TaxStoxverified_userLicensed by IT Dept.shield_with_heartBank-Grade Security
Sign In
← Back to Home

Privacy Policy

Last updated: 4 July 2026

1. Introduction

TaxStox Technologies Private Limited ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use TaxStox ("the Platform"). This policy is compliant with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023.

2. Information We Collect

  • Personal Information: PAN card number, full name, email address, date of birth, and phone number (if provided).
  • Financial Information: Salary details, TDS amounts, capital gains, dividend income, interest income, HRA, deductions under Chapter VI-A, and other tax-related data extracted from your uploaded documents.
  • Document Data: Form 16, Annual Information Statement (AIS), broker tradebooks, and investment proofs uploaded by you.
  • Account Information: Hashed password (bcrypt), Google OAuth identifier (if using Google Sign-In), account creation date.
  • Usage Data: IP address, browser type, pages visited, time spent on pages, and feature usage patterns.

3. How We Use Your Information

  • To extract, classify, and process tax-related data from your uploaded documents.
  • To compute your tax liability under Old and New regimes and generate optimized ITR JSON files.
  • To validate your return against 400+ algorithmic checks.
  • To authenticate your identity and maintain your account.
  • To communicate with you about your filings, platform updates, and support requests.
  • To improve the Platform's accuracy, performance, and user experience through anonymized analytics.

4. Data Storage & Deletion

  • Uploaded PDFs and extracted financial data are processed in-memory and auto-deleted within 48 hours of processing.
  • Your account information (name, email, PAN) is stored in an encrypted PostgreSQL database hosted on Neon (AWS us-east-1).
  • ITR filing records (status, assessment year, ITR type) are retained for your reference until you delete your account.
  • You may request deletion of your account and all associated data by emailing privacy@taxstox.com. Data will be purged within 30 days.

5. Data Security

  • All data in transit is encrypted using TLS 1.3 (256-bit SSL).
  • Passwords are hashed using bcrypt with unique salts. We never store plain-text passwords.
  • Database access is restricted to application servers via IP whitelisting and encrypted connections.
  • We conduct regular security audits and vulnerability assessments.
  • In the unlikely event of a data breach, affected users will be notified within 72 hours as required by Indian law.

6. Data Sharing & Third Parties

  • We do NOT sell, rent, or trade your personal information to third parties.
  • We do NOT share your financial data with any third party except as required by law.
  • Service Providers: We use Neon (database hosting), Render (backend hosting), and Vercel (frontend hosting). These providers process data on our behalf and are bound by data processing agreements.
  • Legal Compliance: We may disclose information if required by law, court order, or government regulation.

7. Cookies & Tracking

TaxStox uses essential cookies for authentication (JWT tokens stored in localStorage) and session management. We do not use third-party tracking cookies, advertising cookies, or analytics cookies that identify individual users. We do not engage in behavioral advertising or user profiling for marketing purposes.

8. Google OAuth

If you sign in using Google, we receive your name and email address from Google. We do not access your Google Drive, Gmail, contacts, or any other Google service data. The Google ID token is processed server-side and your Google credentials are never stored by TaxStox.

9. Your Rights

  • Right to Access: You may request a copy of all personal data we hold about you.
  • Right to Correction: You may update your name and PAN through the Settings page.
  • Right to Erasure: You may request deletion of your account and all associated data.
  • Right to Data Portability: You may download your filing history as structured data.
  • Right to Withdraw Consent: You may withdraw consent at any time by deleting your account.

10. Children's Privacy

The Platform is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email. Continued use of the Platform after changes constitutes acceptance of the updated policy.

12. Grievance Officer

As required by the Information Technology Act, 2000, our Grievance Officer is: Mr. Aman Verma, TaxStox Technologies Pvt Ltd, Bangalore, India. Email: grievance@taxstox.com. Response time: within 15 days.

13. Contact

For privacy-related inquiries: privacy@taxstox.com.