Privacy policy

What we hold about you and your trademarks, why, and what you can make us do about it.

01 The short version

We hold your account details, the trademarks you track, and the documents you upload. We hold them to calculate your deadlines and remind you about them, and for nothing else. We do not sell your data, we do not share it with advertisers, and we do not use it to train any model. Your workspace is isolated from every other firm's: that separation is enforced in the database on every query, not by a filter in the interface.

02 Who is responsible

Ragu And Lika IP Private Limited is the data fiduciary, at Y II E 120/2, Triveni Puram, Jhunsi, Prayagraj, Uttar Pradesh 211019. Write to contact@ragulikaip.com about anything on this page. The grievance officer is Dr Rupalika.

03 What we collect

• Your account. Name, email address, and either a Google account identifier or a password hash — never a password.
• Your workspace. The firm's name, the people you invite and the role you give each of them.
• Your trademarks. Marks, classes, application and registration numbers, filing and registry dates, the events you record, proceedings, hearings, and the clients you attach them to.
• Your documents. Whatever you upload against a mark, together with its size, type and a checksum.
• Billing. Invoices, GSTIN if you give one, and the payment gateway's reference. Never card numbers — those go straight to the gateway and never reach this server.
• Technical records. Sign-in times, the IP address a reset was requested from, and an append-only audit trail of who changed what.

04 Why we hold it, and on what basis

To perform the contract you entered into when you subscribed: to calculate deadlines, send reminders, raise invoices and keep the service secure. Some of it we keep because the law requires it — tax records in particular.

The audit trail exists because a docket that cannot say who changed a date, and when, is not a docket. It is written on every change and cannot be edited from inside the application, including by us.

05 Who we share it with

Only those we cannot run the service without:

• the payment gateway, for subscriptions and invoices;
• the hosting provider, which stores the database and the uploaded files;
• an email provider, to deliver reminders and password resets;
• a government authority, where we are legally compelled — and we will tell you unless we are forbidden from doing so.

Nobody else. There are no analytics or advertising trackers on this site.

06 How it is protected

• Everything travels over HTTPS.
• Passwords are stored only as a one-way hash, using the algorithm PHP treats as current, and re-hashed as that moves on.
• Uploaded documents are stored outside the web root and can only be fetched through the application, after it has checked who you are, which organisation you belong to, and — for a client login — whether that document was shared with you.
• Every query against tenant data carries its organisation predicate. A query that forgets it does not return the wrong rows; it throws.
• Reset links are stored as a hash, work once, and last an hour.

If there is a breach affecting your data we will tell you and the authorities as the law requires, with what we know and what we are doing about it.

07 How long we keep it

• Your data: while your account is open, and for 90 days after you close it, so that a closure by mistake can be undone. Then it is deleted.
• Invoices and tax records: eight years, because Indian tax law requires it. These survive closure and we cannot delete them on request.
• Security and audit records: one year.

08 What you can require of us

Under Indian data protection law you may ask us to give you a copy of what we hold about you, correct anything wrong, delete it where we are not required to keep it, and give it to you in a portable form. Every workspace can also export its whole portfolio to CSV at any time without asking us.

Write to contact@ragulikaip.com. We answer within thirty days. If we refuse, we will say why, and you may escalate to the grievance officer and after that to the Data Protection Board of India.

09 Cookies

One session cookie, which is what keeps you signed in, and a short-lived cookie during Google sign-in. No analytics, no advertising, no third-party cookies, and therefore no cookie banner — there is nothing to consent to.

10 Children

This is a professional tool sold to firms. It is not directed at children and we do not knowingly hold data about anyone under eighteen.

11 Changes

If we change this policy materially we will email the address on your account before the change takes effect, not after.

Last updated 27 August 2026. Ragu And Lika IP Private Limited, Y II E 120/2, Triveni Puram, Jhunsi, Prayagraj, Uttar Pradesh 211019. GSTIN 09AANCR3540G1Z7. Questions about this page go to contact@ragulikaip.com.