Privacy Policy

This Privacy Policy explains how REPLACE_ME (registered business name), operating as Olive TaxPro ("we", "us", "our"), collects, uses, discloses, and safeguards personal and financial information of individuals who use our website and platform (the "Platform") to access tax filing, GST, TDS, audit, payroll, and related compliance services. This policy is drafted with reference to the Digital Personal Data Protection Act, 2023 ("DPDP Act") and applicable Indian data protection principles — see our DPDP Notice for the specific rights and mechanisms the DPDP Act gives you on this Platform.

1. Information We Collect

We collect information necessary to provide tax, GST, TDS, audit, and related compliance services, including:

• Identity information: name, PAN, Aadhaar (where legally required for a specific filing), date of birth, contact details.
• Financial information: income details, bank statements, investment proofs, GSTIN and transaction records, salary/payroll data, and other documents you upload for the services you engage us for.
• Account and usage information: login credentials, device/browser information, and activity on the Platform (e.g. pages visited, actions taken in your workspace).
• Communications: messages exchanged with our CA team, consultation notes, and support requests, including anything shared with our AI chat assistant (see Section 5).

2. How We Use Your Information

• To prepare, review, and file your ITR, GST, TDS, and other statutory returns.
• To conduct audits and assurance engagements you have engaged us for.
• To process payments for services and generate invoices.
• To send you service-related notifications (status updates, document requests, payment confirmations, compliance deadline reminders) via in-app notification, email, and — where you have opted in — WhatsApp.
• To comply with our own legal and regulatory obligations as a practising Chartered Accountancy firm (e.g. KYC/AML record-keeping, ICAI requirements).
• Where you have separately granted consent: for marketing communications, AI-assisted document processing, and integration with third-party data sources (e.g. Account Aggregator).

3. Legal Basis and Consent

Some processing is necessary to perform the services you have engaged us for, or to comply with our legal/regulatory obligations. Other processing — such as marketing communications, WhatsApp marketing messages, AI-assisted document processing, cookies/analytics, e-invoice authorization, ERI (e-Return Intermediary) authorization, and Account Aggregator data sharing — is based on your explicit, separately-tracked consent. You can grant or withdraw any of these consents at any time from Workspace → Privacy once logged in; withdrawing consent does not affect processing already carried out while consent was active.

4. Data Retention

We retain personal and financial data only as long as necessary for the purpose it was collected, or as required by applicable law (including the Income Tax Act, Companies Act, and CA professional record-keeping requirements, which typically require retaining certain records for several years). Documents that fall outside their applicable retention window are automatically flagged for review before any deletion — this is not immediate or automatic deletion, since some records must be preserved for statutory reasons even after you request erasure (see Section 6).

5. AI-Assisted Features

The Platform includes AI-assisted features for document data extraction and a chat assistant. Document extraction is only used with your explicit "AI Processing of Documents" consent, grantable/withdrawable from Workspace → Privacy. The public chat assistant embedded on this site runs entirely on our own infrastructure using a local knowledge base — it does not send your questions to any third-party AI service.

6. Your Rights

Under the DPDP Act and this policy, you have the right to:

• Access a log of who has accessed your data and when (Workspace → Privacy → Access Log).
• Withdraw any consent you have previously granted.
• Request erasure of your personal data, subject to our statutory retention obligations (Workspace → Privacy → Request Data Erasure).
• Request correction of inaccurate personal data by contacting your assigned CA or our support team.

7. Data Sharing

We do not sell your personal data. We share data only: with government/regulatory portals as required to file your returns (Income Tax e-filing portal, GST portal, MCA21), with service providers who help us operate the Platform (e.g. payment processing, email/WhatsApp delivery) under confidentiality obligations, and where legally compelled by a court or regulator.

8. Security

We use role-based access controls, encryption in transit, and audit logging to protect your data. No system is completely secure; if you believe your account has been compromised, contact us immediately at the details below.

9. Grievance Officer

In accordance with applicable Indian law, our Grievance Officer can be reached at:
Name: REPLACE_ME
Email: REPLACE_ME
Address: REPLACE_ME

10. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via the Platform or email before they take effect.