A. Information You Provide Directly

• Full name, email address, mobile number, and permanent/business address
• PAN card, Aadhaar number, and other government-issued identity documents (required for KYC and tax filings)
• Business details: company name, directors' information, GSTIN, authorized signatory data
• Financial data: bank account details, Form-16, salary slips, investment proofs, capital gains statements
• Documents uploaded to our secure portal for ITR, GST, or company registration purposes
• Messages, queries, and feedback sent via email, chat, or WhatsApp

B. Automatically Collected Data

• IP address, browser type, device model, and operating system
• Pages visited, time on site, click patterns, and referral sources
• City/region-level geolocation derived from IP
• Cookies, pixel tags, and web beacons (see Section 5)

C. Data from Third Parties

• Income Tax e-Filing Portal, GST Portal (GSTN), MCA21, and Trade Marks Registry — for processing your service requests
• Payment processors (Razorpay, PayU) for transaction verification
• Google / LinkedIn (if you use social login)

We process your personal data only for legitimate, clearly defined purposes:

• Service Delivery: Filing your ITR (ITR-1 to ITR-7), GST registrations & returns (GSTR-1, GSTR-3B, GSTR-9), TDS returns (24Q/26Q), company registrations, trademark filings, and ROC compliance
• Account Management: Creating and maintaining your TaxGyani client account and service dashboard
• Compliance Deadlines: Sending automated reminders for ITR due dates, GST return deadlines, and ROC filing schedules
• Customer Support: Responding to queries via email, phone, WhatsApp, and live chat
• Billing & Payments: Processing invoices, refunds, and payment gateway transactions
• Marketing (with consent): Tax tips newsletter, promotional offers, compliance alerts
• Legal Obligations: Complying with Indian laws, Income Tax Act, Companies Act, and any regulatory/court directives
• Fraud Prevention & Security: Detecting unauthorized access, verifying identities, and preventing misuse
• Analytics: Improving platform performance using aggregated, anonymized usage data

We do not share your personal data with unrelated parties. Disclosure occurs only in the following scenarios:

Service Partners & Vendors

We engage trusted third-party service providers under strict data processing agreements. These include:

• Cloud hosting (AWS/Google Cloud — data stored in India wherever feasible)
• Payment gateways: Razorpay, PayU (PCI-DSS Level 1 compliant)
• Communication: Twilio (SMS/OTP), email delivery services
• Analytics: Google Analytics (anonymized data only)

Government Portals (On Your Behalf)

For the services you hire us for, we submit your authorized documents to Income Tax e-Filing Portal, GST Portal, MCA21, TRACES, and the Trade Marks Registry. This is done strictly under your authorization.

Legal & Regulatory Compliance

We may disclose your information if required by Indian law, a court order, Income Tax notice, or regulatory direction — or to protect the rights and safety of TaxGyani, its clients, or the public.

Business Transfers

In the event of a merger, acquisition, or business restructuring, your data may be transferred as part of the transaction. We will provide prior notice and an opportunity to opt out before your data is governed by a new privacy policy.

We use cookies and similar technologies to enhance your experience, understand how our platform is used, and serve relevant information:

You may manage cookies via your browser settings. Disabling essential cookies may affect your ability to log in or use certain service features. For marketing cookies, use the consent banner displayed on your first visit.

Our emails may use web beacons (1×1 pixel images) to measure open rates. You can disable this by turning off automatic image loading in your email client.

We take data security seriously and implement multiple layers of protection to safeguard your personal and financial information:

• 256-bit SSL/TLS encryption for all data in transit via taxgyani.com
• AES-256 encryption for sensitive data stored at rest (PAN, Aadhaar, bank details)
• ISO 27001 certified information security management processes
• Role-based access controls — CA teams only access data relevant to their assigned clients
• Multi-factor authentication for all internal staff accessing client systems
• Regular vulnerability assessments and annual penetration testing
• Secure document vault with end-to-end audit trails for all uploaded files
• Employee confidentiality agreements and regular data privacy training

We retain personal data only as long as necessary to fulfil the purposes for which it was collected or as mandated by Indian law.

After the applicable retention period, data is securely deleted or anonymized in accordance with our internal data destruction procedures.

Under the Digital Personal Data Protection Act, 2023 (DPDPA) and the Information Technology Act, 2000, you have the following rights with respect to your personal data:

• Right to Access: Obtain a summary of personal data we hold about you and the purposes for which it is processed
• Right to Correction: Have inaccurate or outdated data corrected or completed
• Right to Erasure: Request deletion of your data (subject to statutory retention obligations under tax law)
• Right to Withdraw Consent: Revoke marketing consent at any time (via unsubscribe link or by emailing us)
• Right to Grievance Redressal: Raise a complaint with our Grievance/Data Protection Officer (see Section 11)
• Right to Nominate: Designate a nominee to exercise rights on your behalf in case of death or incapacity

To exercise any right, email contact@taxgyani.com with the subject: "Data Rights Request – [Your Registered Mobile/Email]". We respond within 30 days.

Note: Certain rights may be restricted where we are legally required to retain or process data under the Income Tax Act, CGST Act, or Companies Act.

Our website and service communications may contain links to external platforms such as the Income Tax e-Filing Portal, GST Portal (GSTN), MCA21, Trade Marks Registry, and payment gateways. These third-party sites operate under their own privacy policies.

TaxGyani is not responsible for the content, privacy practices, or data handling of any external websites. We encourage you to review the privacy policy of each third-party site before providing your information.

TaxGyani's services are intended for individuals who are at least 18 years of age and legally capable of entering into binding contracts under the Indian Contract Act, 1872.

We do not knowingly collect personal data from anyone under the age of 18. If we become aware that we have inadvertently collected such data, we will promptly delete it. If you believe a minor's data has been submitted to our platform, please contact contact@taxgyani.com immediately.

In accordance with the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000, TaxGyani has designated a Grievance Officer to address privacy-related complaints and data rights requests.

We take all privacy complaints seriously and are committed to resolving them promptly and fairly.

We may update this Privacy Policy periodically to reflect changes in Indian law, our service offerings, or data practices. When material changes occur, we will:

• Update the "Effective Date" at the top of this page
• Send an email notification to all registered TaxGyani clients
• Display a prominent notice on our website for at least 30 days after the change

Continued use of our services after any change takes effect constitutes your acceptance of the revised Policy. If you do not agree with the updated terms, you may request account closure by writing to us.