One-stop platform to manage processes of all your IPs - Trademarks, Copyrights, Industrial Designs, Patents, GI & Trade Secrets.

One-stop platform to manage processes of all your IPs - Trademarks, Copyrights, Industrial Designs, Patents, GI & Trade Secrets.

Privacy Policy

Effective Date: December 4, 2025
Last Updated: December 4, 2025
Version: 2.0

1. INTRODUCTION
1.1 About This Policy

This Privacy Policy describes how Rah Legal Knowledge Process Private Limited (“we,” “us,” “our,” or “the Company”), operating the platform ipronline.com (the “Platform”), collects, uses, stores, shares and protects your personal information and data.

Registered Office:
Raheja Plaza-I, 201 A, LBS Marg, Ghatkopar (West), Mumbai – 400086, Maharashtra, India

Contact:
Email: compliance@ipronline.com

1.2 Scope and Applicability

This Privacy Policy applies to:

(a) All users of the Platform (visitors, registered users, subscribers);

(b) Personal information collected through our website, mobile applications, emails and other digital channels;

(c) Information provided during account creation, service usage and communications with us;

(d) Data collected through cookies and similar tracking technologies.

1.3 Acceptance of This Policy

By accessing or using the Platform, you:

(a) Acknowledge that you have read and understood this Privacy Policy;

(b) Consent to the collection, use, storage and sharing of your information as described herein;

(c) Agree to be bound by this Privacy Policy and our Terms of Use.

If you do not agree with this Privacy Policy, you must not use the Platform.

1.4 Governing Laws

This Privacy Policy is governed by and complies with:

(a) Information Technology Act, 2000 and rules made thereunder;

(b) Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011;

(c) Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 (as amended);

(d) Digital Personal Data Protection Act, 2023 (when notified and applicable);

(e) Any other applicable data protection and privacy laws in India.

2. INFORMATION WE COLLECT
2.1 Personal Information You Provide

We collect personal information that you voluntarily provide to us, including:

(A) Account Registration Information:

(a) Full name (individual or business name);

(b) Email address;

(c) Mobile phone number;

(d) Password (encrypted and stored securely);

(e) Business details (company name, type of entity, registration numbers);

(f) Billing address and contact details.

(B) Profile Information:

(a) Professional details (designation, role);

(b) Communication preferences;

(c) Profile photograph (optional);

(d) Language preferences.

(C) Payment Information:

(a) Billing name and address;

(b) Payment method details (processed through secure third-party payment gateways);

(c) Transaction history and invoices;

(d) GST number and tax-related information (for businesses).

Note: We do NOT directly collect or store full credit/debit card numbers or CVV codes. Payment processing is handled by PCI-DSS compliant third-party payment gateways.

(D) IP Application Information:

(a) Trademark names, logos and artwork;

(b) Copyright works and creative content;

(c) Design specifications and visual materials;

(d) Patent disclosures and technical documentation;

(e) Business information related to IP assets;

(f) Applicant details and ownership information.

(E) MSME Verification Information:

(a) Udyam Registration Number;

(b) MSME certificate and supporting documents;

(d) Business turnover and employee details (for eligibility verification).

(F) Communications:

(a) Messages sent through contact forms, chat or email;

(b) Customer support inquiries and correspondence;

(c) Feedback, reviews and survey responses;

(d) Comments or content posted on the Platform.

2.2 Information Collected Automatically

When you access or use the Platform, we automatically collect certain information:

(A) Device and Technical Information:

(a) IP address and geolocation data;

(b) Device type, model and operating system;

(c) Browser type and version;

(d) Screen resolution and device identifiers;

(e) Mobile network information.

(B) Usage Information:

(a) Pages visited and features used;

(b) Time spent on pages;

(c) Click-stream data and navigation paths;

(d) Search queries and filters applied;

(e) Files downloaded or uploaded;

(f) Referral sources and exit pages.

(C) Cookies and Tracking Technologies:

We use cookies, web beacons, pixel tags and similar technologies to:

(a) Remember your preferences and settings;

(b) Authenticate your login sessions;

(c) Analyze Platform usage and performance;

(d) Deliver personalized content and advertisements;

(e) Improve user experience and Platform functionality.

You can control cookies through your browser settings. Please refer Section 11 of this document for more details.

2.3 Information from Third-Party Sources

We may receive information about you from:

(A) Social Media Platforms:

If you choose to link your account or sign up using social media (Google, LinkedIn, Facebook), we may receive:

(a) Profile information (name, email, profile picture);

(b) Public profile data you have chosen to share;

(c) Friends references or such connections (if you authorize sharing).

(B) Payment Processors:

(a) Transaction confirmations and payment status;

(b) Fraud prevention and verification data;

(c) Payment instrument details (masked card numbers).

(C) Analytics Providers:

(a) Aggregated usage statistics;

(b) Demographic insights;

(c) Performance metrics.

(D) IP Authorities and Government Registries:

(a) Application status updates;

(b) Official communications and notifications;

(c) Public records of IP registrations.

2.4 Sensitive Personal Data or Information

Under Indian law, certain categories of personal information are classified as “Sensitive Personal Data or Information” (SPDI). We collect SPDI only when necessary and with your explicit consent:

(a) Passwords (stored in encrypted form);

(b) Financial information (bank account, credit/debit card details – processed through third-party gateways);

(c) Biometric information (when using biometric authentication features);

(d) Any information deemed sensitive under applicable law.

We do NOT collect:

(a) Physical, physiological or mental health condition (unless voluntarily provided);

(b) Sexual orientation;

(c) Medical records or history;

(d) Official identifiers (Aadhaar, PAN) unless required for MSME verification or legal compliance and with your consent.

3. HOW WE USE YOUR INFORMATION
3.1 Primary Purposes

We use your personal information for the following purposes:

(A) Platform Services:

(a) Creating and managing your account;

(b) Process management of your IP documentation and applications;

(c) Providing workflow management and tracking tools;

(d) Storing and managing your documents and data;

(e) Facilitating connections with independent advocates and law firms;

(f) Delivering technical support and customer services.

(B) Processing Transactions:

(a) Processing subscription payments and fees;

(b) Generating invoices and receipts;

(c) Managing refunds and billing disputes;

(d) Maintaining transaction records for accounting and tax purposes.

(C) Communications:

(a) Sending account-related notifications and updates;

(b) Providing customer support and preparations for responding to inquiries;

(c) Sending alerts about deadlines, hearings and IP office actions;

(d) Delivering educational content and procedural guidance;

(e) Notifying you of Platform updates, new features and service announcements.

(D) Platform Improvement:

(a) Analyzing usage patterns and trends;

(b) Identifying and fixing technical issues;

(c) Conducting research and development;

(d) Testing new features and functionality;

(e) Improving user experience and Platform performance.

(E) Marketing and Promotions:

With your consent, we may use your information to:

(a) Send promotional emails about new features, offers and services;

(b) Provide personalized content and recommendations;

(c) Conduct surveys and request feedback;

(d) Invite you to webinars, workshops and events.

You can opt out of marketing communications at any time through your account settings or unsubscribe links in emails.

(F) Legal Compliance and Protection:

(a) Complying with applicable laws, regulations and court orders;

(b) Legal research and support to respond to government authorities;

(c) Enforcing our Terms of Use and other agreements;

(d) Detecting, preventing and addressing fraud, security issues and technical problems;

(e) Protecting our rights, property and safety and that of our users;

(f) Resolving disputes and enforcing our legal rights.

3.2 Legal Basis for Processing

We process your personal information based on:

(a) Your consent: Where you have provided explicit consent for specific processing activities;

(b) Contractual necessity: To perform our obligations under the Terms of Use and provide Platform services;

(c) Legal obligations: To comply with applicable laws and regulations;

(d) Legitimate interests: For business purposes that do not override your privacy rights (analytics, fraud prevention, Platform improvement).

3.3 No Attorney-Client Privilege

IMPORTANT NOTICE:

As stated in our Compliance Disclaimer and Platform Terms of Use, information shared with ipronline.com is NOT protected by attorney-client privilege or legal professional privilege. We are a technology platform, not a law firm.

Any privileged communications must occur directly between you and your independently engaged advocate or law firm, not through our Platform.

4. HOW WE SHARE YOUR INFORMATION
4.1 When We Share Information

We may share your personal information in the following circumstances:

(A) With Your Consent:

We share information when you explicitly authorize us to do so, such as:

(a) Sharing your IP application materials with advocates or law firms you authorise/engage;

(b) Providing your information to third-party services you choose to integrate;

(c) Publishing testimonials or case studies with your approval.

(B) Service Providers and Business Partners:

We share information with trusted third-party service providers who assist in Platform operations, including:

(a) Cloud hosting providers (for data storage and infrastructure);

(b) Payment processors (for transaction processing);

(c) Email service providers (for communications and notifications);

(d) SMS, WhatsApp, such chat gateway providers (for alerts and reminders);

(e) Analytics providers (for usage analysis and performance monitoring);

(f) Customer support tools (for helpdesk and ticketing);

(g) Security services (for fraud detection and cybersecurity).

These service providers:

  • Are contractually obligated to protect your information;
  • May only use your information to provide services to us;
  • Must comply with data protection laws;
  • Are prohibited from using your information for their own purposes.

(C) IP Authorities and Government Registries:

We transmit your IP application information to, as need be:

(a) Controller General of Patents, Designs and Trademarks (CGPDTM);

(b) Trade Marks Registry;

(c) Copyright Office;

(d) Patent Office;

(e) Other relevant IP authorities as required for your applications.

(D) Independent Advocates and Law Firms:

When you engage independent legal professionals:

(a) We share relevant information and documents with your chosen advocate or law firm;

(b) This sharing is done at your direction and with your authorization;

(c) The advocate-client relationship and confidentiality obligations exist between you and them, not with us;

(d) We are not responsible for their handling of your information.

(E) Legal and Regulatory Compliance:

We may disclose information when required by law or in good faith belief that such disclosure is necessary to:

(a) Comply with court orders, subpoenas or legal process;

(b) Respond to lawful requests from government authorities or law enforcement;

(c) Enforce our Terms of Use or investigate potential violations;

(d) Detect, prevent or address fraud, security or technical issues;

(e) Protect the rights, property or safety of ipronline.com, our users or the public.

(F) Business Transfers:

In the event of a merger, acquisition, reorganization, sale of assets or bankruptcy:

(a) Your information may be transferred to the acquiring entity;

(b) We will notify you via email and/or prominent notice on the Platform;

(c) The acquiring entity will be bound by this Privacy Policy;

(d) You will have the opportunity to opt out or delete your account.

(G) Aggregated and De-identified Data:

We may share aggregated, anonymized or de-identified data that cannot reasonably be used to identify you:

(a) For industry research and analysis;

(b) With business partners for analytics;

(c) For marketing and promotional purposes;

(d) In public reports or presentations.

4.2 What We Do NOT Share

We do NOT:

(a) Sell your personal information to any third parties;

(b) Rent or lease your contact information to marketers;

(c) Share your information for unrelated commercial purposes without consent;

(d) Disclose your sensitive personal data except as described in this Policy or required by law.

5. DATA SECURITY
5.1 Security Measures

We implement reasonable technical, organizational and physical security measures to protect your personal information from unauthorized access, disclosure, alteration or destruction:

(A) Technical Safeguards:

(a) Encryption: Data in transit is encrypted using SSL/TLS protocols; sensitive data at rest is encrypted using industry-standard encryption;

(b) Access Controls: Role-based access controls limit employee access to personal information on a need-to-know basis;

(c) Authentication: Multi-factor authentication options for user accounts;

(d) Firewalls: Network firewalls and intrusion detection systems;

(e) Security Monitoring: Continuous monitoring for suspicious activity and security threats;

(f) Regular Updates: Timely application of security patches and updates.

(B) Organizational Safeguards:

(a) Employee Training: Regular security awareness training for employees;

(b) Confidentiality Agreements: Employees sign confidentiality and data protection agreements;

(c) Vendor Management: Due diligence and contractual protections for third-party service providers;

(d) Incident Response: Documented procedures for responding to data breaches and security incidents.

(C) Physical Safeguards:

(a) Secure data centers with restricted physical access;

(b) Environmental controls and backup power systems;

(c) Secure disposal procedures for physical media containing personal information.

5.2 Limitations of Security

Despite our efforts, no method of transmission or storage is 100% secure. We cannot guarantee absolute security. You acknowledge and accept that:

(a) You provide information at your own risk;

(b) Unauthorized access, hardware/software failures and other factors may compromise data security;

(c) You are responsible for maintaining the confidentiality of your account credentials;

(d) You must notify us immediately of any unauthorized use of your account.

5.3 Data Breach Notification

In the event of a data breach that may compromise your personal information:

(a) We will investigate and assess the scope and impact;

(b) We will notify affected users without undue delay as required by law;

(c) We will notify relevant authorities as required by applicable data protection laws;

(d) We will provide information about the breach, its impact and remedial measures;

(e) We will take steps to mitigate harm and prevent future breaches.

6. DATA RETENTION
6.1 Retention Periods

We retain your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

(A) Active Account Data:

(a) Retained for the duration of your active account;

(b) Continuously updated to reflect current information;

(c) Accessible to you through your account dashboard.

(B) Closed Account Data:

(a) General account information: Retained for 3 years after account closure for legal, tax and accounting purposes;

(b) IP application documents: Retained for 7 years after application completion for record-keeping and potential disputes;

(c) Transaction records: Kept for the number of years required under different tax authorities and accounting laws.

(d) Communications: Retained for 3 years for customer service quality and dispute resolution.

(C) Backup Data:

(a) Backup copies may persist in our systems for up to 90 days after deletion;

(b) Backups are used solely for disaster recovery and are not actively accessed;

(c) Backup data is subject to the same security measures as active data.

(D) Legal Hold:

If information is subject to legal proceedings, investigations or regulatory inquiries, we will retain it until the matter is resolved, regardless of standard retention periods.

6.2 Deletion and Anonymization

After retention periods expire:

(a) Personal information is permanently deleted or anonymized so it can no longer identify you;

(b) Anonymized data may be retained indefinitely for analytics and research;

(c) Deletion is performed using secure methods to prevent recovery.

6.3 User-Initiated Deletion

You may request deletion of your account and personal information. See Section 8 (Your Rights) for details.

7. INTERNATIONAL DATA TRANSFERS
7.1 Data Storage Location

Your personal information is primarily stored on servers located in India. However, some of our service providers may store or process data on servers located outside India.

7.2 Cross-Border Transfers

When we transfer personal information outside India:

(a) We ensure appropriate safeguards are in place to protect your information;

(b) Transfers are made to countries with adequate data protection laws or under standard contractual clauses;

(c) Service providers are contractually obligated to protect your information;

(d) Transfers comply with applicable Indian data protection laws.

7.3 Your Consent

By using the Platform, you consent to the transfer of your information outside India as described in this Policy.

8. YOUR RIGHTS
8.1 Access and Portability

You have the right to:

(a) Access your personal information held by us;

(b) Request a copy of your personal information in a structured, commonly used format;

(c) Download your data through your account dashboard (where available);

(d) Receive an explanation of how we use your information.

8.2 Correction and Update

You have the right to:

(a) Correct inaccurate or incomplete personal information;

(b) Update your profile and account information at any time;

(c) Request corrections if you cannot make changes yourself.

8.3 Deletion and Erasure

You have the right to request deletion of your personal information in certain circumstances:

(a) When it is no longer necessary for the purposes for which it was collected;

(b) When you withdraw consent and there is no other legal basis for processing;

(c) When you object to processing and there are no overriding legitimate grounds;

(d) When processing is unlawful.

Exceptions: We may retain information when required by law, for legal proceedings or for legitimate business purposes (e.g., fraud prevention, resolving disputes).

To request deletion: Email compliance@ipronline.com and Cc to support@ipronline.com with your request. We will respond within 30 days.

8.4 Objection and Restriction

You have the right to:

(a) Object to processing of your personal information for direct marketing purposes (you can opt out at any time);

(b) Object to processing based on legitimate interests;

(c) Request restriction of processing in certain circumstances (e.g., while we verify accuracy of data you have contested).

8.5 Withdrawal of Consent

Where processing is based on your consent, you have the right to withdraw consent at any time. This does not affect the lawfulness of processing before withdrawal.

To withdraw consent: Adjust your account settings or email compliance@ipronline.com and Cc to support@ipronline.com

8.6 Complaint and Grievance

If you have concerns about how we handle your personal information:

(A) Contact Us First:

Email: compliance@ipronline.com and Cc to support@ipronline.com
We will acknowledge your complaint within 24 hours and respond within 15 days.

(B) Grievance Officer:

Compliance Officer & Grievance Officer
Rah Legal Knowledge Process Private Limited, Raheja Plaza-I, 201 A, LBS Marg, Ghatkopar (W), Mumbai – 400086, India
Email: compliance@ipronline.com

(C) Regulatory Authorities:

You have the right to lodge a complaint with relevant data protection authorities in India if you believe your rights have been violated.

8.7 How to Exercise Your Rights

To exercise any of these rights:

(a) Log in to your account and use privacy settings (where available);

(b) Email compliance@ipronline.com with your request;

(c) Provide sufficient information to verify your identity;

(d) Specify the right you wish to exercise and relevant details.

We will respond to your request within 30 days and may request additional information to verify your identity.

9. CHILDREN'S PRIVACY
9.1 Age Restriction

The Platform is not intended for children under the age of 18. We do not knowingly collect personal information from children under 18.

9.2 Parental Discovery

If we become aware that we have collected personal information from a child under 18 without parental consent:

(a) We will delete the information as soon as reasonably practicable;

(b) We will terminate the child’s account;

(c) We will notify the parent or guardian if contact information is available.

9.3 Parental Rights

If you are a parent or guardian and believe your child has provided personal information to us, please contact compliance@ipronline.com immediately.

10. THIRD-PARTY LINKS AND SERVICES
10.1 External Links

The Platform may contain links to third-party websites, applications or services (e.g., payment gateways, IP office portals,  SSL Certificate Authorities (CAs), cybersecurity software companies, chatboats, social media platforms).

10.2 No Responsibility

We are NOT responsible for:

(a) Privacy practices of third-party websites or services;

(b) Content or accuracy of information on external sites;

(c) Data collection or use by third parties;

(d) Security measures of linked websites.

10.3 Review Third-Party Policies

Before providing personal information to third parties:

(a) Review their privacy policies and terms of service;

(b) Understand how they collect, use and protect your information;

(c) Make informed decisions about sharing your data.

10.4 Third-Party Integrations

If you choose to integrate third-party services (e.g., social media login, cloud storage):

(a) Review permissions requested by the third party;

(b) Understand what information will be shared;

(c) You can revoke access at any time through your account settings.

11. COOKIES AND TRACKING TECHNOLOGIES
11.1 What Are Cookies

Cookies are small text files stored on your device when you visit websites. They help websites remember your preferences and improve user experience.

11.2 Types of Cookies We Use

(A) Essential Cookies:

Required for Platform functionality:

(a) Authentication and login sessions;

(b) Security and fraud prevention;

(c) Load balancing and performance;

(d) Remembering your preferences.

These cookies cannot be disabled as they are necessary for Platform operation.

(B) Analytics Cookies:

Help us understand how you use the Platform:

(a) Pages visited and time spent;

(b) Navigation paths and click patterns;

(c) Device and browser information;

(d) Error messages and technical issues.

(C) Marketing Cookies:

Used with your consent for:

(a) Personalized content and recommendations;

(b) Targeted advertising and promotions;

(c) Measuring marketing campaign effectiveness;

(d) Retargeting on third-party platforms.

11.3 Third-Party Cookies

We may use third-party cookies from:

(a) Google Analytics: Website traffic and usage analysis;

(b) Payment Processors: Transaction processing and fraud prevention;

(c) Social Media Platforms: Social login and content sharing;

(d) Advertising Networks: Targeted advertising (with consent).

11.4 Managing Cookies

You can control cookies through:

(A) Browser Settings:

(a) Block all cookies;

(b) Accept only first-party cookies;

(c) Delete cookies after each session;

(d) Be notified when cookies are set.

Note: Disabling essential cookies may affect Platform functionality.

(B) Opt-Out Tools:

(a) Industry opt-out pages (e.g., Network Advertising Initiative, Digital Advertising Alliance);

(b) Browser plug-ins (e.g., Google Analytics Opt-out);

(c) Platform-specific privacy settings.

(C) Mobile Devices:

(a) Limit ad tracking in device settings;

(b) Reset advertising identifier;

(c) Use privacy-focused browsers.

11.5 Do Not Track

Some browsers offer “Do Not Track” (DNT) settings. Currently, there is no industry standard for responding to DNT signals. We do not respond to DNT signals at this time.

12. CHANGES TO THIS PRIVACY POLICY
12.1 Right to Modify

We reserve the right to update or modify this Privacy Policy at any time to:

(a) Reflect changes in our practices or services;

(b) Comply with new legal or regulatory requirements;

(c) Improve clarity or transparency;

(d) Address new privacy risks or technologies.

12.2 Notification of Changes

When we make material changes:

(a) We will update the “Last Updated” date at the top of this Policy;

(b) We will notify you via email to your registered address;

(c) We will display a noticable link on the Platform;

(d) For significant changes, we may require re-acceptance before continued use.

12.3 Continued Use

Your continued use of the Platform after changes take effect constitutes acceptance of the revised Privacy Policy. If you do not agree with changes, you must stop using the Platform and may close your account.

12.4 Review Regularly

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

13. CONTACT US
13.1 Privacy Questions and Concerns

For questions, concerns or requests regarding this Privacy Policy or our data practices:

Compliance Officer & Grievance Officer

Email: compliance@ipronline.com
Address: Rah Legal Knowledge Process Private Limited, Raheja Plaza-I, 201 A, LBS Marg, Ghatkopar (W), Mumbai – 400086, India
Business Hours: Monday to Friday, 10:00 AM to 6:00 PM IST

13.2 Response Time

We will:

(a) Acknowledge receipt of your inquiry within 24 hours;

(b) Respond substantively within 30 days;

(c) Notify you if we need additional time due to complexity.

14. LEGAL BASIS AND COMPLIANCE
14.1 Compliance Statement

This Privacy Policy is designed to comply with:

(a) Information Technology Act, 2000 and Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011;

(b) Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021;

(c) Digital Personal Data Protection Act, 2023 (when applicable);

(d) Consumer Protection Act, 2019 and Consumer Protection (E-Commerce) Rules, 2020;

(e) Any other applicable Indian data protection laws and regulations.

14.2 Reasonable Security Practices

As required by law, we maintain a comprehensive information security program and documented privacy policy. We follow ISO 27001 or equivalent security standards (or are working towards certification).

14.3 Audit and Review

We conduct periodic audits and reviews to ensure:

(a) Compliance with this Privacy Policy;

(b) Effectiveness of security measures;

(c) Adherence to data protection laws;

(d) Continuous improvement of privacy practices.

END OF PRIVACY POLICY

Application Delays & Complexity

Trademark Application Delays & Complexity

Lack of Access to IP Expertise

Expert resources and legal professionals

IP Dispute Pains & Losses

Avoid costly disputes

Inefficiencies of Manual Work

Our platform eliminates the need for physical paperwork

Help Center

Find quick answers

Download E-Book

IP Asset Builder

Insights

Real stories & sharp insights

Success Stories

Coming Soon