Privacy Policy

This policy applies to:

• Advocates — solo practitioners and law firm members who use LawDesk to manage their practice
• Firm Administrators — who manage team accounts under a LawDesk Firm or Enterprise plan
• Visitors — who visit lawdesk.com.pk without creating an account

2.1 Information You Provide Directly

Account Information

• Full name
• Email address
• Phone number (Pakistan format: +92XXXXXXXXXX)
• Bar Council enrollment number
• City and province

Firm Information (Firm/Enterprise plans)

• Firm name
• Team member names and email addresses
• Roles assigned within the firm

Client and Case Data

• Client names, CNIC numbers, addresses, and contact details
• Case titles, case numbers, court names, case types
• Hearing dates, outcomes, and adjournment records
• Opposing party and opposing counsel names
• Case notes and internal memos
• Fee records, invoice details, and billing history

Documents

• Legal documents uploaded to the platform (PDF, images, DOCX)
• AI-generated legal document drafts (Vakalatnama, POA, Affidavit, Bail Applications)
• Court orders and judgments stored per case

2.2 Information Collected Automatically

• IP address and approximate location
• Browser type and device information
• Pages visited and features used within the app
• Login timestamps and session duration
• Error logs for debugging purposes

2.3 Information from Third Parties

• Google OAuth — if you sign up using Google, we receive your name and email from Google
• Stripe — payment processor; we receive transaction confirmations but do not store your full card details
• Firebase — device tokens for push notification delivery

We use the information collected for the following purposes:

We do not use your client data or case data for any purpose other than delivering the LawDesk service to you.

LawDesk uses the Google Gemini API (gemini-2.5-flash) to power AI features including:

• Hearing summary generation
• Legal document draft generation (Vakalatnama, Affidavit, Bail Application, POA)
• Document parsing and analysis

We do not use your case data or client data to train AI models. All AI processing is done on a per-request basis.

Please review Google's Privacy Policy for how Google Gemini handles API data.

Documents you upload (court orders, evidence, pleadings) are stored using Supabase Storage, hosted on secure cloud infrastructure. All documents are:

• Stored in a private bucket, not publicly accessible via URL
• Accessible only to the account that uploaded them
• Accessible to firm administrators if you are a member of a firm on LawDesk
• Protected by Row Level Security (RLS) so no other user can access your files

We implement the following security measures:

• All data transmitted between your browser and our servers is encrypted using HTTPS/TLS
• Passwords are hashed and never stored in plain text
• Supabase Row Level Security ensures users can only access their own data
• API keys and service credentials are stored server-side only and never exposed to the browser
• Regular automated backups of the database
• Rate limiting on all API endpoints to prevent abuse

Despite these measures, no system is 100% secure. If you suspect unauthorized access to your account, contact us immediately at [email protected].

As a user of LawDesk, you have the following rights:

• Access — Request a copy of all data we hold about you
• Correction — Update incorrect or incomplete information via your profile settings
• Deletion — Request deletion of your account and all associated data
• Data Portability — Request your case and client data in a machine-readable format (JSON/CSV)
• Objection — Object to processing of your data for marketing purposes
• Withdraw Consent — Unsubscribe from marketing emails at any time

To exercise any of these rights, email us at [email protected] with the subject line "Privacy Request." We will respond within 14 business days.

LawDesk uses minimal cookies:

You can disable cookies in your browser settings. Disabling authentication cookies will log you out of the app.

LawDesk is a professional platform intended for licensed advocates and legal professionals. We do not knowingly collect information from persons under 18 years of age. If we become aware that a minor has created an account, we will delete that account immediately.

LawDesk may contain links to external websites such as court websites or legal resources. We are not responsible for the privacy practices of those websites. Please review their privacy policies separately.

We may update this Privacy Policy from time to time. When we do:

• The "Last Updated" date at the top of this page will change
• For significant changes, we will notify you via email or an in-app notification
• Continued use of LawDesk after changes constitutes acceptance of the updated policy

If you have any questions, concerns, or privacy requests, contact us at:

This Privacy Policy was written for LawDesk, a practice management platform serving Pakistani legal professionals.