Privacy Policy

Sahil Advisory("we", "us") provides tax filing and compliance services in India. To do that work we must handle some of the most sensitive information a person has: PAN, Aadhaar, bank details and income records. This policy explains what we collect, why, who can see it, how long we keep it and what you can ask us to do with it. It is written to follow the Digital Personal Data Protection Act, 2023 (DPDP Act) and the rules made under it.

What we collect

• Identity and contact details: name, mobile number, email address and postal address.
• Tax identifiers: PAN, Aadhaar number (where required for e-verification or registration), GSTIN and TAN.
• Financial documents you upload: Form 16, Form 26AS, AIS, bank statements, salary slips, invoices, capital gains statements, rent receipts and similar records.
• Portal credentials you choose to share for filing, such as income tax portal or GST portal access, only for the task you approve.
• Payment confirmation data from our payment gateway. We never receive or store your card number, CVV or UPI PIN.
• Usage data: pages visited, device type, approximate location from IP address, and how you move through the site.

Why we collect it (purpose limitation)

We use your data only for the purpose you gave it to us: preparing and filing your returns, completing a registration, replying to a notice, running a consultation, sending status updates, issuing invoices and meeting our own legal record-keeping duties. We do not sell personal data, and we do not use your financial documents for advertising or profiling.

Consent at upload

Each time you upload a document or share a portal credential, we ask you to confirm that you consent to its use for the stated service. You can withdraw consent at any time by writing to us. Withdrawal does not affect processing already completed, and it may mean we cannot finish a pending filing.

Who can see your data

Access is limited to two roles: the expert assigned to your order, and platform administrators who manage assignments and quality checks. Other experts on the panel cannot open your file. Every view and download is recorded in an access log. Our support team sees your name, contact details and order status, not your uploaded documents.

How we store it

• Documents are encrypted at rest and served only through private storage buckets, never public links.
• All traffic between your device and our servers uses TLS encryption.
• Application data and documents are hosted on servers located in India.
• PAN and Aadhaar are masked in our internal screens and are never written to application logs.

How long we keep it

Copies of filed returns, acknowledgements, computations and invoices are kept for eight years from the end of the relevant financial year. This is our professional working record and matches the period for which tax authorities can reopen or ask about a return. Raw uploaded documents such as bank statements and salary slips are not needed for that long; you can ask us to delete them at any time after your filing is complete. See our data deletion page for the process.

Third parties we work with

We share only the minimum needed with these categories of providers, each bound by contract to protect it:

• Payment gateway, to process your payment (PCI DSS compliant).
• Email, SMS and WhatsApp Business messaging providers, to send order updates and documents you request.
• Analytics and product tools: Google Analytics, Microsoft Clarity, PostHog and Vercel Analytics, which receive usage data and never your uploaded documents.
• Government portals (Income Tax, GST, MCA) when we file on your behalf, which is the purpose of the service.

We will disclose data to a court, regulator or law enforcement agency only when legally required to do so.

Cookies

We use essential cookies to keep you signed in and to remember your preferences, and analytics cookies to understand how the site is used. You can block cookies in your browser settings; the site will still work, though some conveniences may stop.

Your rights

• Access: ask what personal data we hold about you and receive a summary.
• Correction: ask us to fix inaccurate or incomplete data.
• Erasure: ask us to delete data we are not legally required to keep.
• Withdrawal: withdraw consent for any processing that is not yet complete.
• Grievance: raise a complaint and receive a response within the time set under the DPDP Act.
• Nomination: name a person who may exercise these rights on your behalf if you are unable to.

Grievance officer

Write to our grievance officer at sahiladvisory1@gmail.comwith the subject "Privacy grievance", or by post to House 2032B, Block 22, CHB Flats, Phase 9, Sector 63, Chandigarh 160047. We acknowledge within 48 hours and aim to resolve within 30 days. If you are not satisfied, you may approach the Data Protection Board of India.

Children

Our services are for adults. Where a return must be filed for a minor (for example, income clubbed with a parent), we process the minor's data only on the verifiable consent of the parent or guardian.

Changes to this policy

We may update this policy when our services or the law change. The date at the top shows the current version. For material changes we will notify registered users by email or WhatsApp before the change takes effect.