Skip to content
TaxCare

Security and privacy

How TaxCare protects your data

Tax and financial data is sensitive. These are the safeguards we build in, and the rights you have over what we hold.

Safeguards

  • Stored in India

    Account data is stored with our cloud provider in India (Mumbai). Any service provider outside India is named and explained in the Privacy Policy.

  • Encrypted

    Data is encrypted in transit on every connection, and at rest, with sensitive fields protected at the database level.

  • Verified on every request

    Access is limited by role, every internal service checks who is asking each time, and significant actions are recorded in an audit log.

  • Consent you control

    We ask for consent for each purpose separately, nothing is pre-ticked, and you can withdraw it as easily as you gave it.

  • Masked alerts

    Notifications on your lock screen show masked details only. A full PAN, Aadhaar number or password is never sent in a notification. We will never ask you for an OTP.

  • Payments stay with the gateway

    You enter card and bank details on the payment gateway's own page. TaxCare does not store them.

  • You control your devices

    See every device signed in to your account and sign any of them out at any time.

  • A breach process

    We keep a documented process to detect a breach and to notify the Data Protection Board of India and affected people within the periods the law sets.

  • Your rights

    You can use these rights from your account. You can also write to the Grievance Officer (section 15). We answer within the time on the Grievance Redressal page.

    1. Access. Profile → Privacy & Data → Download my data. The download includes your account, consents, nominee, requests, notification choices, support tickets and chats. For a full summary — including tax profiles, returns, payments, Tax Expert orders and who we have shared data with — write to the Grievance Officer.
    2. Correction. You can change your email, address and contact details in the app. Your name, PAN and date of birth come from the Income Tax portal; to correct them, correct them with the Income Tax Department and reconnect. For anything else, write to the Grievance Officer.
    3. Erasure. Profile → Danger Zone → Delete account. This deletes the whole account as described in 10.2. To erase only some data, write to the Grievance Officer. We cannot erase records the law requires us to keep; we will tell you which and until when.
    4. Nominee. You can name one person in Profile → Privacy & Data to use your rights if you die or cannot act.
    5. Withdraw consent. See section 5.4.
    6. Grievance. See section 15 and the Grievance Redressal page.
    7. Data Protection Board of India. If you are not satisfied with our answer, you may complain to the Data Protection Board of India.

  • How long we keep data

    Data
    Filed returns, computations and their acknowledgement
    How long
    6 years from the date of filing, even if you delete your account (the law may require it). Then erased, unless a legal hold applies.
    Data
    Unfiled drafts
    How long
    Until the last date to file that kind of return for that tax year, plus 3 months. Then erased.
    Data
    Documents of a Tax Expert order that was cancelled or refunded
    How long
    30 days after cancellation. Then erased.
    Data
    Sample broker statements you chose to share
    How long
    90 days. Then erased.
    Data
    Everything else — account details, tax profiles, payments and invoices, messages, support tickets, chat, Tax Expert order records, logs and audit records
    How long
    Up to 8 years, then erased or anonymised, unless a legal hold applies or your account is still active.
    Data
    Cached documents on your own device
    How long
    See the Cookie & Storage Notice (2 to 4 days, cleared at sign-out).
    Data
    Shri conversations
    How long
    On your device only, 120 days, cleared at sign-out. Never on our servers.

    10.1 At the end of the periods above, we erase or anonymise the data: a daily job removes names, mobile numbers, PANs, addresses and saved devices from accounts deleted more than 8 years ago, anonymises payment records, and clears old notifications. Filed returns follow their own 6-year period.

    10.2 When you delete your account. Your account is deactivated at once. You are signed out on every device and nobody can sign in to it. The encrypted portal password and any Aadhaar value, saved devices, notification tokens, your notification feed, your nominee and any return you had not filed are erased. Records that the retention periods above require us to keep (filed returns, payments and invoices, support tickets, chat, Tax Expert orders, logs, and your consent history) are kept securely, are not used for anything else, and are erased or anonymised when their period ends. You can ask the Grievance Officer to confirm what we still hold.

    10.3 Your consent history is kept as proof of consent, for the same period as the records it supports.