Privacy & Data Security Policy

To accurately compute taxes, verify deductions, and prepare statutory filings on your behalf, EasyTax collects:

• Identity & Demographic Data: Full Name, Date of Birth, Gender, Father’s Name, Permanent Account Number (PAN), Aadhaar Number (for OTP e-verification).
• Contact Information: Verified Email Address, Mobile/WhatsApp Number, Residential Address, State of Jurisdiction.
• Financial & Tax Documents: Form 16 (Part A & B), Form 26AS, Annual Information Statement (AIS), Taxpayer Information Summary (TIS), Capital Gains statements, Bank Account details (Account Number & IFSC for ITD refund credit), Interest certificates, and business balance sheets.
• Corporate Compliance Records: Certificate of Incorporation, MOA, AOA, Director Identification Numbers (DIN), Digital Signature Certificates (DSC), and GSTIN credentials.

We process your personal and financial information strictly for authorized, lawful purposes:

1. Preparing, calculating, auditing, and e-filing your Income Tax Returns and GST returns on official Government of India portals.
2. Providing expert consultation, answering scrutiny notices, and delivering tax optimization advice via our verified CA panel.
3. Generating official GST tax invoices, processing payments, and updating you via transactional SMS/WhatsApp regarding filing status and refund releases.

EasyTax implements rigorous technical and organizational security measures to protect your documents against unauthorized access, loss, or alteration:

• End-to-End Encryption: All data transmitted between your browser and our servers is secured using Transport Layer Security (TLS 1.3 / 256-bit SSL). Data stored in our database vaults is encrypted using AES-256.
• Role-Based Access Control (RBAC): Only the specific Chartered Accountant or tax specialist assigned to your file has temporary, audited access to your financial documents.
• Isolated Tier-4 Data Centers: Hosted in SOC-2 Type II, ISO 27001:2022 certified cloud infrastructure within Indian sovereign borders (AWS Mumbai / GCP Delhi).

We only share your information with third parties in the following limited, essential circumstances:

• Government Portals: Income Tax Department of India (e-filing portal), GST System, and Ministry of Corporate Affairs for the sole purpose of submitting your returns.
• Payment Gateways: PCI-DSS compliant payment aggregators (Razorpay / Cashfree) for secure checkout and fee collection. EasyTax never stores complete debit/credit card CVV or PIN numbers.
• Legal Compliance: When required by a formal order from a court of competent jurisdiction or authorized statutory law enforcement agency under Section 131/133 of the Income Tax Act.

Under Section 149 of the Income Tax Act, 1961, tax assessments can be reopened by the department for up to 6 years (or 10 years in specific high-value cases).

Consequently, EasyTax retains your filed ITR-V acknowledgements, computed schedules, and statutory receipts for a minimum period of 7 years to assist you in case of any future scrutiny notices, after which data is securely purged or anonymized.

You have the right to:

• Access & Export: Request a complete copy of all personal records and filed acknowledgements stored in your EasyTax account.
• Correction & Update: Request correction of inaccurate personal or financial information.
• Account Erasure: Request the closure of your account and deletion of non-statutory personal data.

If you have any questions, grievances, or requests regarding this Privacy Policy or your data protection rights, please contact our designated Data Protection Officer: