How we keep your data safe
Your money details are private. Here is, in plain words, what we keep, how it is protected and what you control.
- EncryptedSensitive details and files are encrypted where they are stored.
- Never soldWe do not sell your data or share it for anyone's marketing.
- Your consent firstNothing is read, and no WhatsApp message is sent, until you say yes.
- Yours to deleteDelete documents yourself, or ask us to delete your account.
What we keep, and what we do not
- When you ask a question: your question and the answer. Asking needs no number. Your mobile number is kept only if you verify it, to save the thread or continue on WhatsApp.
- When you add a document to a case: the file, and the figures we read from it for your CA.
- Our money tools (the salary and bank statement analysers) read your document in memory and do not store it. A result is kept only when you press Save. From a bank statement we keep only the lines you choose to keep.
- Payments go through Razorpay. We never see or store your full card details.
How it is protected
- Sensitive details are encrypted one by one before they are saved: your PAN, salary, phone number, your messages with us and on WhatsApp, the figures read from your documents, and saved tool results. We use AES-256-GCM, with a fresh random value for every item.
- The encryption keys are kept apart from the database, so a copy of the database alone cannot be read.
- To find your account by phone number we use a one way fingerprint of the number, not the number itself.
- Uploaded files are kept in encrypted cloud storage (Amazon S3, encrypted at rest). Everything between your phone and us travels over HTTPS.
Never sold. Shared only to do the work.
- We do not sell your data, and we do not share it with anyone for their marketing.
- We share only what a job needs, with the services that do it: Razorpay for payments, WhatsApp (Meta) for messages once you opt in, and an AI model (Claude, by Anthropic) that reads a document to pull out its figures. The figures it returns are stored encrypted.
- Filings go to the government portals (income tax, GST, MCA) only for the work you asked for.
Your consent first
- We read a document only when you add it.
- We write to you on WhatsApp only after you tick “Continue this chat on WhatsApp” and verify your number with a one time code. We keep the exact words you agreed to, with the time.
- Our website may use Google and Meta tags to see whether our ads work. Ad cookies start switched off. If your browser sends Global Privacy Control or Do Not Track, analytics is off and the Meta Pixel does not load. These tags are told that a step happened, such as a number being verified, never your question, your documents or your figures.
Deleting your data
- Documents: delete them yourself in your account, until your CA accepts one into your case. Files that are part of a finished case, or that your CA delivered to you, stay with the case record.
- Saved tool results: remove them in the tool, any time.
- Your account: ask us, by email or WhatsApp, from your registered number. We delete your account and your data. Records the law asks us to keep, such as invoices for payments, stay for the period the law sets.