Privacy Notice

Last updated: June 2026

1. Who we are

Taxrithm is operated by Stratilon Private Limited (“we”, “us”), registered office 4/461 2nd Floor Suite, 1336 Valamkottil Tower, Thrikkakara, Ernakulam, Kerala 682021. For income-tax return preparation performed by a CA firm using Taxrithm, the CA firm is the Data Fiduciary and we act as their Data Processor; for individuals using Taxrithm directly, we are the Data Fiduciary.

2. What we collect and why

To prepare an Income-tax Return we process: identity (name, PAN, date of birth, masked Aadhaar — only the last 4 digits are retained), contact (email, mobile, address), and financial data you provide or upload (salary / Form 16, capital gains, bank interest, bank account for refund, deductions). We process it solely to compute your tax and generate the CBDT-compliant JSON you download and file yourself.

3. Aadhaar — data minimisation

We never persist a full Aadhaar number. Where a full Aadhaar is needed transiently to prepare the return, it is held only for the duration of preparation and purged when the filing JSON is generated; only the last four digits are stored.

4. Sub-processors

We share data with vetted sub-processors strictly to provide the service. See the sub-processor list for each vendor, its purpose, the data involved, and its hosting region.

5. How long we keep it

We retain return data for 7 years (to cover the Section 149 reopening window). Deletion is two-stage: a soft delete on request, then an automated hard delete of data (and its uploaded documents) seven years later.

6. How we protect it

Data is encrypted at rest (AES-256; PAN additionally column-encrypted) and in transit (TLS 1.3), access is row-level-security scoped per firm, every change is written to an append-only audit log, and logs are retained in India per CERT-In directions.

7. Your rights

Subject to the DPDP Act, you may request access to, correction of, or erasure of your personal data, and may withdraw consent. To exercise a right or raise a grievance, contact our Grievance Officer at grievance@taxrithm.com or our Data Protection Officer at dpo@taxrithm.com.

8. Changes

We will post any change here and, where required, notify you. Continued use after a change means you accept the updated notice.

गोपनीयता सूचना (हिंदी)

Taxrithm का संचालन Stratilon Private Limited द्वारा किया जाता है। हम आपकी आयकर रिटर्न तैयार करने के लिए आपकी पहचान, संपर्क और वित्तीय जानकारी संसाधित करते हैं। पूरा Aadhaar कभी संग्रहीत नहीं किया जाता। डेटा 7 वर्षों तक रखा जाता है (धारा 149)। अपने अधिकारों के लिए grievance@taxrithm.com से संपर्क करें।