Privacy Policy

Manupatra Information Solutions Private Limited ("Manupatra", "we", "us", or "our") is committed to protecting the privacy of individuals whose personal data we collect and process. This Privacy Policy explains how we collect, use, store, disclose, retain, and otherwise process your personal data when you access or use our websites, applications, products, services, and related platforms including Manupatra, ManuComply, ManuReader, ManuWorks AI, ManuContract, MyKase, Manupatra Academy, and other current or future products, applications, websites, platforms, or services owned, operated, or made available by Manupatra (collectively, the "Services").

This Privacy Policy has been prepared in accordance with the Digital Personal Data Protection Act, 2023 ("DPDP Act"), the Digital Personal Data Protection Rules, 2025, the Information Technology Act, 2000, and other applicable laws relating to privacy and data protection in India. However, where Manupatra processes the personal data of individuals/clients located outside India, nothing in this Privacy Policy is intended to limit or exclude any mandatory rights or protections available to such individuals under the applicable data protection laws of their jurisdiction, to the extent such laws apply to the processing of their personal data.

By accessing or using our Services, you acknowledge that you have read this Privacy Policy. Where your consent is required under applicable law, we will obtain such consent through appropriate mechanisms before processing your personal data.

This Privacy Policy applies to personal data collected directly from you, including when you:

• create or manage an account with Manupatra;
• subscribe to or use our products or services;
• visit our websites or associated online/social media platforms;
• contact us for support, demonstrations, or enquiries;
• register for webinars, events, or newsletters;
• apply for employment opportunities with Manupatra; or
• otherwise interact with us in connection with our Services.

In certain cases, we may process personal data provided by your employer, educational institution, or other organisation that has subscribed to or uses our Services on your behalf. The processing of such personal data shall be subject to the applicable contractual arrangements with that organisation and this Privacy Policy, where applicable.

Manupatra provides its Services to customers in India and other jurisdictions. Customers providing personal data to Manupatra are responsible for ensuring that they have the necessary authority, consents, or other lawful basis to disclose such personal data to us.

If you are a registered user of Manupatra's products or services, this Privacy Policy should be read together with the applicable licence agreement, subscription terms, or other contractual terms governing your use of the relevant Services. In the event of any inconsistency, the provisions of the applicable agreement shall prevail to the extent of such inconsistency, unless otherwise required under applicable law.

Our Services may contain links to third-party websites, applications, or services for your convenience. Such third-party platforms operate independently and maintain their own privacy policies and practices. Manupatra does not control and is not responsible for the privacy, security, or data processing practices of such third parties. We encourage you to review the privacy policies of any third-party websites or services before providing your personal data to them.

Definitions

"Personal Data" means any information concerning the personal or material circumstances of an identified or identifiable individual, e.g. name, address, bank details etc. It can be with reference to users, employees, customers, suppliers, etc.

Employees are identified or identifiable persons, who are employed by Manupatra.

"Customers/Users" are identified or identifiable natural persons, who show Manupatra that they have an obvious interest in concluding a contract for the purpose of acquiring a product or a service or, as the case may be, that they are the recipient of a product or service provided by Manupatra.

"Processing" is any operation or set of connected operations performed using Personal Data, whether with or without the help of automatic means. This includes collection, recording, organisation, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, blocking, erasure or destruction.

"Rendering Anonymous" means the alteration of Personal Data so that the details about personal or material circumstances can no longer be matched to an identified or identifiable natural person or could be so matched only by expending a disproportionate amount of time, expense and effort.

"Pseudonymising/anonymised" means replacing identifying features with a code in order to make identification of the Data Subject impossible or considerably more difficult.

"Sensitive Personal Data", for the purposes of this Policy, refers to such personal information about a natural person, which consists of information relating to:

• Password;
• Financial information such as Bank account or credit card or debit card or other payment instrument details;
• Physical, physiological and mental health condition;
• Sexual orientation;
• Medical records and history;
• Biometric information;
• Any detail relating to the above clauses as provided to us for providing services; and
• Any of the information received under any of the above clauses by us for processing, storing or processing under lawful contract or otherwise.

Information that is lawfully made publicly available under any applicable law, including the Right to Information Act, 2005, or any other law for the time being in force, shall be processed in accordance with applicable legal requirements. Where such information also constitutes personal data under the Digital Personal Data Protection Act, 2023, its processing shall be carried out only for lawful purposes and in accordance with this Privacy Policy and applicable law.

For the purposes of this Privacy Policy, "User" means any individual who accesses or uses the Services or otherwise provides personal data to Manupatra in connection with the Services.

The Information We Collect

We collect personal information that you voluntarily provide when you interact with our Services. Depending on how you use our Services, we may collect the following information:

• Name
• Email address
• Telephone number
• Postal or physical address
• Area of practice
• Product preferences
• Login credentials (such as your username and password)
• Any other information you choose to provide while registering, subscribing to our services, placing an order, attending webinars or events, submitting feedback, requesting support, or otherwise interacting with us.

We also collect certain technical and usage information when you visit our website. This may include information about your Internet Service Provider (ISP), the pages you visit, the frequency of your visits, and the time spent on different pages. This information is collected in an aggregated form and is used to understand how our website is used. It does not identify you personally.

Examples of Areas Where We Request Information

Restricted Access and Authentication: Access to designated sections of the Site and/or Associate Sites, including those hosted on manupatra.com, may require the user to provide a valid login name and password. Such authentication credentials serve as a condition of precedent to accessing specific information, materials, or services made available on these sections.

Registration and Sign-Up: Users who elect to register or sign up for a service provided on the Site, and/or Associated Sites agree to furnish accurate and complete information as required during the registration process. Such registration may be a prerequisite to access or utilize the designated service.

Subscription to Communications: By subscribing to a newsletter or by opting to be included in mailing lists for additional products and services, the user consents to receive electronic communications from the Site and/or Associated Sites. The user may, at any time, withdraw such consent in accordance with the applicable procedures.

Order Placement: Any order placed through the Site and/or Associated Sites is subject to acceptance by the Site and/or Associated Sites in accordance with its terms and conditions governing purchases. The placement of an order constitutes an offer by the user to enter into a binding contract upon the terms specified on the Site and/or Associated Sites.

Submission of Feedback: Users providing feedback via online surveys or other mechanisms on the Site and/or Associated Sites acknowledge that such feedback is submitted voluntarily and may be used by the Site/Associated Sites for the purposes of improving its services and products, subject to applicable confidentiality and data protection obligations.

For all instances listed above, the Site and/or Associated Sites, the user may be required to provide personal information, including, but not limited to, their name, e-mail address, telephone number, physical address, area of practice, product preference information, and login credentials (i.e., Log In Name and Password), as well as other similar personal data that is necessary to register or subscribe the user to the relevant services or offers. On occasion, additional information may be requested to facilitate user access to and use of certain information, materials, or services. In connection with subscriptions to newsletters or mailing lists, the user retains the right to unsubscribe at any time in accordance with the set procedures.

Wherever Manupatra collects personal information, we make an effort to include a link to this Privacy Policy on that page.

How We Use Your Information

We use the information we collect to:

• Create and manage your account and authenticate your access to restricted areas of our Services.
• Register you for and provide access to our products, services, webinars, events, and other offerings.
• Process and manage orders placed through our Services.
• Respond to your enquiries and provide customer service and technical support.
• Improve the functionality, performance, and user experience of our website and Services.
• Analyse website usage through aggregated statistics to support product development and improve our Services.
• Communicate with you regarding your account, subscriptions, products, and services.
• Send you updates, newsletters, special offers, and information about Manupatra's products and services. You may unsubscribe from marketing communications at any time.
• Consider and analyse the feedback you voluntarily provide to improve our products and services.
• Enhance our marketing and promotional activities by combining your information with information obtained from third-party sources, in accordance with applicable law.
• Comply with applicable legal obligations and protect the rights, property, and safety of Manupatra, its users, and third parties.

Wherever we collect personal information, we endeavour to provide a link to this Privacy Policy so that you understand how your information will be processed.

Manupatra may be required to disclose your personal data to third parties under the following circumstances:

• Where required under applicable laws, judicial orders, or governmental regulations.
• In the event of a merger, acquisition, divestiture, or dissolution involving Manupatra, customer data, including your personal information, may be transferred as part of the transaction.
• To protect the rights, property, or safety of Vendor, its users, or third parties.

You have the right to access, modify, or withdraw consent for the processing of your personal data under the provisions of the DPDP Act and other applicable data protection laws. To exercise your rights, including data correction, deletion, or restriction of processing, you may contact Manupatra.

Our Commitment to Data Security

We implement a combination of administrative, technical, and physical safeguards to protect your personal information from unauthorized access, use, disclosure, alteration, or destruction. These measures are in accordance with applicable data protection laws, including the DPDP Act and other applicable data protection laws.

Security Measures

Our safeguards include, but are not limited to:

• Encryption technologies
• Secure servers and firewalls
• Access control mechanisms
• Employee confidentiality agreements and training
• Access controls based on business need
• Secure infrastructure and network protection
• Periodic security reviews and monitoring
• Employee confidentiality obligations and security awareness training

These measures are regularly reviewed and updated to ensure continued effectiveness.

Limitations and Disclaimer

While we take reasonable steps to protect your data, you acknowledge that no system of data transmission or storage over the internet can be guaranteed to be 100% secure.

Information disclosed online may remain vulnerable to interception, unauthorized access, or misuse by third parties despite our best efforts.

Limitation of Liability

While Manupatra implements reasonable technical and organisational measures to protect personal data, no method of electronic transmission or storage is completely secure. Accordingly, Manupatra cannot guarantee the absolute security of personal data. To the extent permitted by applicable law, Manupatra shall not be liable for any loss or damage arising from events beyond its reasonable control, including sophisticated cyberattacks, unauthorised third-party access, or other circumstances despite the implementation of reasonable security safeguards.

Cookies

Cookies are small text files that are stored on your device's hard drive when you visit a website. These files are used for record-keeping purposes and help improve your overall browsing experience.

Purpose of Cookies

We use cookies to:

• maintaining user sessions and authentication;
• remembering user preferences;
• improving website functionality and performance;
• analysing website traffic and usage trends;
• enhancing the user experience.

Manupatra does not control or assume responsibility for the cookies or tracking technologies used by third-party advertisers or partners.

We encourage you to review the respective privacy policies of such third parties to understand how they handle data collected through cookies.

User Control Over Cookies

You can manage or disable cookies through your browser settings. Most web browsers accept cookies by default, but you may modify your browser settings to refuse cookies or notify you when a cookie is being placed.

Please note that if you disable or refuse cookies, certain features or sections of our website, particularly those requiring user authentication or personalisation, may not function properly or may become unavailable.

Certain cookies are essential for the operation of our Services, including maintaining secure login sessions and providing access to authenticated areas of the website. These essential cookies are necessary for the proper functioning of the Services.

By using this Website, you consent to the use of cookies in accordance with this Privacy Policy, unless you have disabled cookies through your browser settings. This practice is in compliance with the applicable provisions of the DPDP Act and other applicable data protection laws.

Information of Minor(s)

Our Services are not directed towards individuals under the age of 18 years, and we do not knowingly collect or process the personal data of children except in accordance with applicable law.

Certain educational institutions, universities, colleges, schools, and other organisations may subscribe to or provide access to our Services for their students. Where such access is provided to individuals under the age of 18 years, the relevant institution shall be responsible for ensuring that all consents, authorisations, and permissions required under applicable law have been obtained before facilitating such access or sharing any personal data with Manupatra.

If a child accesses our services without the required consent or does so using the login credentials of another person, thereby preventing us from verifying their age or the legitimacy of consent, such access shall be deemed unauthorized. In such cases, the responsibility for the child's access and use of the services, including any personal data shared or actions taken, shall lie with the parent, lawful guardian, or, where access has been facilitated by an educational institution, the institution itself.

If we become aware that a child has provided personal data without the consent required under applicable law, we will take appropriate steps to review the circumstances and, where required, delete such personal data or otherwise comply with our legal obligations within a reasonable period after verification.

Parental Rights and Data Deletion

If you are a parent or legal guardian and become aware that your child has provided personal information without your consent, you may request immediate deletion of such data by contacting us.

Upon receiving a verifiable request, we will promptly review and take appropriate action, including deleting the data from our records, except where retention is legally mandated within a reasonable period after verification.

How to Access or Correct Your Information

You may access, review, update, or correct the personal information associated with your account by logging into your Manupatra account and navigating to the "Edit Profile" section.

This feature allows the User to:

• Review their personal details stored in Manupatra's system.
• Modify or update inaccurate or outdated information.

If you are unable to update your information through your account or wish to exercise any other rights available under applicable law, you may contact us using the details provided in this Privacy Policy. We will review and respond to your request in accordance with applicable law.

Third Party Sites and Services

Manupatra may share your information with third parties that perform services for Manupatra or on Maunpatra's behalf, including payment processing, email delivery, and hosting services.

Manupatra's websites, products, applications, and services may contain links to third-party websites, products, and services. Additionally, Manupatra's products and services may integrate or offer third-party services, including but not limited to:

• Data visualization services that display or process information.
• Cloud storage solutions (e.g., Dropbox, Google Drive) for uploading, storing, or sharing Vendor documents.

Any information collected by such third-party services, including but not limited to location data, contact details, or authentication credentials, is subject to the privacy policies and practices of the respective third parties. Manupatra does not control, review, or assume responsibility for the privacy practices, security measures, or data handling policies of these third-party entities.

Users are strongly encouraged to review the privacy policies and terms of service of such third-party providers before using their services. Your interaction with such services is solely at your own discretion, and Manupatra shall not be liable for any data processing activities conducted by these third parties.

Data Localization

Personal data collected by Manupatra is stored and processed on servers located in India for the provision of our Services.

Where personal data is transferred outside India, such transfers shall be carried out in accordance with the Digital Personal Data Protection Act, 2023, and other applicable laws. Manupatra will implement appropriate contractual, technical, and organisational safeguards to protect personal data during such transfers.

Data Retention

We retain your personal data only for as long as necessary to provide our Services, fulfil the purposes for which it was collected, comply with applicable legal obligations, maintain business records, resolve disputes, enforce our agreements, and prevent fraud or misuse.

Where you access the Services through an organisation-sponsored subscription, all subscriber content is deleted or securely destroyed within 30 days of subscription termination or upon receipt of an explicit written deletion request, unless a longer retention period is mandated by applicable law. Subscribers may request customised data retention periods as per their internal policies, and Manupatra will implement such requests where feasible and permitted by applicable law.

Where continued retention is necessary for analytics, research, or legitimate business purposes, personal data will be anonymised so that it can no longer identify an individual. Enterprise customers may, where supported by the Services, manage data retention settings in accordance with their internal policies and regulatory requirements.

AI Training

Manupatra will not use customer data, including user prompts, uploaded documents, text, images, or any other content provided through the Services, to train or improve large language models, machine learning models, or other artificial intelligence systems without the customer's prior express written consent.

Rights of Users

We are committed to upholding your rights under the DPDP Act and other applicable data protection laws. You have various rights concerning the collection, use, processing, and storage of your personal information. These rights may be exercised subject to legal limitations, technical feasibility, and geographical applicability.

Your Rights Include:

Right to Access Information

You have the right to obtain information regarding the personal data processed by Manupatra, including a summary of the personal data being processed, the processing activities undertaken, and the identities of Data Fiduciaries and Data Processors with whom your personal data has been shared, in accordance with applicable law.

Right to Correction, Completion, and Updating

You have the right to request the correction of inaccurate or misleading personal data, the completion of incomplete personal data, and the updating of your personal data where it is no longer accurate.

Right to Erasure

You may request the erasure of your personal data where it is no longer necessary for the purpose for which it was processed, subject to applicable legal, regulatory, or contractual obligations requiring its retention.

This right does not apply where Manupatra is required by law to retain the personal data or where the information forms part of publicly available legal records, such as court judgments or statutory publications, unless otherwise directed by a competent authority or court.

Right to Withdraw Consent

Where the processing of your personal data is based on your consent, you may withdraw your consent at any time. Withdrawal of consent shall not affect the lawfulness of processing carried out before such withdrawal but may affect our ability to provide certain Services.

Right to Grievance Redressal

You have the right to seek redress of grievances relating to the processing of your personal data by contacting our designated Grievance Officer using the contact details provided in this Privacy Policy.

Right to Nominate

You have the right to nominate another individual who may exercise your rights under the Digital Personal Data Protection Act, 2023, in the event of your death or incapacity, in accordance with applicable law.

Conditions of Exercise

These rights may vary depending on your location and the nature of the processing activity.

Requests will be honored within the statutory timeframe, subject to identity verification and applicable limitations under law.

Some rights may not be absolute and can be restricted based on legal obligations, ongoing investigations, or service requirements.

How to Contact Us

If you would like to contact us for any reason regarding our privacy practices, please e-mail us at contact@manupatra.com

Revisions to This Policy

manupatra.com reserves the right to revise, amend or modify this policy from time to time in accordance with the law. Any change or revision will be posted here.