Privacy Policy
QuarterStone (“the App”) is a private, internal-use mobile application made by Economic Laws Practice (“ELP”, “we”, “us”, “our”) for use solely by authorised ELP staff, partners, and contractors. This policy describes what information the App collects, how it is used, and the rights you have over it.
1. Information we collect
1.1 Account information
- Your full name, email address, and ELP user ID.
- Your role, designation, and practice-area assignments within the firm.
- Sign-in session token (a secure HTTP cookie scoped to ELP’s servers).
1.2 Device information
- A push-notification token issued by Firebase Cloud Messaging (Google) or Apple Push Notification service. This token is opaque and cannot identify your device outside of Google’s/Apple’s systems.
- Your device’s operating system version (Android only, for crash and compatibility purposes).
1.3 App-generated content
- Time entries, task updates, ticket comments, calendar events, support requests, and similar work product that you create or edit in the App.
- All such content is stored on ELP’s private servers and is treated as confidential firm/client material.
1.4 Calendar (optional, with your permission)
If you have linked your Outlook account on the firm’s web platform, the App displays calendar events from that account. Calendar data is read-only on the App side and is not modified or shared further.
1.5 We do not collect:
- Photos, videos, or files from your device.
- Your contacts.
- Your location (precise or approximate).
- Microphone or camera input.
- Browsing history outside the App.
- Health, fitness, or biometric data.
- Financial or payment data on the device.
2. How we use the information
- Authenticate you and keep you signed in.
- Show you the matters, tasks, calendar events, tickets, and notifications relevant to your role.
- Deliver push notifications (e.g. task assigned, leave approved, meeting reminder).
- Operate, maintain, and improve the App.
- Comply with the firm’s internal recordkeeping and audit obligations.
We do not use your information for advertising, tracking across services, or any commercial purpose outside of ELP’s internal operations.
3. How we share information
ELP does not sell, rent, or trade your personal information.
The App relies on the following processors who receive limited data on our behalf:
| Processor | Data shared | Purpose |
|---|---|---|
| Firebase Cloud Messaging (Google LLC) | Opaque device push token only | Deliver push notifications |
| Apple Push Notification service (Apple Inc.) | Opaque device push token only | Deliver iOS push notifications |
| Microsoft Azure / Microsoft Graph | Your work email, when you initiate Outlook sign-in | Two-way calendar sync |
All other data — matters, time entries, tasks, tickets, etc. — is stored on infrastructure controlled by ELP and is not shared with any third party.
We may disclose information if required by law, regulation, valid legal process, or to protect the rights, property, or safety of ELP, our clients, or our staff.
4. Data retention
- Account data is retained for as long as you are an active ELP user, plus the period required by professional, regulatory, and tax recordkeeping obligations applicable to a law firm in India.
- Push tokens are retained until your device unregisters, you log out, or the token is invalidated by Google/Apple. Stale tokens are pruned automatically.
- App-generated content follows the firm’s record-retention policy applicable to the underlying matter or engagement.
5. Security
- All traffic between the App and ELP servers uses TLS (HTTPS).
- Session cookies are stored on the device using each platform’s secure native storage (Android Keystore / iOS Keychain).
- Access to firm data is gated by role-based access control (RBAC) on the server. The App enforces the same rules on screens and actions.
- We follow industry-standard practices for credential storage, encryption-in-transit, and access logging on our backend.
No system is perfectly secure. Please report any suspected security issue to ELP IT immediately.
6. Your rights
You may at any time:
- Access the personal information we hold about you.
- Correct inaccurate information.
- Request deletion of your account and associated personal information, subject to legal and regulatory record-retention obligations.
- Withdraw consent for optional integrations (e.g. calendar sync).
To exercise any of these rights, contact ELP IT at the address below.
7. Children
The App is intended for adult professional use only and is not directed to or designed for anyone under 18.
8. International transfers
Push-notification tokens are processed by Google and Apple on infrastructure that may be located outside India. By using the App, you consent to this limited processing. All other data is processed and stored on infrastructure controlled by ELP.
9. Changes to this policy
We may update this policy from time to time. Material changes will be announced inside the App or by email. The “Last updated” date at the top of this page reflects the most recent revision.
10. Contact
For privacy questions, requests, or complaints relating to this App:
- Economic Laws Practice
- 9th Floor, Mafatlal Centre, Nariman Point, Mumbai 400 021, India
- it@elplaw.in
- Web
- elplaw.in
This App is a private internal tool of Economic Laws Practice. It is not affiliated with, endorsed by, or related to any other “QuarterStone” branded product or service.