Last updated: 3 November 2026
About this policy
This policy covers the Rhett website and every part of the Rhett workspace, from Chat and Library to Mail and AI Clerk. “Rhett”, “we” and “us” mean Foolscape Technologies Private Limited, Flat No. 308, Mudit Mansion, Pal Link Road, Nandanwan, Jodhpur 342008, Rajasthan, India, which provides the Rhett service. “You” means anyone who visits the site or uses the service.
We follow the Digital Personal Data Protection Act, 2023 (the DPDP Act) and the Information Technology Act, 2000. For your account and usage data, Rhett is the Data Fiduciary and you are the Data Principal.
What we collect
- Account details. Your name, email address, phone number if you give it, organisation, role, plan and the billing information needed to process payments. For Intern Desk, we also collect University ID details to confirm eligibility.
- Workspace content. Documents, notes, emails, calendar entries, case details, research queries and anything else you upload or create in Rhett. This often includes personal data about clients and other people.
- Usage data. Features used, pages visited, device and browser type, IP address, logs and error reports.
- Cookies. Small files that keep you signed in, protect your account, remember your settings and show us how the site is used. You can block cookies in your browser, but parts of Rhett may then stop working.
If you connect a service such as Google Drive, or ask AI Clerk to track a case, we receive the data needed to provide that feature.
Why we use it
- To run your account and provide the features you use.
- To process payments, confirm plan eligibility and send invoices.
- To send service messages, such as hearing alerts, reminders, security notices and policy changes.
- To keep the service secure, prevent misuse and fix problems.
- To improve features, using usage data rather than your workspace content.
- To meet legal obligations, such as keeping tax records.
We do not sell personal data, and we do not use it for third-party advertising.
Consent and lawful basis
We process your personal data with your consent, which you give when you sign up and accept this policy, or for a legitimate use permitted by the DPDP Act, such as meeting a legal obligation. You can withdraw consent at any time, as easily as you gave it. Withdrawal does not affect earlier processing, but we may then be unable to provide the service.
When you upload personal data about other people, such as clients, witnesses or opposing parties, you are responsible for having a lawful basis to do so. Where a firm or company provides Rhett to its people, that organisation decides how its workspace content is processed, and we process it on the organisation’s instructions.
Client-confidential workspace content
Legal work depends on confidentiality. We make these commitments about your workspace content:
- We use it only to provide the service to you.
- We do not sell it.
- We do not use it to train shared AI models that serve other customers.
- Our people access it only when needed to provide the service, such as when you ask for support, or when the law requires it.
Your content stays yours. When you remove it from your workspace, it is removed from the service, subject to the retention section below.
Who we share data with
- Data processors who help us run Rhett, such as hosting, email, payment, AI model and support providers. They act on our instructions under written contracts, must protect the data and may not train their models on your workspace content.
- Services you connect, such as Google Drive.
- Your organisation, if it manages your Team or Enterprise workspace.
- Authorities, when the law or a court order requires it.
- A successor, if Rhett is merged or sold, on terms that keep this policy’s protections.
Storage and security
Storage in Rhett is configurable and compatible with Google Drive. Team and Enterprise customers who need their data on infrastructure they control can add Rhett Data Centre, our on-premise deployment option.
We follow reasonable security practices and procedures as required by the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011. We limit access to personal data to the people and processors who need it. Where personal data is processed outside India, we do so only as the DPDP Act permits.
If a personal data breach affects you, we will inform you and the Data Protection Board of India as the law requires.
How long we keep data
We keep account details and workspace content while your account is active. When you close your account or ask us to erase data, we delete it or make it anonymous within a reasonable period, unless the law requires us to keep it longer, as with billing and tax records. Copies in backups are removed as those backups expire.
Your rights
Under the DPDP Act, you have the right to:
- Access a summary of the personal data we process about you and who we have shared it with.
- Correct, complete or update inaccurate data.
- Erase data we no longer need, unless the law requires us to keep it.
- Withdraw consent at any time.
- Seek grievance redressal from us, and then approach the Data Protection Board of India if you are not satisfied.
- Nominate someone to exercise these rights for you in the event of your death or incapacity.
To use these rights, contact us as described under Grievance Officer below. We may ask you to confirm your identity first. If your organisation manages your workspace, we may refer your request to it.
Children
You must be 18 or older to use Rhett. We do not knowingly process children’s personal data, and we do not track, monitor or target advertising at children. If we learn that a child has given us personal data without verifiable consent from a parent or lawful guardian, we will delete it.
Changes to this policy
We may update this policy as the service and the law change, and we will post the new version here with a new date. If a change materially affects how we use your personal data, we will tell you in advance and, where required, ask for your consent again.
Grievance Officer
Grievance Officer, Foolscape Technologies Private Limited, Flat No. 308, Mudit Mansion, Pal Link Road, Nandanwan, Jodhpur 342008, Rajasthan, India. Email: ask@rhett.legal. Please say that your message is about privacy. We will respond within the time the law requires.