Privacy Policy
Last updated: 15 October 2026
This Privacy Policy explains what personal data House of Kokila ("Alinea", "we", "us") collects when you use the Alinea platform, why, and what rights you have over it.
1. Who we are
Alinea is operated by House of Kokila, a business registered in Mauritius (BRN I26009581). This policy applies to the Alinea web application and its associated services. For any question about this policy or your data, contact us at contact@alinea.mu.
2. What we collect
When you create an account, we collect: your username and email address, and a securely hashed password (we never store your password in plain text).
Subscriptions are paid by Juice or bank transfer, which we confirm by hand. We keep a record of which firm asked for which period and when it was approved. We take no card payments, so we never see or hold a card number, and nothing renews automatically.
Your firm can also enter a firm profile in Firm Settings, including the attorney's name, address, contact details, and bank details (bank name, account number, IBAN, SWIFT). We store it so it can be used to populate the documents and invoices Alinea generates on your behalf.
When you use Alinea to generate legal documents, we store the information you enter into each document form (for example client names, national identity card numbers, addresses, and case details) so that you can review your matter history, reuse details across documents, and redraft similar documents later without re-entering everything. We also store any address book contacts you save, and a record of VAT invoices you generate (client name and amounts) for your firm's VAT register.
Pupils. If you ask to join the pupil plan, we ask to see proof that you are in pupillage. We look at it to decide, then delete it; we keep only the fact that your account is on the pupil plan and the date the plan ends.
Precedents you send us. From 15 October 2026, practitioners may send us precedents at precedents@alinea.mu to help us add or improve documents. We accept them only with every client detail removed. If one still identifies a person, we delete it and ask for an anonymised copy. We keep the precedents we use for as long as we use them, together with the sender's name and email address so that we can credit the free months the offer gives; ask us and we will delete them.
We do not use analytics, advertising, or tracking scripts of any kind. The only cookie we set is a session cookie that keeps you logged in; your dark/light mode preference is stored on your own device, not sent to us.
3. Why we process this data
To provide the service you're paying for: generating your documents, maintaining your matter history, billing your subscription, and sending account-related emails (password resets, invite codes). Also, where they apply, to check that you are eligible for the pupil plan, and to use the precedents you send us to build Alinea's documents. We do not sell your data, and we do not use it for advertising.
4. Who we share it with
We use a small number of service providers to run Alinea, each of whom processes data on our behalf under their own security and privacy commitments:
- Render (Frankfurt, Germany): hosts the application and the database. All of your data sits here.
- GitHub (United States): stores our nightly database backups, encrypted, for 90 days, and runs the scheduled jobs that apply our retention rule and check that the cause list is up to date.
- Resend (United States): sends account emails (password resets, invite codes), and our own error alerts.
- Cloudflare (United States, with servers worldwide): runs the domain's DNS.
- Teal Host (Teal Host LTD, Mauritius, BRN C23197976): from 15 October 2026, provides the mailbox for contact@alinea.mu and our other addresses, so any message you send us, and our own error alerts, are stored there. Teal Host keeps the mailbox on servers run by Namecheap in the United States, with short-lived backups on Amazon Web Services in Sweden.
- Google (United States): until 15 October 2026, mail sent to contact@alinea.mu was forwarded by Cloudflare to a Gmail mailbox. We delete Alinea's mail from that mailbox once the move is complete.
Where your data is held. The application and the database run in Frankfurt, in the European Union. Before 8 September 2026 they ran in the United States, and the few documents created on early free accounts in August and September 2026 were stored there until the move. That United States copy has since been deleted. GitHub, Resend and Cloudflare are in the United States, and so are the servers on which Teal Host keeps our mailbox; we review those choices as the service grows.
One step happens in Mauritius. The courts' website does not answer requests from outside the country, so each week's cause lists are downloaded and read on our own machine here in Mauritius, and the result is written to the database in Frankfurt. That machine handles the published court lists only, and only while it is working on them. No firm's account or client data is processed there.
Under the Mauritius Data Protection Act 2017, transferring personal data abroad requires that the destination offer adequate protection, or that appropriate contractual safeguards be in place, and we take this into account when choosing providers. We have accepted the written data processing agreements of Render, Resend, Cloudflare and Teal Host. GitHub offers one only on its paid business plans; it holds nothing of yours except backups encrypted with a key it never has, and we intend to move to such a plan.
We do not share your data with any other third party, and we never sell it.
5. Court cause lists
Every week Alinea downloads the cause lists published by the Supreme Court of Mauritius (Family Division), the Intermediate Court (Civil and Criminal) and the Industrial Court, and reads them into our database so that subscribing firms can be told when their own cases are listed.
These lists are published by the courts. They name the parties to each case, and the Intermediate and Industrial lists also name the counsel appearing. This means we hold the names of people who are not our users and who have no relationship with us: litigants, and barristers who do not subscribe to Alinea. We collect nothing beyond what the court has already published, we do not combine it with any other source, and we do not sell it or share it.
Criminal listings are treated more strictly. The Intermediate Court's criminal list, and prosecutions on the Industrial Court's list, name people facing charges. Subscribing firms cannot browse these. A firm sees a criminal listing only where it is acting in that case, or where it searches for a specific name or case number, and a search must be specific enough that it cannot be used to read through the list. The court's own published document remains available to subscribers as the court publishes it.
We keep each week's list for 60 days and then delete it automatically, together with the copy of the published document. If you are named on a court list and want to know what we hold about you, or want it removed, write to us at contact@alinea.mu.
6. Confidentiality of client and case information
We understand that the documents you generate through Alinea may contain information subject to legal professional privilege or client confidentiality. We treat this data with the same care as your account data: it is not reviewed, used, or disclosed by us except as needed to provide the service (e.g. automated processing to generate your document) or as required by law.
7. How long we keep your data
We keep your account and document data for as long as your subscription is running. If it lapses, we delete your firm's data three months after the end of the period you last paid for. We email the firm's owner 30 days before that happens, so you can renew or tell us to keep it. Nothing is deleted while a payment is waiting to be approved. You can also request deletion at any time; see Section 8.
Cause-list data is the one category with a fixed period: it is deleted automatically after 60 days, as described in Section 5. Backups are kept for 90 days and then expire.
8. Your rights
Under the Mauritius Data Protection Act 2017, you have the right to access the personal data we hold about you, request correction of inaccurate data, and request deletion of your data, subject to any legal or contractual reasons we may need to retain it (for example, billing records). To exercise any of these rights, contact us at contact@alinea.mu. We do not currently offer automatic self-service export or deletion, so these requests are handled individually.
9. Contact and complaints
For any question about this policy or to exercise your rights, email contact@alinea.mu. If you believe we have not handled your data properly, you may also contact the Mauritius Data Protection Office.
10. Changes to this policy
We may update this policy from time to time. We'll update the "Last updated" date above when we do; significant changes will be communicated by email to registered users.