Privacy policy

We hold your account details, the patent applications you ask us to track, and the documents you upload. We use them to calculate your deadlines and remind you about them. We do not sell them, we do not train models on them, and no other customer of this application can see them.

This policy explains the rest. It is written to meet the Digital Personal Data Protection Act 2023 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules 2011.

Ragu And Lika IP Private Limited, of Y II E 120/2, Triveni Puram, Jhunsi, Prayagraj, Uttar Pradesh 211019, is the data fiduciary for the personal data described here. You can reach us at contact@ragulikaip.com.

Account data

Your name, email address, hashed password, and — if you sign in with Google — the Google account identifier and the email on it. We never receive your Google password.

Organisation data

Where you use a firm account: the firm name, who is a member, and what role each member holds.

Patent data

Application numbers, filing and priority dates, titles, applicant and inventor names, status, and the dates you record against a matter.

Documents

Whatever you upload — filing receipts, examination reports, replies. These often contain unpublished technical information, and we treat them as confidential.

Billing data

Your billing name and address, GSTIN if you give one, the invoices we issue you, and the payment gateway's reference for each payment and mandate.

Technical data

IP address, browser type, and timestamps of sign-in and of security-relevant actions, kept so that we can investigate misuse.

We do not ask for and do not want your card number, CVV, UPI PIN, net-banking credentials, Aadhaar, or PAN. If you send any of those to us by mistake, tell us and we will delete them.

We process your data to perform the contract you have with us — that is, to run the docketing service you are paying for. Specifically: to calculate deadlines, to send you reminders, to raise tax invoices, to take the payments you have authorised, and to keep the account secure.

We keep certain records because the law requires it: tax invoices and the details on them are retained for the period required under GST and company law, regardless of whether you have cancelled.

We do not use your data for advertising, we do not profile you, and we do not make automated decisions that have a legal effect on you.

A short list, and no others:

Our payment gateway

To take payments and manage mandates. It receives your name, email, billing address and the amount. It does not receive your patent data.

Our hosting provider

The servers the application runs on are in a managed hosting environment. Data is stored there.

Email delivery

Reminders and account emails are sent through a mail service, which necessarily sees your email address and the content of the reminder.

Where the law compels us

A valid order from a court or an authority with jurisdiction. We will tell you unless we are prohibited from doing so.

We do not sell personal data. We do not share it with data brokers. We do not share your patent data with any third party for any commercial purpose.

• Uploaded documents are encrypted at rest with a key held outside the database.
• Passwords are stored as Argon2id hashes with a server-side secret mixed in; they cannot be reversed, and we cannot tell you what your password is.
• Sessions are identified by a hashed token, so a stolen database row does not give anyone your session.
• Access between customers is separated in the application itself, and that separation is tested as part of every release.
• Connections are over HTTPS.

No system is perfect. If we discover a breach that affects you, we will tell you and the Data Protection Board as required, and we will tell you what we know rather than what sounds best.

Your account data and patent data are kept while the account is open, and for ninety days after you close it so that an accidental deletion can be undone. After that they are erased.

Uploaded documents are erased when you delete them, and in any case within ninety days of the account closing.

Invoices and the billing details on them are kept for eight years, because tax law requires it.

Security logs are kept for one year.

Under the Digital Personal Data Protection Act 2023 you may ask us to:

• tell you what we hold about you and who we have shared it with;
• correct anything inaccurate, or complete anything incomplete;
• erase what we no longer need for the purpose you gave it for;
• nominate someone to exercise these rights if you die or become incapacitated;
• give you your data in a portable form.

Write to contact@ragulikaip.com. We answer within thirty days. If you are not satisfied, escalate to our grievance officer (see the contact page), and after that you may complain to the Data Protection Board of India.

You can also withdraw consent, or simply cancel and close the account, at any time.

The application sets one cookie, to keep you signed in, and a short-lived cookie during sign-in with Google to prevent request forgery. That is all. There are no advertising cookies, no analytics that follow you across sites, and no third-party trackers.

The application is for professional use and is not directed at children. We do not knowingly collect data from anyone under eighteen.

If we change this policy materially we will email you before it takes effect. The date this version took effect is at the top of the page.