Important: Do not upload client secrets, privileged material, court-restricted records, identity documents or confidential information unless a feature expressly requires it and you are authorised to do so.
1. Scope and responsibility
This policy applies when you visit lawunited.in, create or use an account, publish content, communicate with members, apply for a role, register for an event, manage a firm profile, upload media, or request and manage a Law United-hosted firm website.
For applicable Indian data-protection law, Law United acts as data fiduciary for personal data it decides how and why to process. Firms, recruiters, organisers, external websites, Google and other linked services may separately act under their own policies.
2. Information we collect
| Category | Examples |
|---|---|
| Account and sign-in | Email, password hash, account status, Google identifier, verified email and display name. We never receive your Google password. |
| Optional social connections | If you connect LinkedIn or Instagram, we store your platform account identifier, display name, encrypted access token, token expiry and sharing status. We do not receive your social-account password. |
| Professional identity | Name, title, practice area, bar or professional details, firm, location, experience, education, biography, credentials and verification status. |
| Content and activity | Posts, articles, comments, endorsements, polls, connections, messages, stories, saved items and reports. |
| Jobs, events and organisations | Applications, résumé or documents, registrations, listings, firm or college profiles, memberships and administration records. |
| Media and managed sites | Profile and cover images, uploads, firm and member information synchronised to a separately isolated WordPress site at the firm owner's request, and content published through that site. |
| Device and security | IP address, request time, browser metadata, authentication events, errors, security logs and essential session identifiers. |
Passwords are one-way hashed. Authentication tokens and essential browser storage maintain sessions and preferences. We currently do not use third-party advertising cookies.
3. Why we use personal data
We process data to provide requested services and for purposes described in an appropriate notice, with consent where required by the Digital Personal Data Protection Act, 2023 and applicable rules. We use it to:
- create accounts, authenticate users and connect Google sign-in;
- build profiles, review professional status and prevent impersonation;
- provide search, publishing, networking, messaging, jobs, events, firms and managed-website features;
- send service, security, moderation and account communications;
- protect users, detect abuse, preserve evidence and comply with lawful requests; and
- debug and improve reliability, accessibility and performance.
We do not sell personal data or use it for behavioural advertising. We will not materially change a consented purpose without an appropriate fresh notice or other lawful basis.
4. Email communications and preferences
Law United supports transactional email for email-address verification and a password reset that you request. When outbound delivery is enabled, these necessary account and security messages are separate from optional email and are not used to advertise unrelated features. Delivery can be paused during sender-authentication setup, maintenance or a safety incident; an accepted request does not by itself promise that an email was sent or reached an inbox.
Optional categories such as unread-message reminders, network or followed-organisation activity, and jobs, events or judgment digests are disabled by default and activate only after a clear, separate choice. Some choices may remain marked unavailable until the corresponding feature is launched. You can change available choices in Email preferences and use the unsubscribe control included in optional email. Optional email will not be activated merely because you created an account, followed a page or did not change a setting. You may also contact privacy@lawunited.in about email delivery or suppression.
We do not place tracking pixels, private message bodies, attachments, résumés, passwords or signed-in browser sessions in email. A verification or password-reset message necessarily contains a short-lived, one-use action link. We may keep limited queue, delivery, failure and suppression information for security, support, reliable delivery and to avoid repeatedly contacting an invalid or objecting address. Retention periods and automated bounce or complaint handling will be documented before optional email is enabled; the current delivery foundation should not be understood as inbox-delivery or read tracking.
5. What others can see
If you select social sharing when publishing, your chosen text and supported media are sent to the connected platform on your behalf. LinkedIn sharing is public; Instagram posts appear on your connected professional account. Those platforms process the content under their own policies. You can disconnect an account in the post composer to delete its stored token and cancel queued shares. A share already in progress may finish. Disconnecting or deleting a LawUnited post does not remove copies already published externally; manage those posts and app permissions on the relevant platform.
Public pages may display selected verified professional, firm, job, event and published-content information. Members may see additional community information. Private messages and application material are not public, but intended recipients can access them.
Public material may be indexed, quoted or retained by others. Review privilege, client confidentiality, court restrictions, professional conduct and third-party rights before posting.
7. Retention and deletion
Account information is kept while active and thereafter only as reasonably required for deletion processing, fraud prevention, disputes, legal compliance, backups and security. Transient sessions are short-lived; published, transaction and security records may require longer retention. Deletion may not remove material lawfully retained by recipients, de-identified information, legally required records or material another person independently posted. Backup deletion can be delayed.
8. Your rights and choices
Subject to applicable law, you may request a summary of data processed and relevant sharing, correction, completion, erasure, withdrawal of consent, grievance redressal and nomination of another person where legally available. You can update much profile information in the service. Withdrawal does not invalidate prior lawful processing and may disable a dependent feature. We may proportionately verify identity.
Where applicable, you may approach the Data Protection Board of India after using the grievance process.
9. Children
Law United is for legal professionals and is not intended for anyone under 18. We do not knowingly create accounts for children.
10. Security and incidents
Safeguards include HTTPS, hashed passwords, access controls, isolated services, restricted outbound connectivity, rate limiting and security monitoring. No online service can promise absolute security. Use a unique password and protect your email and Google accounts.
We will investigate, contain and issue notifications required by applicable Indian law after a personal-data breach.
11. Changes
We may update this policy as features or law change. Material changes will be communicated appropriately. The effective date and version identify the current text.
12. Privacy and grievance contact
Include the account email and enough detail to understand the request, but never send a password or unnecessary sensitive material. If your request requires a named contact or postal delivery, ask for the current service details through the email address above.