To provide our Services we may collect:

• Identity data: full name, date of birth, photograph, PAN, Aadhaar number (masked), passport, voter ID.
• Contact data: postal address, email, phone number.
• Financial & tax data: bank statements, books of accounts, invoices, GST/TDS data, salary slips, Form 16/26AS, ITR history.
• Business data: company/LLP details, MoA/AoA, board resolutions, ROC filings.
• Authentication data: hashed passwords, OTP logs, session tokens.
• Technical data: IP address, device type, browser, log timestamps, cookies.

• To deliver the Services you requested — return preparation, filings, registrations, advisory.
• To verify your identity and comply with KYC and statutory record-keeping rules.
• To raise invoices and collect payments through authorised payment gateways.
• To communicate ticket updates, document requests, filing status and payment receipts via WhatsApp/SMS/email.
• To prevent fraud, maintain security and respond to lawful requests.
• To improve the Platform and our service quality (always on anonymised/aggregated data where feasible).

• Encryption in transit: All connections are protected via HTTPS/TLS.
• Encryption at rest: Documents are stored on Cloudflare R2 with server-side encryption and on Google Drive corporate workspaces with role-based access controls.
• Access controls: Role-based access (Admin / Staff / Vendor / Client). Clients can only see their own files. Two-factor and forced password rotation are enforced for staff.
• Password hashing: All passwords are stored as one-way bcrypt hashes — never in plain text.
• Audit trails: Document uploads, payments and status changes are logged with timestamps and the responsible user ID.
• Backups: Periodic encrypted backups are maintained with limited retention.

Client tax documentation, PAN data and financial records are stored using a dual-storage architecture: (a) Cloudflare R2 object storage for fast, encrypted application access; and (b) a controlled Google Drive corporate workspace for long-term archival. Both backends are under the exclusive control of the Company and are not accessible to other clients of the Platform.

We do not sell or rent your data. We share information only:

• With statutory authorities (Income Tax Department, GSTN, MCA, RoC, etc.) strictly for executing the engagement you instructed.
• With our payment partner Razorpay for processing card/UPI/netbanking payments — subject to their privacy policy.
• With our communication partners Twilio (WhatsApp/SMS) and Resend (transactional email) for sending you notifications.
• With professional advisors, auditors, or insurers under confidentiality.
• Where required by law, court order, or to defend against legal claims.

We retain client data for the period required by the Income Tax Act, Companies Act and the Chartered Accountants’ professional record-keeping rules — typically a minimum of 8 (eight) years from the end of the relevant financial year, or longer where mandated by law. Authentication logs are retained for security auditing purposes. You may request earlier deletion subject to statutory obligations.

• Access, correction and update of your personal data through your account or by writing to us.
• Withdraw consent for non-essential communications.
• Request a copy of your filings and documents.
• Lodge a grievance with our Grievance Officer (see §10).

We use only essential cookies for session management and security. We do not use third-party advertising cookies. Aggregated, anonymised analytics may be used to improve the Platform.

The Platform is intended for users 18 years or older. We do not knowingly collect personal data from minors except as part of a guardian-led tax filing engagement.

In accordance with Rule 5(9) of the IT Rules, 2011, our Grievance Officer can be contacted at:

We may update this Privacy Policy from time to time. Material changes will be notified through the Platform or via email. Continued use of the Platform after such notification constitutes acceptance of the updated policy.