Privacy Policy

The rest of this page is the detail behind those five lines — what is collected where, who processes it, and how long it lasts.

GetNyay is published and operated by Deepak Middha, Chartered Accountant, who is also its editor. He is not a lawyer and the site is not a law firm — see the disclaimer and the editor’s profile.

For anything on this page — a question, a request about your data, or a complaint about how it has been handled — write to team@getnyay.in. That is the only contact address for the site, and it reaches the editor directly.

It depends entirely on which part of the site you use. This table is the whole picture; each row is explained in the sections that follow.

What we never do

• We do not sell or rent personal data to anyone, for any purpose.
• We run no advertising, no ad network, no retargeting and no advertising cookies.
• We do not build a profile of you across other websites, and we load no social media tracking pixels.
• We do not send marketing email. There is no newsletter and no mailing list.
• We never contact the company or authority you are complaining about, and we never share your complaint with them.

This covers, among others:

• Everything under Letters & Applications — leave applications, NOCs, undertakings, authority letters, declarations, HR letters.
• The document format pages — affidavit, gift deed, sale agreement, eviction notice, partition notice, recovery notice, cheque bounce notice, RERA complaint and the rest.
• The template library pages.
• The calculators and deadline tools — limitation, court fee and jurisdiction, ombudsman eligibility, cheque bounce timelines, maintenance.

You can verify this yourself: fill one in with your browser’s network tab open, or disconnect from the internet after the page loads. The document still generates.

One exception: the divorce document generator

The document generator and affidavit wizard in the divorce section are built differently. The details you enter are sent to our server, which assembles the Word or PDF file and sends the file straight back to you. That request is not written to any database and the contents are not logged — the data exists only for the moment it takes to build your file, and the response is marked so it is not stored in any cache along the way. It is still worth knowing the difference, which is why it is stated here rather than buried.

When you generate a complaint, the following is written to our database:

• The category and issue type you chose, and the company or institution named.
• Your description of what happened, both as you wrote it and as it was drafted into the letter.
• The amount involved, the incident date, and any reference numbers you gave — order ID, transaction ID, policy number, previous complaint reference.
• Your name, email address and phone number, where you entered them, so they can be printed on the letter.
• The subject line and full body of the generated letter.
• A private download token, which is what lets you return to your own letter later without an account.

If you upload supporting evidence — a screenshot, a photo, a PDF, up to 5 MB — the file itself is stored in our file storage alongside the complaint, with its filename, size and type.

If you are not signed in

Your complaint is still saved, just without an account attached to it. It is kept until you ask us to delete it. We do not run an automatic expiry on it, and we would rather say that plainly than publish a deletion schedule we are not actually running.

So: download the Word and PDF files when you are done — they are free, complete and yours — and if you would like the stored copy removed, email us and it will be. Section 13 explains how, and it takes one line.

Please do not type these into a complaint

Ask GetNyay AI, the complaint drafting step, the complaint improver, the reply assistant and the escalation guidance all work by sending your text to OpenAI and returning what comes back. OpenAI is the only AI provider this site sends anything to.

What is sent

The message or description you wrote, the category if you selected one, and — in the chat — the last three exchanges of the conversation so the answer makes sense in context. Nothing else about you is attached: no name, no email, no account identifier, no IP address.

What we store about it

We keep a usage record for each AI request so that free usage limits can be enforced and abuse can be spotted. That record contains the type of request, the plan it was made under, how many tokens went in and out, whether it succeeded, the timestamp, the account it belonged to if any, and — for visitors without an account — an irreversible hash of the IP address, salted so it cannot be matched back to an address by anyone who obtains it.

What OpenAI does with it. We use the OpenAI API on its ordinary terms. Under those terms, data sent to the API is not used to train OpenAI’s models, and OpenAI may retain it for a limited period — up to 30 days at the time of writing — for abuse and misuse monitoring, after which it is deleted. We have not applied for zero-data-retention or modified-abuse-monitoring terms, so this is the standard arrangement rather than a special one. OpenAI’s own terms at openai.com govern the detail and can change.

AI output can be confidently wrong; our AI content notice explains what that means before you rely on a draft.

You never need an account to use GetNyay. If you choose to create one, sign-in is handled by Supabase Auth, which stores your email address and a cryptographic hash of your password. We never see or store your password itself.

• Your email address, and your name and phone number if you provide them.
• When the account was created and when it was last used.
• The complaints and documents saved under the account.
• A session cookie named getnyay_session, set by our server, which is what our pages use to recognise you.
• A Supabase session token, which the Supabase library keeps in your browser’s local storage rather than in a cookie.

LEGACY — discontinued. An earlier version of this site had a professional workspace. It is closed: its sign-up and upgrade pages redirect to the homepage, no new account can be created, and there is no attorney dashboard, subscription or client-record feature on GetNyay today. A small number of accounts from it still hold records (client entries, generated documents, saved templates and an activity log). Nothing new is added to them. If you hold one and want it deleted, write to team@getnyay.in.

The contact form

The form on our contact page does not send anything to us. It formats what you wrote into an email and hands it to your own mail app, so you send it yourself and keep a copy in your own Sent folder. Nothing you type there is transmitted to this site or stored by it.

When your email arrives, we hold it in the team@getnyay.in mailbox: your address, your name if you signed it, and whatever you wrote. We use it to reply to you and nothing else. It is never added to a list, and it is never passed to anyone.

The demo request form

One page on the site — the demo walkthrough — has a form that does submit to us. If you fill it in, we store the name, email address, phone number and role you entered, along with the city, state and notes if you gave them. It is stored so we can follow up on the request. That table is not readable by anyone browsing the site; it can only be read with our server credentials.

Payments

GetNyay charges nothing and there is no payment step anywhere in the site, so no payment or card data is collected from you.

No user of this site has ever been charged. Our database does contain a small number of payment records, and we would rather explain them than let you wonder: they are the operator’s own transactions from testing the payment flow when one briefly existed. They relate to nobody else — one email address, his, and no user account. Card details were never held by us in any case, as they were handled entirely by Stripe. See our no-payment policy.

We use Google Analytics 4 to see which pages people find useful. It is governed by a consent banner, and it genuinely starts switched off.

If you do accept, GA4 loads and measures normally. IP anonymisation is on, and no advertising storage, ad-personalisation or ad-user-data signal is requested or granted — we run no advertising. The site sends its analytics to two Google Analytics properties, which is why you will see two_ga_cookies rather than one.

To change your answer, clear this site’s data in your browser — the banner will appear again on your next visit and you can answer differently. You can also opt out of Google Analytics everywhere using Google’s own browser add-on at tools.google.com/dlpage/gaoptout, or block cookies in your browser settings. Nothing on GetNyay stops working if you decline.

Our cookie policy covers the same ground in more detail. Where the two pages could be read differently, this one is correct — both are updated together.

These are every outside service involved in running this site, and what each one actually sees. There are no others.

These providers operate infrastructure outside India, including in the United States, so where data reaches them it is processed outside India. We would also disclose personal data where a law, a court order or a lawful demand from an authority requires it — and we would tell you, unless we were prohibited from doing so.

The short answer: we keep what is listed below until you ask us to delete it, and we delete it when you do. We are not going to publish an automatic expiry schedule, because we would then be promising a process we do not run.

Older records. A few records predate the removal of features the site no longer has: email addresses from a sign-up prompt that no longer exists, a few accounts from the closed professional workspace, and the operator’s own test payment records described in section 8. Nothing new is being added to any of them, and none of them relates to a paying customer, because there has never been one. They are covered by the same rule as everything else: ask, and they go.

Our host keeps its own backups of the database on a schedule we do not control, so a deleted row can persist in a backup until that backup rotates out. We have not stated a number here because we would only be guessing at our provider’s current retention setting, and a guess is worth nothing to you. Our data retention policy sets out the same position.

• Everything travels over HTTPS. Data stored with Supabase is encrypted at rest.
• Row Level Security is enabled on our tables, so the public key the website uses cannot read stored complaints, leads or usage records — those are reachable only through our server.
• Passwords are hashed by Supabase Auth. We never see them.
• The session cookie is HttpOnly and Secure, so page scripts cannot read it and it only travels over an encrypted connection.
• IP addresses used for rate limiting are hashed with a secret salt before they are stored, and the hash cannot be reversed.

You can ask us to:

• Access — tell you what personal data we hold about you and give you a copy of it.
• Correct — fix anything inaccurate or incomplete.
• Erase — delete your account, your saved complaints and uploaded files, a demo form submission, or our copy of your emails.
• Withdraw consent — for analytics, at any time, by clearing this site’s data and declining the banner. Nothing stops working.

How to make a request

Email team@getnyay.in from the address you used on the site, tell us what you want, and — if it relates to a complaint — include the reference or the link you were given. We will acknowledge within 5 working days and act within 30 days.

Because most requests come from people who never had an account, we will usually verify you simply by replying to the address the data is attached to. We will not ask you for an identity document to delete something, and you should be suspicious of anyone claiming to be us who does.

GetNyay is aimed at people in India, and the Digital Personal Data Protection Act, 2023 governs the processing of digital personal data in India — including, on its own terms, processing outside India that relates to offering goods or services to people in India. The Act is therefore relevant to this site.

The Digital Personal Data Protection Rules were notified in 2025, and the framework commences in stages rather than all at once, with different obligations taking effect on different dates. So the Rules are made, not merely proposed, and the practical question is which duties currently bite.

What we do, stated against the obligations the Act is built around:

• Notice — this page is the notice: it sets out what is collected, on which page, why, who processes it and for how long.
• Consent and purpose limitation — analytics run only if you accept. The complaint wizard stores what you enter for the single purpose of producing and keeping your complaint, and it is used for nothing else.
• Data minimisation — most of the site collects nothing at all, by design, and the rest asks only for what the document needs.
• Erasure on request — see section 13. One email, and it is done.
• Children — see section 15.

Grievances about your data

If you are unhappy with how a request about your data was handled, write to team@getnyay.in with “Data grievance” in the subject line. It reaches Deepak Middha directly, and we will respond within 30 days. If you remain dissatisfied, the Act provides for escalation to the Data Protection Board of India, as and when the relevant provisions are in force.

GetNyay is meant for adults. We do not knowingly collect personal data from anyone under 18, and nothing on the site is directed at children. If you believe a child has entered personal details through this site, tell us at team@getnyay.in and we will delete it.

A document about a child — a maintenance calculation, a custody-related affidavit — is a different thing entirely, and those are generated in your browser and not stored by us.

When what the site does changes, this page changes with it. The date at the top of the page is the date it was last revised, and it is the first thing we update.

If we ever start collecting something we do not collect today — a new form that submits to us, a new third party, a generator that stops running in the browser — it will be written into this page before or when that change ships, not afterwards. We do not make previously collected data serve a new purpose without saying so.

Questions about any of it: team@getnyay.in.