// Legal
Privacy Policy
How we collect, use and protect your information.
Last updated May 2026
01Information We Collect
We collect information you provide when registering or using our services — name, email, phone number, PAN, Aadhaar, and business documents required for service delivery. We also collect usage data, device information, and cookies to improve our platform experience and provide personalised services.
02How We Use Your Information
Your information is used to provide and improve our services, process your service requests, communicate updates about your applications, send relevant compliance reminders, and comply with legal obligations under Indian law. We do not sell your personal data to any third party under any circumstances.
03Document Security
All documents uploaded on our platform are stored securely on AWS S3 with 256-bit server-side encryption. Access is restricted to authorized personnel only. Documents are used solely for processing your service requests and are never shared without your explicit written consent. Accounts are protected by encrypted passwords, optional 2-step login (a one-time code sent to your email), and the ability to sign out of every device. We keep a record of sign-ins and security events (time, IP address and device) for 180 days to protect your account.
06Your Rights (DPDP Act, 2023)
Under India's Digital Personal Data Protection Act, 2023 you have the right to: access a summary of your personal data and how it is used; correct or update it; have it erased; withdraw consent; nominate someone to exercise these rights for you; and have your grievance addressed. Much of this is self-serve in your dashboard: Account → Profile to correct details, Account → Security → Download my data for a full copy (JSON), and Account → Delete account to erase your account. Records we must keep by law (for example, filings and invoices for active or paid work) are retained only for the period the law requires. For anything else, or to raise a grievance, write to [email protected] with the subject "Data request". We acknowledge within 7 days and respond within 30 days.
07Data Retention
We retain your account data for as long as your account is active or as needed to provide services. Business documents may be retained for up to 7 years for compliance purposes as required by Indian law. You can request earlier deletion by contacting our support team.
08Third-Party Services
Our platform integrates with government portals, payment gateways (Razorpay), and cloud services (AWS). These third parties have their own privacy policies. We recommend reviewing them. We are not responsible for the privacy practices of external websites or services.
09Children's Privacy
Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected such information, please contact us immediately and we will delete it promptly.
10Changes to Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes via email or prominent notice on our platform at least 7 days before changes take effect. Continued use of our services after changes constitutes acceptance of the updated policy.
11Contact Us
For privacy concerns, data requests, or questions about this policy, contact our Data Protection team at [email protected] or call +91 87008 03368. Our office is located at C-209, New Ashok Nagar, New Delhi – 110096. We respond within 30 days.
Questions about this page? We reply Mon–Sat 9AM–7PM.