Privacy Policy

Introduction

This Privacy Policy describes how Banyan Tree Teaching Solutions LLP, operating under the trade name Miss Lucy, and its affiliates (collectively "Miss Lucy", "we", "our", "us") collect, use, share, protect or otherwise process your information/personal data through our website miss-lucy.in (hereinafter referred to as "Platform"). Please note that you may be able to browse certain sections of the Platform without registering with us. We do not offer any product/service under this Platform outside India and your personal data will primarily be stored and processed in India. By visiting this Platform, providing your information or availing any product/service offered on the Platform, you expressly agree to be bound by the terms and conditions of this Privacy Policy, the Terms of Use and the applicable service/product terms and conditions, and agree to be governed by the laws of India including but not limited to the laws applicable to data protection and privacy. If you do not agree, please do not use or access our Platform.

Miss Lucy is offered in two variants, both covered by this Privacy Policy: Miss Lucy Pro, the paid service for legal professionals at miss-lucy.in, and Miss Lucy Lite, a free service for the general public at lite.miss-lucy.in. Both variants collect a phone number and email address at sign-up and are subject to the same data-handling practices described here; references to the "Platform" apply to both unless stated otherwise.

Collection

We collect your personal data when you use our Platform, services or otherwise interact with us during the course of our relationship, and related information provided from time to time. Some of the information that we may collect includes but is not limited to personal data/information provided to us during sign-up/registration or using our Platform such as:

  • Name, email address, telephone/mobile number
  • Professional details (e.g., bar council enrolment number, law school, area of practice)
  • Identity verification documents (e.g., student ID card, submitted during the access request process)
  • Account credentials (password, stored in hashed form)

We may also collect the following information automatically when you use the Platform:

  • Usage data: Search queries, research sessions, documents uploaded, conversation history, and interactions with AI-generated outputs
  • Device and browser information: IP address, browser type, operating system, and device identifiers
  • Analytics data: Page views, feature usage, and navigation patterns (collected via PostHog)
  • Error and performance data: Application errors and performance metrics (collected via Sentry)

You always have the option to not provide information by choosing not to use a particular service or feature on the Platform.

When a third-party business partner or service provider collects your personal data directly from you, you will be governed by their privacy policies. We shall not be responsible for the third-party business partner's privacy practices or the content of their privacy policies, and we request you to read their privacy policies prior to disclosing any information.

If you receive an email or a call from a person or association claiming to be Miss Lucy seeking any personal data like passwords, payment details, or OTPs, we request you to never provide such information. If you have already revealed such information, report it immediately to an appropriate law enforcement agency.

Usage

We use personal data to provide the services you request. To the extent we use your personal data to market to you, we will provide you the ability to opt-out of such uses. We use your personal data to:

  • Provide and improve our AI-powered legal research services
  • Process and manage your account and subscriptions
  • Enhance your experience by remembering your preferences and research context across sessions
  • Resolve disputes and troubleshoot problems
  • Inform you about service updates, new features, and relevant offerings
  • Detect and protect against error, fraud and other unauthorized or criminal activity
  • Enforce our terms and conditions
  • Conduct research, analysis and surveys to improve our Services
  • Comply with applicable legal obligations

You understand that your access to these services may be affected in the event permission is not provided to us.

AI Processing

Our Services use artificial intelligence models provided by third-party providers to process your queries and generate research outputs. These providers are: Moonshot AI Pte. Ltd. (Singapore), Anthropic (United States), OpenAI (United States) and Google (United States). Your queries and uploaded documents may be sent to these AI service providers for processing, which may involve the transfer of that data to servers outside India (currently Singapore and the United States), with safeguards consistent with applicable data-protection law. We do not train AI models of our own on your personal data; the providers' handling of data submitted through their APIs is governed by their published terms. AI-generated outputs are not a substitute for independent legal judgment.

Sharing

We may share your personal data internally within our group entities and affiliates to provide you access to the services and products offered by them. These entities and affiliates may market to you as a result of such sharing unless you explicitly opt-out.

We may disclose personal data to third parties such as:

  • AI service providers (for processing queries and generating research outputs)
  • Payment gateway providers (for processing subscription payments)
  • Cloud infrastructure providers (for hosting and storage)
  • Analytics and error-tracking services (for improving the Platform)
  • Communication service providers (for transactional emails, SMS and notifications)

These disclosures may be required for us to provide you access to our Services, to comply with our legal obligations, to enforce our user agreement, to facilitate our marketing and advertising activities, or to prevent, detect, mitigate, and investigate fraudulent or illegal activities related to our Services.

We may disclose personal and sensitive personal data to government agencies or other authorised law enforcement agencies if required to do so by law or in the good faith belief that such disclosure is reasonably necessary to respond to subpoenas, court orders, or other legal process. We may disclose personal data to law enforcement offices, third-party rights owners, or others in the good faith belief that such disclosure is reasonably necessary to: enforce our Terms of Use or Privacy Policy; respond to claims that content violates the rights of a third party; or protect the rights, property or personal safety of our users or the general public.

Security Precautions

To protect your personal data from unauthorised access or disclosure, loss or misuse, we adopt reasonable security practices and procedures, including:

  • Encrypted storage of passwords (hashing)
  • HTTPS encryption for all data in transit
  • JWT-based authentication with CSRF protection
  • Role-based access controls

Once your information is in our possession or whenever you access your account information, we adhere to our security guidelines to protect it against unauthorised access and offer the use of a secure server. However, the transmission of information is not completely secure for reasons beyond our control. By using the Platform, the users accept the security implications of data transmission over the internet and the World Wide Web which cannot always be guaranteed as completely secure, and therefore, there would always remain certain inherent risks regarding use of the Platform. Users are responsible for ensuring the protection of login and password records for their account.

Data Deletion and Retention

You have an option to delete your account by visiting your profile and settings on our Platform; this action would result in you losing all information related to your account, including your research history, uploaded documents, and saved analyses. You may also write to us at the contact information provided below to assist you with these requests.

We may, in the event of any pending grievance, claims, or any other services, refuse or delay deletion of the account. Once the account is deleted, you will lose access to the account.

We retain your personal data for a period no longer than is required for the purpose for which it was collected or as required under any applicable law. However, we may retain data related to you if we believe it may be necessary to prevent fraud or future abuse or for other legitimate purposes. We may continue to retain your data in anonymised form for analytical and research purposes.

Your Rights

You may access, rectify, and update your personal data directly through the functionalities provided on the Platform.

Consent

By visiting our Platform or by providing your information, you consent to the collection, use, storage, disclosure and otherwise processing of your information on the Platform in accordance with this Privacy Policy. If you disclose to us any personal data relating to other people, you represent that you have the authority to do so and permit us to use the information in accordance with this Privacy Policy.

You, while providing your personal data over the Platform or any partner platforms or establishments, consent to us (including our other corporate entities, affiliates, technology partners, marketing channels, business partners and other third parties) to contact you through SMS, instant messaging apps, call and/or e-mail for the purposes specified in this Privacy Policy.

You have an option to withdraw your consent that you have already provided by writing to the Grievance Officer at the contact information provided below. Please mention "Withdrawal of consent for processing personal data" in your subject line of your communication. We may verify such requests before acting on our request. However, please note that your withdrawal of consent will not be retrospective and will be in accordance with the Terms of Use, this Privacy Policy, and applicable laws. In the event you withdraw consent given to us under this Privacy Policy, we reserve the right to restrict or deny the provision of our services for which we consider such information to be necessary.

Changes to this Privacy Policy

Please check our Privacy Policy periodically for changes. We may update this Privacy Policy to reflect changes to our information practices. We may alert/notify you about the significant changes to the Privacy Policy, in the manner as may be required under applicable laws.

Grievance Officer

In accordance with the Information Technology Act, 2000 and rules made thereunder, the name and contact details of the Grievance Officer are provided below:

Name: Dhiraj Goel Designation: Designated Partner Organization: Banyan Tree Teaching Solutions LLP Address: 4th Floor, 414, R R Realty Building, LBS Road, Bhandup West, Mumbai, Mumbai Suburban, Maharashtra, 400078 Email: dhira.goel@miss-lucy.in Time: Monday - Friday (9:00 AM - 6:00 PM IST)