Hexx Chamber
Privacy policy
Last updated 8 October 2026.
Hexx Chamber is an app for enrolled advocates in Delhi NCR. This policy says what we keep, where, why, and how you remove it. It follows the Digital Personal Data Protection Act, 2023.
What we keep on our servers
- How you sign in. We keep a keyed hash of your sign-in email, not the address itself. Sign-in codes are sent by email.
- Your profile. Your name, enrolment number and date, Bar Councils, and, if you add them, your address, chamber address and its court, mobile number, email, bar association, qualifications and practice areas. These are the particulars the Bar Council of India Rules allow on an advocate's profile.
- Your diary. Your cases, dates, notes and roles, so you can restore them on a new phone.
- Verification. If you send a photo of your enrolment certificate or Bar ID card, we keep it only until we have reviewed it, then delete it. We keep the result (for example "Matched on the Delhi roll").
- Network. Questions and replies you post (seen by verified advocates), requests you post (court, date, the kind of work and the matter category; no party names or case numbers), and reports you make.
- Your phone. A notification token, so we can send the alerts you asked for, and your phone's public encryption key.
- Chamber. If an advocate adds you to their chamber as a Junior, Clerk or Intern: your name, an optional mobile number, the hearings given to you with the advocate's short note, and what you enter for them (the times you mark, the result and the next date). The advocate sees these; members see only the hearings given to them, never the advocate's diary or notes. The next date you enter goes into that advocate's diary with your name.
- Attendance in a chamber. When a Junior, Clerk or Intern marks attendance, we keep the time and where their phone was at that moment; the advocate who heads the chamber sees both. The place is deleted after 30 days; the mark stays in that advocate's register. The advocate may also save where the chamber is, from their phone, until they change or clear it. We read location only at those moments, never in the background.
What we cannot read
- Case references in requests. They are encrypted on the requesting advocate's phone and can be opened only on the phone of the advocate who accepts.
- Chat messages and photos between two advocates on a request are encrypted on their phones. We store only the encrypted text and photos, and delete both 30 days after the request was accepted, or at once if it is withdrawn or either account is deleted.
- Order-sheet photos sent in a chamber are encrypted on the member's phone and can be opened only on the phones of the advocate who gave the hearing. We delete them 30 days after they were sent, or at once if that advocate's account is deleted.
What stays only on your phone
- Order-sheet photos you keep with a hearing in your diary. They are never uploaded. A photo you send in a request chat is encrypted on your phone first (see above).
- "Say the date" uses your phone's own speech recognizer; we receive only the date it heard, never the audio.
Public court records
We read the Delhi High Court's public cause lists to find your matters and to tell you what changed. Those lists name advocates and parties. We use them only for the advocates whose diaries hold those matters.
Who processes it, and where
- Cloudflare hosts our servers, database and file storage. Its servers may be outside India.
- Our server in India (Hostinger) reads the public cause lists and runs the name search during sign-up.
- Resend delivers sign-in emails.
- Google Firebase Cloud Messaging delivers notifications. Notifications carry case numbers and court numbers, never party names.
We do not sell data, show advertising, or use analytics or tracking.
Who can see your profile
Only signed-in advocates whose enrolment is verified. No client can see anything, and no profile is public or on search engines.
Your rights
- See and export: Profile › Data and privacy › Export my diary (CSV).
- Correct: Profile › My profile.
- Erase: Profile › Data and privacy › Delete my account. See how to delete your account.
- Withdraw consent by deleting your account. Alerts can be turned off any time.
How long we keep it
Until you delete your account. After deletion your data is removed from our servers at once and from backups within 30 days.
One exception: attendance marks in a chamber are that chamber's record. They stay in the advocate's register under your name and role as they were when you marked, also after you delete your account; their places are deleted at once when you delete it, and in any case 30 days after each mark (from backups within 30 days more).