Privacy Policy

Last Updated: February 23, 2026

1. Introduction & Applicability

TaxFetch India ("TaxFetch," "Company," "we," "us," or "our"), a Proprietorship firm located in Pune, Maharashtra, India, operates the website www.taxfetchindia.com (the "Platform"). This Privacy Policy (the "Policy") describes how we collect, use, disclose, store, and protect information obtained from users ("you" or "your") of the Platform and the services offered thereon (the "Services").

This Policy is published in compliance with:

• Section 43A of the Information Technology Act, 2000 ("IT Act") and the rules made thereunder;
• Rule 4 of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 ("SPDI Rules");
• Rule 3(1)(a) of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 ("Intermediary Guidelines");
• The Digital Personal Data Protection Act, 2023 ("DPDP Act") and rules framed thereunder, as applicable.

By accessing or using the Platform, you acknowledge that you have read, understood, and agree to be bound by this Policy. If you do not agree to this Policy, please do not access or use the Platform or Services. This Policy, read together with the Terms and Conditions of the Platform, constitutes a legally binding agreement between you and the Company.

This Policy applies to all users who access or use any of the following tools and services offered on the Platform:

• TDS Fetch (Form 26AS data retrieval)
• Smart Income Tax Calculator (AI-Powered)
• HRA Calculator
• Stock Trading Profit Classifier
• Capital Gain Calculator
• Bank Statement Analyzer

2. Information We Collect

2.1 Personal Data Provided by You

When you register for an account or use our Services, we may collect the following personal information:

• Account Registration Data: Full name, email address, mobile number, and password (stored in hashed/encrypted form).
• PAN (Permanent Account Number): Collected for use in the TDS Fetch tool (to retrieve Form 26AS data from the Income Tax Department portal) and the Tax Calculator tool (to enable accurate tax computations). Your PAN is stored securely in our database only for these purposes, handled in compliance with applicable data protection laws, and never used for unauthorized activities.

2.2 Sensitive Personal Data or Information (SPDI)

Under the SPDI Rules, certain categories of information are classified as "Sensitive Personal Data or Information." We may collect the following SPDI in connection with our Services:

• Financial Information: Income details, TDS amounts, assessment year data, bank statement data (for Bank Statement Analyzer), stock trading data, capital gains data, and HRA-related details.
• Passwords: Your account password, which is stored only in a securely hashed format and is never stored or accessible in plain text.

2.3 Automatically Collected Data

When you access or use the Platform, we automatically collect certain technical information, including:

• Device Information: Device type, operating system, browser type and version, screen resolution, and unique device identifiers.
• Log Data: IP address, access timestamps, pages viewed, referring URL, click-stream data, and duration of visits.
• Cookies and Analytics Data: Data collected through cookies and Google Analytics (Measurement ID: G-4204H7QT3M), including user behaviour patterns, session information, and interaction metrics. (See Section 6 for details.)

3. Purpose of Collection

We collect your information for the following lawful purposes:

• Service Delivery: To provide, operate, and maintain the tools and Services on the Platform, including retrieving TDS data, computing income tax liability, analysing bank statements, classifying stock trading profits, calculating capital gains, and computing HRA exemptions.
• Account Management: To create and manage your user account, authenticate your identity, and process your requests.
• Communication: To send you service-related notifications, respond to your queries, and provide customer support.
• Security & Fraud Prevention: To detect, prevent, and address technical issues, security threats, and fraudulent or illegal activities.
• Analytics & Improvement: To analyse usage patterns, monitor Platform performance, and improve our Services, user experience, and functionality.
• Legal Compliance: To comply with applicable laws, regulations, legal processes, or enforceable governmental requests.

4. How We Use Your Information

We use the information collected from you in the following manner:

• To process your tax-related computations and deliver results through our tools.
• To use your PAN number through browser automation technology to fetch TDS data (Form 26AS) from the Income Tax Department's portal on your behalf and at your explicit request, and to enable accurate tax computations in the Tax Calculator tool. Your PAN is stored securely and used only for these stated purposes.
• To analyse uploaded bank statements in-memory for the Bank Statement Analyzer tool, with immediate deletion of the uploaded data after analysis.
• To maintain activity and session logs for security, debugging, and audit purposes.
• To send you important service-related updates, including changes to our tools, features, or policies.
• To generate aggregated, anonymized, and non-identifiable statistical data for internal analytics and service improvement. Such aggregated data cannot be used to identify any individual user.
• To enforce our Terms and Conditions and protect the rights, property, or safety of TaxFetch India, our users, or third parties.

5. Data Sharing & Third Parties

We value your privacy and are committed to protecting your personal information. We adhere to the following principles regarding data sharing:

• No Sale of Data: We do not sell, rent, trade, or otherwise commercially transfer your personal data to any third party.
• No Sharing for Marketing: We do not share your personal information with third parties for their direct marketing purposes.

We may share your information only in the following limited circumstances:

• Legal Obligations: When required to do so by law, regulation, court order, subpoena, or other legal process, or when we believe in good faith that disclosure is necessary to comply with applicable Indian laws, including the IT Act, DPDP Act, or requests from governmental or regulatory authorities.
• Government & Regulatory Bodies: With the Income Tax Department of India, law enforcement agencies, or other governmental or regulatory authorities, as required under applicable law or in response to lawful requests.
• Service Providers: With trusted third-party service providers who assist us in operating the Platform (such as hosting, analytics, and infrastructure services), subject to strict confidentiality obligations. These providers are authorised to use your information only as necessary to provide services to us.
• Protection of Rights: When we believe disclosure is necessary to protect our rights, your safety, the safety of others, investigate fraud, or respond to a government request.
• Business Transfers: In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy.

6. Cookie Policy

Our Platform uses cookies and similar tracking technologies to enhance your browsing experience and to collect usage data for analytics purposes.

6.1 What Are Cookies?

Cookies are small text files placed on your device by websites you visit. They are widely used to make websites work more efficiently, provide a better user experience, and supply information to website operators.

6.2 How We Use Cookies

We use the following types of cookies on our Platform:

• Essential Cookies: Required for the basic functionality of the Platform, such as maintaining your login session, remembering your preferences, and ensuring security.
• Analytics Cookies: We use Google Analytics (Measurement ID: G-4204H7QT3M), a web analytics service provided by Google LLC, to collect and analyse information about how users interact with the Platform. Google Analytics uses cookies to collect information such as how often users visit the Platform, which pages they visit, and what other sites they visited before coming to our Platform. We use this information solely to improve the Platform and our Services.

6.3 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse or delete cookies. However, if you disable cookies, some features of the Platform may not function properly. For more information about Google Analytics and how to opt out, please visit Google Analytics Opt-out Browser Add-on.

7. Data Retention Policy

We retain your personal information only for as long as is necessary to fulfil the purposes for which it was collected, as outlined in this Policy, unless a longer retention period is required or permitted by law.

• Account Data: Your account registration data (name, email, mobile number, hashed password) is retained for as long as your account remains active. Upon account deletion, your personal data will be deleted or anonymized within a reasonable period, subject to any legal or regulatory retention requirements.
• PAN Number: PAN numbers provided for the TDS Fetch and Tax Calculator tools are stored securely in our database for the purposes described in this Policy. They are retained for as long as your account remains active or as required by law.
• Bank Statement Data: Bank statements uploaded for analysis are processed in-memory and are permanently deleted immediately after the analysis is complete. No copies are retained.
• Tax Computation Data: Results of income tax calculations, HRA computations, stock trading classifications, and capital gain calculations may be retained in association with your account for your convenience and future reference.
• Log Data: Server logs, IP addresses, and access logs are retained for a reasonable period for security, debugging, and compliance purposes.
• Analytics Data: Aggregated and anonymized analytics data collected via Google Analytics may be retained indefinitely as it cannot be used to identify individual users.

Upon expiry of the applicable retention period, or upon your valid request for data erasure (subject to legal obligations), we will securely delete or anonymize your personal data.

8. Data Security Measures

We take the security of your personal data seriously and implement reasonable security practices and procedures in accordance with Section 43A of the IT Act and the SPDI Rules. Our security measures include:

• Encryption in Transit: All data transmitted between your browser and our servers is encrypted using Secure Socket Layer (SSL) / Transport Layer Security (TLS) encryption protocols.
• Password Security: User passwords are stored using industry-standard hashing algorithms and are never stored in plain text.
• Secure Database Storage: User data is stored in a secured MySQL database hosted on Amazon Web Services (AWS) Relational Database Service (RDS) with appropriate access controls, encryption at rest, and regular backups.
• Access Controls: Access to personal data is restricted to authorized personnel only, on a need-to-know basis.
• Sensitive Data Handling: Sensitive data such as PAN numbers are stored securely with appropriate access controls. Bank statements are processed in-memory and deleted immediately after analysis, minimizing exposure risk.
• Regular Security Reviews: We conduct periodic reviews of our data collection, storage, and processing practices, including physical and technical security measures.

While we strive to use commercially acceptable means to protect your personal data, no method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for all activities that occur under your account.

9. Your Rights under the DPDP Act, 2023

Under the Digital Personal Data Protection Act, 2023, you are a "Data Principal" and have the following rights with respect to your personal data:

• Right to Access: You have the right to obtain a summary of your personal data that is being processed by us, along with information about the processing activities.
• Right to Correction: You have the right to request correction of inaccurate or misleading personal data, and to have incomplete personal data completed.
• Right to Erasure: You have the right to request erasure of your personal data that is no longer necessary for the purpose for which it was collected, subject to any legal obligations that may require us to retain certain data.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw such consent at any time. Withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal. To withdraw your consent, please contact us at support@taxfetchindia.com.
• Right to Grievance Redressal: You have the right to have your grievances addressed in a timely manner. You may contact our Grievance Officer (details provided in Section 12 below).
• Right to Nominate: You have the right to nominate any individual who shall, in the event of your death or incapacity, exercise your rights as a Data Principal.

To exercise any of the above rights, please submit a written request to us at support@taxfetchindia.com. We will respond to your request within the timeframe prescribed under the DPDP Act and applicable rules. We may request verification of your identity before processing your request.

10. Children's Privacy

The Platform and Services are not intended for individuals under the age of 18 years. We do not knowingly collect, use, or process personal data from children under 18. If you are under 18 years of age, you are not permitted to use the Platform or provide any personal information to us.

If we become aware that we have inadvertently collected personal data from a child under 18, we will take immediate steps to delete such information from our records. If you are a parent or guardian and believe your child has provided us with personal data, please contact us at support@taxfetchindia.com so that we can take appropriate action.

11. Third-Party Links

The Platform may contain links to third-party websites, applications, or services that are not owned or controlled by TaxFetch India. This includes, but is not limited to, the Income Tax Department of India's e-filing portal.

We are not responsible for the privacy practices, content, or security of any third-party websites or services. We strongly encourage you to review the privacy policies and terms of use of any third-party websites or services before providing any personal information to them. Your interaction with any third-party website or service is governed solely by that third party's own terms and privacy policies.

12. Grievance Officer

In accordance with the IT Act, the SPDI Rules, the Intermediary Guidelines, and the DPDP Act, the details of the Grievance Officer are provided below. You may contact the Grievance Officer for any complaints, concerns, or grievances relating to the processing of your personal data or this Policy:

The Grievance Officer shall acknowledge your complaint within 24 hours of receipt and endeavour to resolve it within 15 days from the date of receipt, in accordance with applicable law. If you are not satisfied with the resolution provided, you may approach the Data Protection Board of India or any other appropriate authority under the DPDP Act or other applicable laws.

13. Changes to This Policy

We reserve the right to update, modify, or amend this Policy at any time, at our sole discretion, to reflect changes in our practices, applicable laws, or regulatory requirements. The "Last Updated" date at the top of this Policy indicates the date of the most recent revision.

We will make reasonable efforts to notify you of any material changes to this Policy by posting the updated Policy on the Platform. We encourage you to review this Policy periodically to stay informed about how we are protecting your information.

Your continued use of the Platform and Services after any changes to this Policy constitutes your acceptance of the updated Policy. If you do not agree with the revised Policy, please discontinue your use of the Platform and Services.

14. Governing Law & Jurisdiction

This Policy shall be governed by and construed in accordance with the laws of India, including but not limited to the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, and the Digital Personal Data Protection Act, 2023.

Any dispute, claim, or controversy arising out of or in connection with this Policy, the Platform, or the Services shall be subject to the exclusive jurisdiction of the courts located in Pune, Maharashtra, India. By using the Platform, you consent to the exclusive jurisdiction and venue of such courts.

15. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy, the handling of your personal data, or our privacy practices, please contact us at:

We will endeavour to respond to your inquiry within a reasonable timeframe.