Privacy Policy

How Tax Sahayogi collects, uses, and protects your data.

Last updated: 01 April 2026Effective: 01 April 2026
Privacy PolicyTerms of UseCookie PolicyData SecurityDPDP ActISO 27001GDPR Policy

Introduction

Tax Sahayogi is a product of Sahayogi One Private Limited ("Sahayogi One," "we," "our," or "us"), a company incorporated under the laws of India. Tax Sahayogi is an AI-powered tax copilot designed for Chartered Accountants, tax professionals, and advisory firms across India.

This Privacy Policy explains how we collect, use, store, and protect the personal and professional information you provide when using Tax Sahayogi, including our website, web application, and associated services (collectively, the "Service"). By accessing or using Tax Sahayogi, you agree to the practices described in this policy.

We are committed to safeguarding your privacy and complying with applicable data protection laws, including the Digital Personal Data Protection Act, 2023 ("DPDP Act") and other relevant Indian regulations.

Information We Collect

Account Information

When you register for Tax Sahayogi, we collect:

  • Full name
  • Email address
  • Phone number
  • Firm or organisation name
  • Professional credentials (e.g., CA membership number, if provided)

Usage Data

When you interact with Tax Sahayogi, we collect:

  • Queries and prompts submitted to our AI advisory tools
  • Tax notices, documents, and files you upload for parsing or analysis
  • Replies and outputs generated through the Service
  • Calculator inputs and computation logs

Automatically Collected Information

We automatically collect certain technical information when you access the Service, including:

  • IP address
  • Device type and operating system
  • Browser type and version
  • Pages viewed, time spent, and navigation patterns
  • Referring URLs

How We Use Your Information

We use the information we collect for the following purposes:

  • Providing AI Advisory Services: To process your queries, generate AI-powered tax guidance, parse uploaded notices, and produce draft replies.
  • Processing Tax Notices: To analyse and extract relevant information from tax notices and documents you upload.
  • Improving the Service: To understand usage patterns, identify errors, and enhance the accuracy and reliability of our AI models and platform features.
  • Security and Fraud Prevention: To detect, prevent, and address technical issues, unauthorised access, and fraudulent activity.
  • Communication: To send you service-related notifications, updates, and support responses.
  • Legal Compliance: To comply with applicable laws, regulations, and legal processes.

We process your personal data on the following legal grounds:

  • Consent: You provide consent when you create an account and use the Service. You may withdraw your consent at any time by contacting us or deleting your account.
  • Contract Performance: Processing is necessary to deliver the services you have subscribed to and to fulfil our contractual obligations to you.
  • Legitimate Interests: We process data where necessary for our legitimate business interests, such as improving our platform, ensuring security, and preventing fraud, provided these interests do not override your fundamental rights.

Information Sharing

We do not sell, rent, or trade your personal data to third parties. We share your information only in the following limited circumstances:

  • Cloud Infrastructure Providers: Your data is hosted on Microsoft Azure (Central India region). Microsoft operates under an enterprise Data Processing Agreement (DPA) with us and processes your data solely on our instructions.
  • Law Enforcement and Legal Requirements: We may disclose your information if required by law, regulation, legal process, or governmental request, or where necessary to protect the rights, property, or safety of Sahayogi One, our users, or the public.

Data Storage and Security

All data processed by Tax Sahayogi is stored on Microsoft Azure servers located in the Central India region. We implement robust security measures to protect your information:

  • Encryption at Rest: All stored data is encrypted using AES-256 encryption.
  • Encryption in Transit: All data transmitted between your device and our servers is protected using TLS (Transport Layer Security) encryption.
  • Tenant Isolation: Each organisation's data is logically isolated to prevent cross-tenant access.
  • Access Controls: Strict role-based access controls limit internal access to your data on a need-to-know basis.
  • Regular Audits: We conduct periodic security assessments and vulnerability testing to maintain the integrity of our systems.

Data Retention

We retain your personal data for as long as your account remains active or as needed to provide the Service. Specifically:

  • Account Data: Retained until you delete your account or submit an erasure request.
  • Usage and Query Data: Retained while your account is active to provide continuity of service and improve our AI models.
  • Calculator Logs: Automatically expire and are permanently deleted after 90 days.
  • Post-Deletion: Upon account deletion or an approved erasure request, we will remove your personal data from our active systems within 30 days. Residual copies in encrypted backups may persist for up to 90 days before automatic purging.

Your Rights

Under the Digital Personal Data Protection Act, 2023 (DPDP Act) and other applicable laws, you have the following rights regarding your personal data:

  • Right to Access: You may request a summary of the personal data we hold about you.
  • Right to Correction: You may request correction of inaccurate or incomplete personal data.
  • Right to Erasure: You may request deletion of your personal data, subject to any legal obligations requiring us to retain certain records.
  • Right to Data Portability: You may request a copy of your data in a structured, commonly used, and machine-readable format.
  • Right to Withdraw Consent: You may withdraw your consent to data processing at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, please contact our Data Protection Officer at dpo@sahayogione.com.

Cookies

Tax Sahayogi uses cookies and similar tracking technologies to maintain your session, remember your preferences, and understand how you use our Service. Cookies are small text files stored on your device by your browser.

For detailed information about the types of cookies we use, their purposes, and how to manage them, please refer to our Cookie Policy.

Third-Party Services

Tax Sahayogi uses Azure OpenAI Service to power its AI capabilities. This service is provided by Microsoft under their enterprise Data Processing Agreement (DPA). Importantly:

  • Your prompts and data submitted to Azure OpenAI are not used by Microsoft or OpenAI to train, retrain, or improve any AI models.
  • All AI processing occurs within the Azure Central India region, subject to the same security and isolation measures described in this policy.
  • No data is shared with third-party AI providers outside of the Microsoft enterprise agreement.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, or legal obligations. When we make material changes, we will notify you by posting the updated policy on our website with a revised "Last updated" date, and where appropriate, by sending you a notification via email or through the Service.

Your continued use of Tax Sahayogi after the publication of changes constitutes your acceptance of the updated Privacy Policy. We encourage you to review this page periodically.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: