your AdvoTech account using our public account-deletion page without signing in. Enter the full name, email address, and Nepal phone number stored on your account, then request a verification code by email or SMS. All three details must match our records. You must explicitly confirm deletion after entering the six-digit code.

Deleting an account removes account access while some historical firm and case associations remain stored. Firm-controlled client, matter, document, communication, and accounting records may remain subject to legitimate retention requirements. Account deletion does not mean that every associated record, stored file, backup, or exported copy is erased.

If no code arrives or you cannot supply the details on an older account, contact kel.advotech@gmail.com for help. We do not identify which submitted field failed to match. When the page reports that deletion is in progress, completion is still pending; it has not yet been confirmed as complete.

Delete your AdvoTech account

10. Intended audience and changes

AdvoTech is intended for authorized professional and firm-related use, rather than services directed at children. A firm may hold information about minors where relevant to its lawful work and must handle that information with appropriate authority and care.

We may update this policy as the service or its processing practices change. The date on this page identifies the latest revision. Material changes will be communicated through appropriate service channels when required.