HassleFree Legal – Privacy Policy

This Policy must be read together with our Terms and Conditions, Refund and Cancellation Policy, and any other policy published on the Platform. By using the Platform, you confirm that you have read, understood, and consent to the collection and use of your personal data as described in this Policy.

Note: HassleFree is not a law firm and does not practice law. All legal, compliance, and financial services are delivered by independent Advisors. This Policy governs data processed by HassleFree as the platform operator only

This Privacy Policy applies to:

• All registered Users (Clients) who access the Platform to seek legal, compliance, or financial advisory services.
• All registered Advisors (Advocates, Chartered Accountants, Company Secretaries, and Financial Consultants) who offer services through the Platform.
• All visitors to the Platform, whether or not they are registered.

This Policy covers personal data collected in digital form and personal data collected in non-digital form that is subsequently digitized, in accordance with Section 3 of the DPDP Act, 2023.

In this Policy:

• "Data Principal" means the individual to whom personal data relates. For Users and Advisors on this Platform, that is you.
• "Data Fiduciary" means HassleFree Legal, which determines the purpose and means of processing your personal data.
• "Data Processor" means any third party engaged by HassleFree to process personal data on its behalf under a valid written contract.
• "Personal Data" means any data about an individual who is identifiable by or in relation to such data, as defined under Section 2(t) of the DPDP Act, 2023.
• "Processing" includes collection, recording, storage, adaptation, retrieval, use, disclosure, transmission, erasure, or destruction of personal data.
• "Data Protection Board" means the Data Protection Board of India constituted under Section 18 of the DPDP Act, 2023.
• "DPDP Rules" means the Digital Personal Data Protection Rules, 2025, notified on 13 November 2025.

We collect only such personal data as is necessary for the operation of the Platform and the delivery of Services, consistent with the principle of data minimization under the DPDP Act, 2023.

3.1 Personal Information (Users and Advisors)

• Full name, age, and gender.
• Contact details including email address, phone number, and postal address.
• Identity proof and government-issued identification documents including PAN card, Aadhaar number, Passport, and Voter ID, collected for identity verification and KYC compliance.
• Payment details including bank account number, UPI ID, and credit or debit card information, processed exclusively through secure third-party payment gateways. HassleFree does not store sensitive payment card data.

3.2 Professional Information (Advisors Only)

• Bar Council of India enrolment number and enrolment certificate.
• ICAI or ICSI membership number and certificate, as applicable.
• SEBI, IRDAI, or AMFI registration details, as applicable to the Advisor's category.
• Business address, GST registration number, and PAN.
• Professional licenses, certificates, and regulatory authorizations.

3.3 Service and Transaction Data

• Booking history, service requests, payment records, and refund transactions.
• Communications, messages, and documents exchanged between Users and Advisors through the Platform.
• Documents uploaded for advisory purposes including contracts, notices, legal documents, and identity proofs.
• Matter progress updates and compliance tracking data.

3.4 Technical and Usage Data

• Device information including device type, operating system, and browser type.
• IP address and approximate location data.
• Session logs, access times, pages viewed, and navigation patterns.
• Cookies and similar tracking technologies. See Section 11 of this Policy.

3.5 Sensitive Personal Data

Where the nature of the service requires it, we may collect sensitive personal data such as Aadhaar numbers, financial information, and information relating to legal matters. Such data is collected only with your explicit consent and processed with enhanced security measures. We do not collect biometric data for general platform use.

HassleFree processes personal data only on the following legal grounds under the DPDP Act, 2023 and the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011:

• HassleFree processes personal data only on the following legal grounds under the DPDP Act, 2023 and the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011:
• • Contractual necessity: Where processing is necessary for the performance of a contract to which you are a party, including service bookings and advisor engagements.
• Legal obligation: Where processing is required for compliance with applicable law including court orders, regulatory requirements, and government directions.
• Legitimate use: Where processing is necessary for purposes specified as legitimate use under Section 7 of the DPDP Act, 2023, including compliance with judgments, decrees, or orders of courts, prevention of fraud, and maintenance of platform security.

5.1 Platform Operations

• Verifying the identity and eligibility of Users and Advisors at the time of registration.
• Facilitating the discovery, booking, and delivery of advisory services between Users and Advisors.
• Processing payments, managing refunds, and disbursing platform commissions.
• Operating the Compliance Tracking System including automated deadline reminders and advisor assignments.
• Managing the Matter Progress Tracker and document vault features.

5.2 Communication and Support

• Sending booking confirmations, service updates, and transactional notifications.
• Providing customer support and resolving disputes between Users and Advisors.
• Notifying you of changes to our Terms and Conditions, Privacy Policy, or other platform policies.

5.3 Security and Compliance

• Maintaining platform security, detecting and preventing fraud, and investigating violations of our Terms.
• Complying with applicable law including responding to valid orders from courts, tribunals, and government authorities.
• Fulfilling our obligations as an intermediary under the IT (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, as amended.

5.4 Platform Improvement

• Analyzing usage patterns and technical data to improve platform features and user experience.
• Conducting internal research and quality assurance reviews.

We will not use your personal data for any purpose other than those stated above without obtaining fresh consent or as otherwise permitted under applicable law.

HassleFree does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. We share personal data only in the following circumstances:

6.1 With Advisors

Upon confirmation of a booking, relevant User information is shared with the appointed Advisor solely for the purpose of delivering the booked service.

6.2 With Users

Upon confirmation of a booking, relevant Advisor information including name, credentials, and contact details is shared with the booking User solely for the purpose of the engagement.

6.3 With Data Processors

We engage third-party service providers as Data Processors under valid written contracts that bind them to process personal data only on our instructions and in compliance with applicable law. These include payment gateway providers, cloud hosting providers, communication service providers, and analytics providers. All Data Processors are required to implement security measures equivalent to or greater than those maintained by HassleFree.

6.4 With Authorities

We may disclose personal data to government authorities, regulatory bodies, law enforcement agencies, or courts when required by a valid court order, applicable law, or regulatory direction. We disclose only the minimum data necessary to comply with such requirements.

6.5 Business Transfers

In the event of a merger, acquisition, or sale of substantially all assets of HassleFree, personal data may be transferred to the successor entity subject to equivalent privacy protections. You will be notified of any such transfer.

HassleFree primarily stores and processes personal data within India. Where personal data is transferred outside India for the purpose of delivering platform services such as cloud infrastructure or communication services, such transfers are conducted only to countries not restricted by the Central Government under Section 16 of the DPDP Act, 2023, and subject to appropriate contractual safeguards.

For NRI Clients making payments in foreign currency, all foreign exchange transactions are conducted in compliance with the Foreign Exchange Management Act, 1999 (FEMA) and applicable Reserve Bank of India regulations.

We retain personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law:

• Account data is retained for the duration of your account and for 180 days following account deletion, in accordance with Rule 3(1)(h) of the IT (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021.
• Transaction and booking records are retained for 7 years from the date of the transaction for tax compliance and audit purposes under the Income Tax Act, 1961 and applicable GST laws.
• Documents uploaded for advisory purposes are retained for the duration of the matter and for a defined archival period, after which they are deleted from our servers.
• Communication logs are retained for 180 days in accordance with Rule 3(1)(g) of the IT Rules, 2021, and for such additional period as may be required by a court or government authority.
• Advisor credential records are retained for as long as the Advisor remains registered and for 5 years thereafter.

In accordance with Section 8(7) of the DPDP Act, 2023, HassleFree will erase personal data as soon as it is reasonable to assume that the specified purpose is no longer being served, unless retention is required by applicable law.

HassleFree implements appropriate technical and organizational security measures to protect personal data against unauthorized access, loss, misuse, alteration, or destruction, in accordance with Section 8(5) of the DPDP Act, 2023 and the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

Our security measures include:

• End-to-end encryption for document sharing and sensitive communications on the Platform.
• Role-based access controls ensuring personal data is accessible only to personnel who require access for their functions.
• Secure server infrastructure with regular security audits and vulnerability assessments.
• Two-factor authentication for Advisor accounts.
• Contractual data security obligations on all Data Processors.

In the event of a personal data breach, HassleFree will, in accordance with Section 8(6) of the DPDP Act, 2023 and the DPDP Rules, 2025:

• Notify the Data Protection Board of India in the prescribed form and manner.
• Notify each affected Data Principal of the nature of the breach, the personal data affected, and the remedial steps being taken.

No system is 100% secure. While we take all reasonable precautions, HassleFree cannot guarantee the absolute security of electronic data. You are encouraged to use strong passwords and log out of the Platform after each session.

Under the DPDP Act, 2023, you have the following rights in respect of your personal data:

• Right to access: You may request a summary of personal data held about you and the purposes for which it is processed.
• Right to correction and erasure: You may request correction of inaccurate or incomplete personal data, and erasure of personal data that is no longer necessary, subject to applicable legal retention requirements.
• • Right to withdraw consent: Where processing is based on consent, you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
• Right to grievance redressal: You have the right to have your grievances in respect of your personal data addressed promptly. See Section 13 of this Policy.
• Right to nominate: You may nominate another individual to exercise your rights under the DPDP Act in the event of your death or incapacity.
• Right to data portability: Subject to technical feasibility and applicable law, you may request your personal data in a structured, commonly used, and machine-readable format.

To exercise any of the above rights, please write to support@hasslefree.legal. We will acknowledge your request within 72 hours and respond within 30 days. We may verify your identity before processing any request.

If you are not satisfied with our response, you may approach the Data Protection Board of India.

We use cookies and similar tracking technologies to improve the functionality and performance of the Platform. The types of cookies we use are:

• Essential cookies: Required for the Platform to function, including authentication, session management, and security.
• Functional cookies: Used to remember your preferences and personalize your experience on the Platform.
• Analytics cookies: Used to understand how users interact with the Platform so we can improve features and performance.

You may disable or delete cookies through your browser settings. Disabling essential cookies may affect your ability to use certain features of the Platform. We do not use cookies to serve targeted advertising to Users or Advisors.

The Platform is intended exclusively for individuals aged 18 years and above. We do not knowingly collect personal data from persons below the age of 18. Contracts entered into by persons below 18 years are void under Section 11 of the Indian Contract Act, 1872.

In accordance with Section 9 of the DPDP Act, 2023, where we become aware that personal data of a child has been collected without verifiable parental consent, we will delete such data promptly.

In accordance with Section 8(10) of the DPDP Act, 2023 and Rule 3(2) of the IT (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, HassleFree has established an effective grievance redressal mechanism.

For any complaint, concern, or query regarding the processing of your personal data, please contact:

Grievance Officer: Raghavender Manai

Email: grievance@hasslefree.legal

Address: HassleFree Legal Technologies Private Limited, #22, Serwell Co-op Housing Society, Rajeevnagar, Motinagar, Hyderabad, Telangana 500018, India

HassleFree recognizes that communications between a Client and an Advocate may attract legal professional privilege under Section 1 of the Bharatiya Sakshya Adhiniyam, 2023 and the Advocates Act, 1961.

HassleFree will not access, disclose, or use the substantive content of communications between Clients and Advocates except as strictly necessary for the technical operation of the Platform.

Legal professional privilege applies only to communications between a Client and an Advocate. Communications with Chartered Accountants, Company Secretaries, and Financial Consultants are protected by contractual confidentiality obligations under the Advisor Agreement and these Terms, but do not attract statutory legal professional privilege.

HassleFree may update or revise this Privacy Policy from time to time to reflect changes in law, platform features, or our data practices. The revised Policy will be published on the Platform with an updated Last Updated date.

For material changes that significantly affect your rights, we will provide advance notice of at least 14 days by email or prominent notice on the Platform. Continued use of the Platform after the effective date of a revised Policy constitutes acceptance of the revised terms.

This Privacy Policy is governed by the laws of India, including the Digital Personal Data Protection Act, 2023, the Digital Personal Data Protection Rules, 2025, the Information Technology Act, 2000, the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the IT (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, as amended from time to time.

Any dispute arising in connection with this Privacy Policy shall be subject to the exclusive jurisdiction of the courts at Hyderabad, Telangana.

For all privacy-related queries, complaints, or requests:

Email: support@hasslefree.legal

Address: HassleFree Legal Technologies Private Limited, #22, Serwell Co-op Housing Society, Rajeevnagar, Motinagar, Hyderabad, Telangana 500018, India

By accessing or using the HassleFree Platform, you acknowledge that you have read, understood, and consent to this Privacy Policy.

Copyright2026 HassleFree Legal. All rights reserved.