Privacy Policy

We collect information you provide directly: name, email, organization details, and data you enter into the platform (clients, tasks, documents, etc.). We also collect usage data such as login times and feature usage.

We use your information to provide and improve the Service, send service-related communications, and ensure security. We do not use your data for advertising purposes.

Your data is stored on secure cloud servers with encryption in transit (TLS/SSL) and at rest. We use industry-standard security measures to protect your information. Passwords are hashed using bcrypt and never stored in plain text.

We do not sell personal data. We use contracted subprocessors for hosting, storage, backup, email, security monitoring and product analytics. They receive only the data needed to provide their service and are listed in our DPDP notice.

Each organization’s data is logically separated. Users from one organization cannot access data from another organization. Role-based access controls ensure data is only visible to authorized team members.

We retain firm data while the account is active and do not delete it merely because a subscription is cancelled. A verified deletion request has a 30-day cooling period and is then erased or anonymised according to the counsel-approved statutory retention matrix. Encrypted historical backups age out under the published backup schedule.

Under the Digital Personal Data Protection Act, 2023 (India), you have the right to access, correct, and delete your personal data. You may exercise these rights by contacting us.

We use essential cookies for authentication and security. Product analytics may be used to improve the service, subject to the available consent and opt-out controls. We do not use third-party advertising cookies.

For privacy-related inquiries, contact us at taxoneadvisory@gmail.com.