Privacy Policy

Version 1.0 · effective 23 May 2026 · India · DPDP Act 2023

In one paragraph

We use your documents only to compute your tax position. Data lives in Mumbai (asia-south1). We never sell or share your PAN, Aadhaar, or financial data. You can export everything or delete your account in one click — free, no questions asked.

1 · What we collect

  • Account data — name, email, phone (optional), PAN, DOB, residential status
  • Documents you upload — Form 16, 26AS, AIS, bank statements, investment proofs, rent receipts
  • Derived data — parsed line items (salary, TDS, deductions) computed from your documents
  • Usage telemetry — page views, feature use, error reports (no PII; Aadhaar dropped at parse time)

2 · How we use it

  • Determine your ITR form, compute your tax position under both regimes, and surface unclaimed deductions
  • Generate the CA-handoff PDF — a summary a verified CA files from
  • Notify you about your filings, refunds, and product updates (one email per AY · opt out anytime)
  • Share with your CA only when you explicitly invite one

3 · Where it lives

  • Firebase + Cloud Run · asia-south1 (Mumbai) · never leaves India
  • Documents encrypted at rest (AES-256) and in transit (TLS 1.3)
  • Aadhaar numbers are detected and dropped at parse time; we never store them

4 · Who we share it with

Almost no one. Specifically:

  • Razorpay — when you pay (UPI / card / netbanking). They never see your tax data.
  • Your invited CA — only the scopes you explicitly toggled on. You can revoke any time.
  • Family members you invite — only the scopes they pick at accept time. Either side can revoke.
  • Income Tax Department — Chitragupt never transmits to the IT Department. Filing happens when your CA (yours or one from the Hire-CA marketplace) submits on the e-Filing portal using the CA-handoff PDF.

We do not sell to advertisers, brokers, lenders, insurance aggregators, or anyone else.

5 · Your DPDP rights

  • Access — download everything as a ZIP from Settings → Privacy + Data
  • Correction — edit any parsed value in-place; we never lock corrections
  • Erasure — delete your account in one click; 24h grace, then irreversible
  • Grievance File a grievance → · or email grievance@chitragupt.ai · 7-working-day reply per DPDP §13

6 · Cookies + telemetry

We use a session cookie (login) and PostHog (anonymized product analytics, allow-listed events only). Both can be disabled from Settings → Privacy + Data. No third-party ad cookies, ever.

7 · Changes

We'll email you the diff for any material change at least 14 days before it takes effect. Minor edits (typo fixes, link updates) are silent. The version number at the top of this page changes only for material updates.

8 · Contact

Related: Terms of Service · Refund Policy