Legal
Privacy Policy
Last updated: 26 April 2026 · Effective: 1 May 2026 · Governed by the laws of India
Iura Technologies Pvt. Ltd. ("Iura", "we", "our") is committed to protecting the privacy of students, law schools, and law firms who use our platform. This policy explains what data we collect, why, and how you can control it.
1. Overview
Iura Technologies Pvt. Ltd. ("Iura", "we", "our") is committed to protecting the privacy of students, law schools, and law firms who use our platform. This policy explains what data we collect, why, and how you can control it.
This policy applies to all users of iura.in and associated services. It should be read alongside our Terms of Service.
2. Data we collect
What we collect from students
Name, email address, law school, year of study, and LinkedIn profile (optional). Simulation responses, task submissions, scores and feedback. Profile preferences and notification settings.
What we collect from law schools
Institution name, coordinator contact details, and cohort completion data aggregated at the institution level.
What we collect from firms
Firm name, contact details of the talent or training team, simulation content uploaded to the platform, and recruiter search and shortlisting activity.
We also collect usage data automatically: pages visited, time spent, device type, and IP address (anonymised after 30 days).
3. How we use your data
- →Delivering simulation experiences and tracking your progress
- →Generating your skills profile and certificates of completion
- →Sending notifications you have opted into (feedback, achievements, nudges)
- →Where you have consented, sharing your profile with partner law firms for recruitment purposes
- →Improving the platform through aggregated, anonymised analytics
- →Communicating service updates and policy changes
We do not use your data to train third-party AI models. AI feedback on your simulation submissions is processed via an API and your responses are not retained by the AI provider after feedback is generated.
4. Sharing your data
We share personal data only in the following circumstances:
- →With partner law firms — only if you have explicitly opted in to employer profile visibility. You can turn this off at any time in your account settings.
- →With your law school — aggregated completion data only; your individual scores are never shared without your consent.
- →With service providers — our hosting provider (AWS, India region), email delivery service, and payment processor. All are bound by data processing agreements.
- →If required by law — in response to a valid court order or regulatory requirement under Indian law.
We do not sell your personal data. We do not share it with advertisers.
5. Data retention
We retain your account data for as long as your account is active. If you delete your account, we delete your personal data within 30 days, except where we are required to retain it by law.
Anonymised, aggregated performance data is retained indefinitely to improve the platform.
6. Your rights
Under the Digital Personal Data Protection Act, 2023 ("DPDP Act"), you have the right to:
- →Access the personal data we hold about you
- →Correct inaccurate or incomplete data
- →Erase your data (subject to legal retention obligations)
- →Withdraw consent for employer profile visibility at any time
- →Nominate a person to exercise these rights on your behalf
- →Raise a grievance with our Data Protection Officer
To exercise any of these rights, email privacy@iura.in from your registered email address. We will respond within 30 days.
7. Cookies
We use strictly necessary cookies to keep you logged in and remember your preferences. We use analytics cookies (first-party only) to understand how users navigate the platform. We do not use advertising cookies or third-party tracking pixels.
You can disable analytics cookies from your account settings. Strictly necessary cookies cannot be disabled without breaking the service.
8. Security
We use industry-standard encryption (TLS 1.3) for all data in transit. Data at rest is encrypted using AES-256. Access to personal data is restricted to employees who need it to perform their job, and all access is logged and audited.
If you discover a security vulnerability, please report it responsibly to security@iura.in.
9. Minors
Our platform is intended for users aged 18 and above. If you are under 18, please do not create an account. If we become aware that we have collected data from a person under 18, we will delete it promptly.