Privacy Policy

Chambers by Runchambers has created this privacy statement to demonstrate our commitment to protect your privacy and to fully disclose what information we collect and how we use it.

At Chambers by Runchambers (hereinafter referred to as “Chambers”, “we”, “us” or “our”) we understand the need for privacy and respect your privacy rights. Chambers is operated by Kalpavriksha Partners LLP, a limited liability partnership registered in India with its registered office at H. No. 2015/13, Bhiwani, Bhiwani, Bhiwani, Haryana, India, 127021. This statement covers our website at https://runchambers.com, the Chambers application at https://app.runchambers.com, and the Google Cloud project runchambers-production-app (project number 338340936301) through which Chambers accesses Google APIs. Chambers operates in India and is governed by the laws of India.

Any personal information you provide to us including and similar to your name, address, telephone number and e-mail address will not be released, sold, or rented to any entities or individuals outside of our organisation except as noted below.

Chambers is the Data Fiduciary with respect to your Personal Data. This Privacy Statement describes the types of Personal Data we collect about you, how we may use that data, with whom we may share it and the rights you have regarding our use of that data. This Statement also describes the measures we take to protect the security of the Personal Data, how long we retain it and how you can contact us to exercise your rights.

If you connect a Google account to Chambers, Section 2 sets out exactly which Google user data we access, and how we use, share, protect, retain and delete it.

Chambers, the publisher of this website (including its subsidiaries and affiliates), collects and uses the Personal Data that you choose to provide to us, together with the limited technical data described in Sections 6 and 7. Visitors are able to browse the website without disclosing any personal information.

A visitor to the website may choose to provide limited Personal Data as required in order to register for, or enquire about, certain services. Once provided, the information will only be used for the specific service(s) and purposes described in this statement.

In addition to data you provide directly, Chambers accesses certain data from your Google account only when you choose to sign in with Google or connect Google Calendar and grant permission on Google’s consent screen. That data is governed by Section 2, Google User Data.

1.1 How and when we collect your Personal Data

We collect your Personal Data when you:

• Visit our website or use the application, including when you register, create a workspace, upload documents, create tasks or run searches. When you visit our website or use the application, we also automatically collect certain technical data through cookies and server logs (see Sections 6 and 7).
• Contact us through the “Contact Us” form on our website, by email, by phone or through any other means.
• Communicate with us through social networking websites such as Instagram, LinkedIn, Facebook or X.
• Sign in with Google or connect Google Calendar and grant permission on Google’s consent screen (see Section 2).
• Are invited to a workspace. When a colleague invites you, they give us your name and email address so that we can send you the invitation.

We may also receive data about you from third parties: from Google when you sign in with Google, and from social media platforms (e.g., Instagram, LinkedIn, Facebook and X) when you interact with our pages there. In such cases, we ensure that the proper legal basis and/or prior consent is in place before collecting such data. It is important to note that you have control over your access and consent for each of these platforms and companies. You can revoke consent at any time if you choose not to have the data fiduciary process and share your data.

1.2 Legal basis to collect your Personal Data

We will only collect, process, use or store your Personal Data if we have valid and lawful basis/reasons to do so. Your Personal Data may be processed by us based on reasons derived from the following factors:

1.2.1 Consent. We collect and process your Personal Data when you have given us clear and informed consent for a specific purpose. For example, we rely on your consent when:

• You sign up to receive marketing emails or newsletters.
• You create a user account.
• You sign in with Google, or connect Google Calendar, and approve the requested permissions on Google’s OAuth consent screen.

If you do not wish to receive such notifications, you may withdraw your consent at any time by emailing us at hello@runchambers.com.

1.2.2 Legitimate Use. We may also process your Personal Data without your explicit consent when it is necessary for legitimate uses as defined in the applicable laws, and where such processing does not override your fundamental rights and freedoms. This includes, but is not limited to:

• Fulfilling contractual obligations such as providing the service and customer support
• Detecting and preventing fraud or security threats
• Improving our products, website, and user experience
• Complying with applicable laws and responding to lawful requests

We always ensure that such use is reasonable, fair, and in line with your expectations as a user of our platform.

This section describes what Google user data Chambers accesses, how we use it, who we share it with, how we protect it, and how long we keep it. It is provided to meet the Google API Services User Data Policy, the Google Workspace API User Data and Developer Policy, and their Limited Use requirements.

Connecting Google is optional. You can use Chambers with an email address and password and never connect a Google account. Chambers only obtains Google user data after you choose to sign in with Google or connect Google Calendar, and approve the requested permissions on Google’s OAuth consent screen. You may decline any permission, and you may withdraw permission at any time as described in Section 2.6.

2.1 What Google user data we access

Chambers requests the narrowest permissions (“scopes”) that support each feature. We request the following scopes and no others:

Chambers does not read, list, change or delete any other event on your calendars, does not access any calendar other than your primary calendar, and only writes to your calendar when you ask it to. We request offline access (a refresh token) so that Chambers can add an event when you click, without asking you to sign in to Google again each time.

Chambers does not access your Google password, your Google Account security settings, payment instruments held by Google, your Gmail, Google Drive or Google Contacts, or any Google product or scope not listed above.

2.2 How we use Google user data

We use Google user data only to provide the user-facing features you have asked for:

• Sign-in and account creation. Your Google account identifier, email address, name and profile picture are used to create your Chambers account, sign you in, keep the account secure and display your identity in the product. Your profile picture is displayed directly from Google; we do not copy it to our servers.
• Add a task to Google Calendar (ChamberFlow, Task Manager). On a task’s page you can choose to add the task to your Google Calendar. Chambers creates one event on your primary calendar using the title you enter (pre-filled with the task title), the task description, a link back to the task in Chambers, the date and time you choose (India Standard Time) and an on-screen reminder. The task’s creator and assignees are pre-selected as guests and you can add others; Google emails each guest an invitation. We store the event’s ID, its link, the organiser and the guest list so that the task page can show the event and you can resend invitations.
• Quick reminders (ChamberFlow). From the sidebar or the calendar page you can create a reminder event on your primary calendar with a title, date, start and end time and, if you wish, guests chosen from your workspace or typed in by you. Chambers does not store these events. It remembers the email addresses you type so that you can pick them again next time.
• Updating invitations. When the organiser of a task’s event clicks “Send/update invitations”, Chambers updates that event’s guest list to match the task’s current creator and assignees, and Google notifies the guests.
• Support. If you raise a support request, an authorised member of our team may, with your consent, access the minimum Google user data needed to resolve it.
• Security and legal compliance. We may process Google user data where strictly necessary to detect abuse, prevent fraud and comply with Indian law.

We do not use Google user data for any of the following:

• advertising of any kind, including personalised, retargeted or interest-based advertising;
• selling, renting or licensing data to anyone, including data brokers and information resellers;
• credit, lending, insurance, employment or eligibility decisions;
• building general-purpose databases or data products;
• developing, improving or training generalised, non-personalised, foundational or frontier AI or ML models (see Section 2.4);
• any purpose not disclosed in this Privacy Statement.

2.3 With whom we share, transfer or disclose Google user data

We do not sell, rent, trade or licence Google user data, and we do not transfer or disclose it to third parties for any purpose other than the ones described here. Google user data is disclosed only:

• To you and to people you choose within your workspace. The calendar event link, organiser and guest email addresses are shown on the task page to people who can view that task (workspace owners and administrators, and the task’s creator and assignees). Guests you add receive Google’s invitation containing the event details.
• To Google, when Chambers creates or updates an event in your Google Calendar at your request.
• To our hosting and email providers listed below, which process data on our instructions under contract and may not use it for their own purposes.
• Where the law mandates us to do so, in response to a valid legal process or lawful request from an Indian government or judicial authority. We will notify affected users unless legally prohibited.
• To protect rights and safety, where we reasonably believe disclosure is necessary to prevent fraud, abuse or an imminent threat to any person or to the service.
• In a business transfer, as described in Section 5, and only after obtaining your explicit prior consent.

Google user data is never sent to our AI provider, to Indian Kanoon, or to any analytics or advertising service.

Our service providers. These are all the third parties that process personal data for Chambers. The last column shows whether each one can receive Google user data.

We do not currently accept payments online, so no billing or payment provider receives your data. We do not use any third-party error-monitoring, analytics or advertising service. If we add a service provider that processes personal data, we will update this list first.

2.4 Artificial intelligence and Limited Use

Chambers uses AI to power the following features in ChamberVault. Each one works only on documents and questions you provide in Chambers:

• Automatic document tags. After you upload a document, its title and extracted text are sent to OpenAI to suggest tags that help you organise and find it.
• Document summaries. When you ask for a summary of a document, its title and extracted text are sent to OpenAI to write the summary.
• Ask AI. To let you search your documents by meaning, excerpts of the documents you upload (with their titles and matter details, such as matter name, court, case number and client name) are converted by OpenAI into numerical representations (“embeddings”). These are stored in a search database that we host ourselves on our servers in India. When you ask a question, the question and the most relevant excerpts from documents you can already open are sent to OpenAI to write the answer, which is returned to you with its sources.

Our use of AI is subject to the following commitments:

• No Google user data in AI features. None of the features above receive Google user data. Your Google profile, your Google Calendar events and your Google tokens are never sent to OpenAI or to any other AI or ML service.
• No training on your data. Google user data, whether raw, aggregated, anonymised or derived, is never used to create, train, fine-tune, evaluate or improve any foundational, frontier, generalised or otherwise non-personalised machine learning or artificial intelligence model, whether ours or a third party’s.
• No storage with models. Google user data is not stored in, embedded into or persisted alongside any such model, and it is not placed in our search indexes or our embeddings database.
• Our AI provider. We use OpenAI’s paid API platform directly. We do not route requests through any AI gateway or aggregator, and we do not use ChatGPT or any consumer AI product to process your data. Under OpenAI’s API terms, data sent through the API is not used to train OpenAI’s models by default. OpenAI may keep API requests and responses for up to 30 days to monitor for abuse and to provide the service, and then deletes them. We have reviewed OpenAI’s API terms to confirm that its handling of our data is consistent with these commitments.
• AI assistants you connect yourself. Chambers lets you connect your own AI assistant to your workspace with a personal access token (Settings → Connections). An assistant you connect can read the workspace data you can already see, including your name and email address, and only at your direction. It cannot read your Google Calendar events or your Google tokens. You can revoke a token at any time and it stops working immediately.

Limited Use statement. Chambers by Runchambers’ use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

The use of raw or derived user data received from Google Workspace APIs, including the Google Calendar API, by Chambers by Runchambers will adhere to the Google User Data Policy (the Google Workspace API User Data and Developer Policy), including the Limited Use requirements, and such data is not used to develop, improve or train non-personalised AI and/or ML models.

2.5 How we protect Google user data

We treat Google user data as sensitive personal data and apply the following controls:

• Encryption in transit. All traffic between your browser and Chambers, and between Chambers and Google APIs, uses HTTPS with TLS 1.2 or higher. Browsers are instructed to connect to Chambers only over HTTPS, and our sign-in cookies are sent only over encrypted connections.
• Encryption at rest. Uploaded files and database backups are stored in Amazon S3 in Mumbai and encrypted at rest with AES-256. Backups are held in a private storage bucket that blocks all public access and refuses unencrypted connections.
• A private database. Google user data is stored only in our production database, on AWS infrastructure in Mumbai. The database runs on a private network and cannot be reached directly from the internet.
• Protection of OAuth tokens. Your Google access and refresh tokens are used only to create or update calendar events you ask for. They are never sent to your browser, never written to our application logs, never included in AI requests or in data available to connected AI assistants, and never shared with any third party.
• Least privilege. We request Google’s narrowest calendar permission, which only covers events that Chambers itself creates, and Chambers writes only to your primary calendar. Our Google sign-in uses PKCE to protect the authorisation step.
• Restricted human access. Access to production systems is limited to a small number of authorised personnel, and server access requires a cryptographic key rather than a password. Our staff do not read your Google user data unless you ask us to for support, it is necessary for security purposes such as investigating abuse, or it is required to comply with law.
• Limited visibility. Google user data is linked to your user account. Calendar event details are shown only to you and to people who can view the related task.
• Vendor assurance. Every service provider that stores or processes data on our behalf is reviewed before we use it and is bound by contractual confidentiality and security obligations.
• Incident response. We will notify affected users, and the authorities required under Indian law (including the Data Protection Board of India), without undue delay after becoming aware of a personal data breach.

2.6 Retention and deletion of Google user data

We keep Google user data only as long as needed to provide the feature you asked for, and delete it on the schedule below or on your request, whichever is earlier.

Events that Chambers has already created in your Google Calendar belong to you. They stay in your calendar, and in your guests’ calendars, until you or they delete them in Google Calendar; disconnecting Google or deleting your Chambers account does not remove them.

How to disconnect Google or delete your data

• Revoke access from Google. Visit https://myaccount.google.com/connections, select Chambers and remove its access. From that moment Chambers can no longer access your Google account.
• Ask us to delete your Google user data. Email hello@runchambers.com from the email address on your account. We will delete your stored Google tokens and Google profile data within 30 days and confirm in writing.
• Delete your Chambers account. Email hello@runchambers.com. Deletion is completed within 30 days and confirmed in writing.

We may keep a minimal record (for example, the fact and date of deletion) where required by Indian law. Such records contain no Google user content.

If you correspond with us via email, the postal service, or other form of communication, we may retain such correspondence and the information contained therein and use such to respond to your inquiry and/or notify you of Chambers events, news or other Chambers-related opportunities. If you do not wish to receive such notifications, you may express your preference to not be so contacted by emailing us at hello@runchambers.com. Google user data is never used to build marketing lists.

Our website may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy statement. You should exercise caution and look at the privacy statement applicable to the website in question.

Your personal information may be transferred to:

• Another entity, either an affiliated entity or a service provider, on a need-to-know basis. Where our service providers need to have access to your personal data, we will (1) select providers who respect your privacy and comply with data protection laws at any time; (2) only give them access to the data they need to perform their services; (3) ensure that they will only use the data for the purposes agreed in our contract with them; (4) ask them to delete or return any personal data when we stop using their services.
• In the context of merger and acquisition, with our Affiliates or new owner(s). We may transfer your data to another entity (either an affiliated entity or an unrelated third party) in connection with a merger, reorganisation, dissolution or similar corporate event. If such a transfer were ever to occur, the acquiring entity’s use of your personal information will still be subject to this Privacy Policy, including the Limited Use commitments applying to Google user data. Google user data will be transferred as part of such an event only after we have obtained your explicit prior consent.
• With law enforcement and other authorities, or other parties to litigation to: (i) comply with a legal process, such as a court order, subpoena or search warrant, government / law enforcement investigation or other legal requirements; (ii) assist in the prevention or detection of crime; (iii) protect the safety of any person; and (iv) establish, exercise or defend legal claims.

5.1 Government and Legal Disclosures

We will not disclose your personal information which we have collected through this website, unless the law mandates us to do so.

Cookies are pieces of data that a website transfers to a user’s hard drive for record-keeping purposes.

Our website (runchambers.com) does not set cookies and does not use analytics, advertising or tracking tools. Its pages load fonts from Google Fonts, and our FAQ page loads a styling script from a public content delivery network. These providers receive your IP address and browser details in order to deliver those files. When you submit the contact form, the details you enter are sent to our servers.

The Chambers application (app.runchambers.com) uses only the cookies it needs to work:

The application also uses your browser’s local storage to remember interface preferences (whether the sidebar is collapsed, and the highlight colour you last used on a document). This information stays on your device. The application loads fonts from Google Fonts and open-source interface libraries from jsDelivr, which receive your IP address and browser details in order to deliver those files.

We do not use advertising, analytics or tracking cookies. You have many choices with regards to the management of cookies on your computer. All major browsers allow you to block or delete cookies from your system; if you block the cookies listed above, you will not be able to sign in to the application. To learn more about your ability to manage cookies, please consult the privacy features in your browser.

Google user data obtained through Google APIs is never sent to any analytics or advertising service.

Like many other websites, our servers record basic technical information about each request, such as your IP address, browser type, the page or address requested and the date and time. We use this information only to operate and secure Chambers: to diagnose problems with our servers, to administer the website and application, and to detect and prevent abuse. These server logs are rotated automatically and are not used for advertising or profiling.

We keep your Personal Data only for as long as it is needed to provide you with our services and for legitimate business purposes, and then delete it on the schedule below.

• While you use Chambers. Account data and workspace content are kept for as long as your account and your workspace are active.
• When either party terminates. If you or we terminate your contract or your use of Chambers (for example, you close your account, your firm ends its subscription, or we end the service in accordance with our Terms), we delete your Personal Data from our live systems within 30 days of termination. When a workspace’s use of Chambers ends, we delete that workspace’s content within the same 30 days.
• When you leave a workspace that continues. Your account data is deleted within 30 days of your account being closed. Content you created in a firm’s workspace, such as documents, tasks and notes, belongs to that workspace and stays with it.
• Deleted items. Documents, folders and tasks you archive are permanently deleted 90 days after they are archived.
• Research history. Saved searches and Ask AI history are kept for the life of the workspace and are deleted with it, or earlier on request.
• Enquiries. Details submitted through our website’s contact form are kept for as long as needed to respond to and follow up on your enquiry, and are deleted within 30 days of your request.
• Backups. Copies of deleted data in our encrypted backups are deleted automatically when the backup expires, no later than 180 days after the backup was made.
• Legal obligations. Where Indian law requires us to keep certain records for longer, or where we need them to establish, exercise or defend legal claims, we keep only those records and only for the period required.

At the end of the retention period, your Personal Data will be deleted completely or anonymised so that it can be used in a non-identifiable way for statistical and analytical purposes.

Should you require your information to be updated, amended or deleted from our records, please contact hello@runchambers.com outlining your requirements. We complete deletion requests within 30 days and confirm in writing.

Retention and deletion of Google user data is governed by the specific periods set out under Section 2.6, Retention and Deletion of Google User Data.

As a business-to-business organisation, we do not knowingly collect information from children under the age of 18. Online registration and website usage is designed for adults who are professionally engaged in the businesses we serve.

We have implemented and maintain appropriate administrative, technical and organisational measures to ensure a level of security that is fitting to protect any personal data provided to us. We understand that as effective as our security measures are, no security system is impenetrable. Despite that, we maintain security measures in accordance with applicable data protection laws and industry practices to protect the Personal Data you provide to us against accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data during transmission, storage, and processing. The specific controls we apply to Google user data are set out under Section 2.5, How We Protect Google User Data.

10.1 The Inherent Risk in Using the Internet

While we do our best to protect your personal information as described above, we cannot guarantee the security of any information that you transmit to us and you are solely responsible for maintaining the secrecy of any passwords or other account information.

We want you to be in control of your Personal Data and you have certain rights with regard to the Personal Data which we process as described below.

1. Right to access personal data. Request access to the personal data we process about you.

2. Right to correction and erasure of personal data. Request that we correct, complete or update your personal data where it is inaccurate, incomplete or needs amendment. Request that we erase certain of your personal data:

• That we no longer need for the purpose it was collected for.
• That we process based on the lawful basis of consent, and you withdraw your consent.

There are situations where we will be unable to delete your data, for example when:

• It’s still necessary to process the data for the purpose we collected it for.
• We have a legal obligation to keep the data.
• We need the data to establish, exercise or defend legal claims. For example, if there’s an unresolved issue relating to your account.

3. Right of grievance redressal. If you ever have a concern or complaint about how we’re handling your personal data, or if you feel your privacy rights have not been respected, you have the right to raise a grievance with us and reach out to us on hello@runchambers.com. We are committed to resolving your concern within a reasonable time period. Before taking your issue to the Data Protection Board, we request that you first give us a chance to address and resolve it.

4. Right to nominate. You have the right to nominate another individual, such as a parent, lawful guardian, or any trusted person, to act on your behalf in case you are unable to manage your account due to incapacity or death. This nominated person will be able to exercise your data rights, including accessing, correcting, or deleting your personal data, in accordance with applicable laws and our privacy practices.

5. Right to withdraw consent. You have the right to withdraw your consent for the processing of your personal data at any time. If you no longer wish for us to use your data for a specific purpose (such as receiving communications, or any other consent-based processing), you can notify us and we will stop processing your data for that purpose. Withdrawal of consent will not affect the lawfulness of data processing done prior to your withdrawal. In some cases, withdrawing consent may limit your access to certain services or features.

If you want to exercise any of your above-mentioned rights, or have any questions on our Privacy Statement, or complaints about our handling of your personal data, you can contact us at hello@runchambers.com.

Grievance Officer: Hemant Jangra, Chief Executive Officer, Kalpavriksha Partners LLP, H. No. 2015/13, Bhiwani, Bhiwani, Bhiwani, Haryana, India, 127021, hemant@runchambers.com. We aim to acknowledge complaints within 48 hours and resolve them within 30 days.

We are committed to answer your questions within the reasonable time-period. Any delay in the resolution time shall be proactively communicated to you.

If you are not satisfied with our response or if you consider your privacy rights have been breached, you may file a complaint with the Data Protection Board of India.

Chambers complies with the Digital Personal Data Protection Act, 2023 and the Rules made thereunder. Access to the information contained on this website is provided by Chambers to its members and non-members as a service to advocates, law firms and other legal professionals. References herein to any third-party product, process or service do not constitute or imply endorsement or recommendation by Chambers.

While Chambers makes every effort to present accurate and reliable information on this website, Chambers does not approve or certify such information nor does it guarantee the accuracy, completeness, efficacy, timeliness or correct sequencing of such information. Use of such information is voluntary and reliance on it should only be undertaken after an independent review of its applicability, accuracy, completeness, efficacy and timeliness with regard to your specific needs and uses.

Chambers (including its employees and agents) is not responsible for, and expressly disclaims all liability for, damages of any kind arising out of use, reference to or reliance on the information available through this website. No approvals, recommendations, endorsements, guarantees or warranties, including, but not limited to, any express or implied warranties of merchantability or fitness for any particular use or purpose of products or services named on this website are made by Chambers.

This Statement is written in English (US) and supersedes any other translated version of the document or the meaning it may imply.

We may make changes to this Privacy Statement from time to time and will update this statement when our practices change. The date this Privacy Statement was last updated appears at the top of the document and reflects the current version. You can check our platform on a regular basis to see if there have been any recent changes to this Privacy Statement. If we intend to access a new category of Google user data or use Google user data for a new purpose, we will update this statement and obtain your consent before doing so.

By using any aspect of Chambers and its subsidiaries and affiliates, products or services, you signify your acceptance of the terms of the Chambers Privacy Policy. If you do not agree to the terms of this Privacy Policy, please do not use any of Chambers’s products and/or services and exit the Chambers website immediately.