1. Information We Collect
We collect the following categories of information:
- Account information: Name, email address, phone number (optional)
- Dispute data: Dispute descriptions, statements, messages between parties
- Evidence files: Documents, images, and other files uploaded as evidence
- Usage data: Pages visited, features used, device and browser information
- KYC data: Identity verification information when required (Aadhaar, PAN)
2. DPDP Act 2023 Compliance
Settl complies with the Digital Personal Data Protection Act, 2023 (India). As a Data Fiduciary, we:
- Process personal data only for lawful purposes with your consent
- Collect only data necessary for providing our services
- Maintain accuracy of personal data
- Delete personal data when no longer needed or upon your request
- Implement reasonable security safeguards to protect your data
3. How We Use Your Data
- Facilitate dispute resolution and communication between parties
- Generate AI-powered summaries, suggestions, and document drafts
- Maintain tamper-proof audit trails using cryptographic hashing (SHA-256)
- Send notifications about dispute activity
- Improve the Platform's functionality and user experience
- Comply with legal obligations
4. AI Data Processing
Important: Your data is not used for AI training
When you use AI features (mediation, document generation, outcome prediction), your dispute data is sent to AI models for processing. However:
- Your data is never used to train AI models
- AI processing is done on a per-request basis
- We use enterprise-grade AI providers with data processing agreements
- AI-generated outputs are stored as part of your dispute record
5. Data Sharing
We do not sell your personal data. We may share data with:
- Other dispute parties: Messages, statements, and evidence shared within a dispute are visible to all parties in that dispute
- AI service providers: For processing AI features (subject to data processing agreements)
- Human mediators: If you opt for human mediation, the assigned mediator can access dispute details
- Law enforcement: When required by law or valid legal process
6. Data Retention
- Active dispute data is retained for the duration of the dispute plus 3 years
- Resolved dispute records and audit logs are retained for 7 years for legal compliance
- You may request deletion of your account and associated data at any time
- Cryptographic hashes in the audit trail are retained independently for integrity verification
7. Your Rights
Under the DPDP Act 2023, you have the right to:
- Access your personal data held by us
- Request correction of inaccurate data
- Request deletion of your data (right to erasure)
- Withdraw consent for data processing
- Nominate another person to exercise your rights
- Lodge a grievance with the Data Protection Board of India
8. Security
We implement industry-standard security measures including:
- End-to-end encryption for data in transit (TLS 1.3)
- Encryption at rest for stored data
- Row-level security policies for database access control
- SHA-256 cryptographic hashing for evidence and message integrity
- Regular security audits and vulnerability assessments
9. Cookies
We use essential cookies for authentication and session management. We do not use third-party tracking cookies or advertising cookies.
10. Children's Privacy
Settl is not intended for use by individuals under 18 years of age. We do not knowingly collect personal data from children.
11. Contact & Grievance Officer
For privacy-related queries or to exercise your rights, contact:
Grievance Officer: privacy@settl.legal
We will respond to your request within 30 days as required by the DPDP Act.