B8R Legal — last updated 5 August 2026
B8R Legal is operated by B8R Labs, HN 206, Ward - 24, Dabra - 475110, India. Under the Digital Personal Data Protection Act, 2023, B8R Labs is the Data Fiduciary for the personal data described here, and you are the Data Principal.
This policy applies to advocates and legal professionals in India, to whom the App is offered. It covers what we collect, why, who else touches it, how long we keep it, and the rights you have over it.
Everything below is entered by you or your team to make the App work. None of it is collected passively, and none of it is bought from anyone else.
The App has no document upload. There is no facility to attach pleadings, orders, judgments, or any other file to a case, so we never hold your case documents. The only file the App accepts is an optional profile photograph.
We process your personal data on the basis of the consent you give when you create your account, and solely to provide the App's own features: storing and showing your cases, calculating totals, tracking hearing dates, operating your wallet, and supporting you when you ask.
We do not sell your data, do not use it for advertising, and do not use your case or client data to train any machine-learning model. We do advertise the App to advocates who do not yet use it; how that works, and what is deliberately not done with your details, is set out under Advertising and marketing.
You may withdraw your consent at any time by deleting your account — which is as easy to do as it was to give consent, and is available from inside the App. Withdrawing consent means we can no longer provide the App to you.
Much of what you store is personal data about your clients and other parties, who are not our users. You decide what to enter and why. You confirm when you enter it that you have the lawful authority or client consent to do so, and you remain responsible for your own confidentiality obligations under the Advocates Act, 1961 and Bar Council rules. We process that information only on your behalf, to run the App.
No other user sees anything of yours unless you grant it. Access is enforced by server-side security rules, not merely hidden in the interface.
You can revoke access at any time from the Team screen, by changing permissions or removing the member. Revocation takes effect immediately for future access; it cannot recover what someone already saw or noted while they had access.
Beyond that, we disclose personal data only to the service providers listed in our Sub-processor list, or where we are legally compelled to by a valid order.
Data is held in Google Firebase — Cloud Firestore in the asia-south1 (Mumbai) region, with Firebase Authentication for sign-in and Firebase Storage for profile photos. Data is encrypted in transit and at rest, access is controlled by server-side rules, and the database has daily backups, point-in-time recovery, and delete protection enabled. Details are in the Data Retention & Security Policy.
We use Firebase Crashlytics to receive crash reports (which screen, what failed — not your case, client, or payment data) and Firebase Analytics to see in aggregate which screens and features get used, so we know what to improve. Neither is used for advertising and neither is shared beyond Google's role as our infrastructure provider. On the web app these set cookies — see the Cookie Policy, including how to opt out.
Wallet top-ups are processed by Razorpay, a licensed Indian payment gateway. You interact with Razorpay's own secure checkout — we never see or store your card, UPI ID, or bank account details. Razorpay's own privacy policy governs that information.
Your data stays available while your account is active. When you delete your account, it is erased immediately from our live systems, and residual copies in encrypted backups age out within 30 days.
We keep no archive of your data older than 30 days. Beyond that we cannot restore your records even if you ask. Export anything you need to keep — Profile → Backup & export — and hold your own copy.
Under the Digital Personal Data Protection Act, 2023, you have the right to:
To exercise any of these, write to support@b8r.in. We acknowledge within 48 hours and aim to resolve within 30 days.
If a personal data breach occurs, we will notify the Data Protection Board of India and every affected user, without undue delay, telling you what happened, what data was involved, and what to do about it.
The App is for practising advocates and legal professionals and is not directed at children. We do not knowingly collect data from anyone under 18.
If this policy changes, the "last updated" date above changes with it, and material changes will be brought to your attention in the App.
Questions about this policy or your data: support@b8r.in, or our Grievance Officer.