Loading…
Loading…
Last updated: 18 July 2026 · Version 3.0 · Governing law: India / Delhi jurisdiction
OnlineTaxGuru is committed to protecting your personal and financial information. This policy explains what data we collect, how we use it, how we protect it, and your rights as our client.
When you register or use our Services, we collect your full name, email address, mobile number, PAN, Aadhaar number (last 4 digits only for verification, or the full number where a specific filing legally requires it), date of birth, residential and business address, and bank account details necessary for the specific Service engaged. Some Services require this information as part of identity verification (KYC) before we can onboard you or file on your behalf — see Terms of Service §7 "KYC / Identity Verification".
To provide CA-assisted Services, we collect financial documents including income statements, Form 16, Form 26AS, bank statements, investment certificates, capital gains statements, business financial records, GST/ROC/trademark/IEC/FSSAI application documents, and any other document you upload to our Portal.
We automatically collect browser type, IP address, device identifiers, pages visited, time on page, and referring URLs through cookies and server logs (see "Cookies" below). This data is used to improve platform performance and user experience and is not linked to your personal identity for that purpose.
We retain records of communications between you and our CA team across email, WhatsApp, SMS, phone calls, and the Portal for quality assurance, compliance audit trails, and service continuity — see "Communication Records" below.
We use your information solely to: (a) provide the Services you have engaged; (b) assign a qualified CA to your case; (c) communicate service status, document requests, and completion updates; (d) process payments securely; (e) comply with our legal and regulatory obligations under the Income Tax Act, GST law, the Companies Act, the CA Act, and ICAI guidelines; (f) send transactional emails and service reminders (marketing communications only if you opt in); (g) improve our platform, detect fraud, and maintain security; and (h) respond to lawful requests from government authorities as required by Indian law.
Data stored on our servers is protected with AES-256 encryption. Data in transit between your browser and our servers is secured using TLS 1.3. Document uploads are encrypted on receipt and stored encrypted on our cloud infrastructure.
We follow an information security management framework aligned with ISO 27001 principles, governing collection, storage, processing, and disposal of data, reviewed periodically for effectiveness.
Access to your documents and personal information is strictly role-based — only your assigned CA and authorised compliance staff can access your case files. Access is logged and audited. CAs are additionally bound by the ICAI Code of Ethics on client confidentiality.
We retain your documents, case records, and communication records for 8 years from the date of Service completion, consistent with retention expectations under the Income Tax Act, 1961 and the Companies Act, 2013 — see Terms of Service §11 "Document Retention Policy" for how to request a copy of your documents or the effect of an account-deletion request on this retention period. After the retention period, data is securely deleted using industry-standard secure-deletion practices.
Payments are processed through Razorpay, a PCI-DSS Level 1 compliant payment gateway. We do not store your full card numbers or UPI credentials. Razorpay's own privacy policy governs data it collects during payment processing.
We use Amazon Web Services (AWS) — specifically the AWS Mumbai region (ap-south-1) — for hosting and document storage. Your data does not leave India as part of our own infrastructure.
To provide our Services, your CA will access the Income Tax portal, GST portal, MCA/ROC portal, Trade Marks Registry portal, DGFT portal, FSSAI FoSCoS, or other relevant Government Portals on your behalf, using credentials you provide or authorised integrations. We do not store Government Portal passwords beyond what is strictly necessary to deliver the Service, and never sell such credentials.
We never sell, rent, or share your personal or financial information with advertisers, data brokers, or any third party for commercial gain. Your data is not monetised by OnlineTaxGuru.
We treat all personal, financial, and business information you share with us as confidential, and access is restricted to your assigned Chartered Accountant and authorised staff working on your case, consistent with our Privacy Policy and the confidentiality obligations applicable to Chartered Accountants under the ICAI Code of Ethics.
We will not disclose your confidential information to any third party except: (a) where necessary to render the Service you have engaged (e.g., submission to a government portal); (b) with your explicit consent; (c) where required by a court order, statute, or a lawful demand from a government or regulatory authority; or (d) to our sub-processors and service providers bound by confidentiality obligations (e.g., cloud hosting, payment processing).
You agree to keep confidential any non-public information about our internal processes, pricing structures, or proprietary tools that you become aware of through your use of the Services.
You have the following rights regarding your personal data: (a) Right to Access — request a copy of the personal data we hold about you; (b) Right to Correction — request correction of inaccurate or incomplete data; (c) Right to Deletion — request deletion of your account and personal data, subject to our legal retention obligations described above; (d) Right to Data Portability — request your data in a structured, machine-readable format; and (e) Right to Withdraw Consent — withdraw consent for marketing communications at any time. To exercise any of these rights, email privacy@onlinetaxguru.com with the subject line "Privacy Request". We will acknowledge your request within 72 hours and resolve it within 30 days.
We use cookies for essential platform functionality, analytics, and preferences. See our Cookie Policy for full detail on the categories of cookies we use, the third-party tools involved, and how to manage your preferences.
By using our website or Services, you consent to receive communications from us electronically — via email, WhatsApp, SMS, phone calls, and notifications within your OnlineTaxGuru client Portal — including service updates, document requests, invoices, receipts, and policy notices. You agree that all such electronic communications satisfy any legal requirement that such communication be in writing.
Instructions, approvals, and document submissions you send us through any of these channels (email, WhatsApp, SMS, or the Portal) form part of the official record of your engagement with us, and we may rely on them as evidence of your instruction or approval, including in the event of a dispute. We retain these communication records for the same period as your case file — see "Document Retention Policy" below.
It is your responsibility to keep your registered email address, mobile number, and WhatsApp number current. We are not responsible for your failure to receive a communication sent to contact details you provided that are outdated or incorrect.
Our ability to protect, process, or respond to requests regarding your data may be delayed by events beyond our reasonable control (see the Force Majeure clause of our Terms of Service), such as extended outages of our hosting provider or a Government Portal. We will resume normal processing as soon as reasonably possible after such an event.
This Privacy Policy is governed by the laws of India, and any dispute relating to it is subject to the exclusive jurisdiction of the courts at Delhi, India, consistent with our Terms of Service.
We may update this Privacy Policy to reflect changes in our practices or applicable law. We will notify you of material changes via email or a prominent notice on our website at least 15 days before the change takes effect. Continued use of the Services after the effective date constitutes acceptance of the updated policy.
For questions, complaints, or requests related to your privacy or this policy, contact our Data Protection point of contact at privacy@onlinetaxguru.com or write to OnlineTaxGuru, Mumbai, Maharashtra, India. We will acknowledge your request within 72 hours and resolve it within 30 days.
Have questions about this policy?
Contact Us