Privacy Policy

1Introduction & Scope

This Privacy Policy explains how KitnaTax ("we", "us", "our") collects, uses, stores, and protects your personal and financial information when you use our website (kitnatax.com) or any of our services.

This policy applies to all clients, visitors, and users of KitnaTax services across India and internationally. By using our services, you consent to the collection and use of your information as described in this policy.

KitnaTax is committed to full compliance with the Information Technology Act, 2000, the IT (Amendment) Act, 2008, and the emerging requirements of India's Digital Personal Data Protection Act (DPDPA), 2023.

2Information We Collect

We collect the following categories of information to provide our services:

3How We Use Your Information

Your information is used exclusively for the following purposes:

• Preparing and filing your income tax returns as per the Income Tax Act, 1961
• Communicating with you about your case, documents, and filing status
• Processing your payments and generating receipts
• Assigning a qualified CA to your case
• Sending important tax deadline reminders and compliance alerts
• Improving our services and platform based on usage patterns
• Complying with legal and regulatory obligations
• Responding to your queries and support requests

We will never use your data for unsolicited marketing, profiling, or selling to third parties.

4Data Sharing & Third Parties

We share your data only in the following limited circumstances:

• Assigned CA: Your documents and financial data are shared with the qualified CA assigned to your case — bound by professional confidentiality obligations
• Income Tax Portal: Your return data is submitted to the Government of India's Income Tax portal (incometax.gov.in) for filing
• Razorpay: Payment processing only — they do not receive your tax or financial documents
• Legal Authorities: Only when required by law, court order, or government directive

5Data Security

KitnaTax implements industry-leading security measures certified under ISO/IEC 27001:2022:

• 256-bit SSL/TLS encryption for all data in transit
• AES-256 encryption for sensitive data stored at rest
• Role-based access controls — only your assigned CA can access your documents
• Multi-factor authentication for all system access
• Regular security audits and penetration testing
• Secure document deletion after the retention period
• VAPT (Vulnerability Assessment & Penetration Testing) conducted periodically

Despite our best efforts, no system is 100% secure. In the unlikely event of a data breach, we will notify affected clients within 72 hours as required by applicable law.

6Data Retention

We retain your data for the following periods:

• Tax returns & computation documents: 8 years (as required by the Income Tax Act)
• Payment records: 7 years (as required by financial regulations)
• Account information: Duration of account + 2 years after closure
• Communication records: 3 years
• Technical/log data: 90 days

After the retention period, data is securely deleted or anonymized. You may request early deletion subject to legal retention requirements.

7Your Rights

As a data subject under applicable Indian law, you have the following rights:

• Right to Access: Request a copy of all personal data we hold about you
• Right to Correction: Request correction of inaccurate or incomplete data
• Right to Deletion: Request deletion of your data (subject to legal retention requirements)
• Right to Portability: Request your data in a portable, machine-readable format
• Right to Withdraw Consent: Withdraw consent for marketing communications at any time
• Right to Grievance: Lodge a complaint with our Grievance Officer

To exercise any of these rights, email support@kitnatax.com with the subject line "Data Rights Request". We will respond within 30 days.

8Cookies Policy

KitnaTax uses cookies to enhance your experience:

• Essential Cookies: Required for login, cart, and checkout functions — cannot be disabled
• Analytics Cookies: Google Analytics — helps us understand usage patterns (anonymized)
• Preference Cookies: Remember your settings and preferences

You can control non-essential cookies through your browser settings. Note that disabling cookies may affect certain website functions.

9Children's Privacy

KitnaTax services are intended for individuals aged 18 years and above. We do not knowingly collect personal data from children under 18. If we discover we have inadvertently collected data from a minor, we will delete it immediately.

10Grievance Officer

As required under the Information Technology Act, 2000, KitnaTax has appointed a Grievance Officer for privacy-related complaints:

11Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The updated date will be shown at the top of this page. We will notify registered clients of significant changes via email.