Privacy Policy

1 Information We Collect

When you use our platform to register a business, file taxes, or avail any compliance service, we collect the following categories of personal data:

• Identity Details: PAN Card number, Aadhaar number, Passport number, Voter ID, and other government-issued IDs.
• Contact Information: Full name, email address, mobile number, and residential or business address.
• Corporate Data: Director details, shareholding patterns, company registration numbers, DSC details, and business activity information.
• Financial Information: Bank account details (for payment processing only), GST registration numbers, income tax credentials (via secure portal login).
• Uploaded Documents: Any documents you upload through our platform — such as utility bills, certificates, photographs, deeds, or agreements — for the purpose of processing your service requests.
• Technical Data: IP address, browser type, device information, pages visited, and session duration for analytics and security purposes.

2 How We Use Your Information

We process your personal data solely for legitimate business purposes, including:

• Service Delivery: Filing tax returns, submitting company registration applications, and processing compliance documents with government portals (MCA21, GSTN, Income Tax).
• Identity Verification: Verifying your identity as required by regulatory authorities including the Ministry of Corporate Affairs, GSTN, and CBDT.
• Communication: Sending you service updates, document requests, filing status notifications, and compliance deadline reminders.
• Platform Improvement: Analyzing anonymized usage data to improve our user experience, optimize processes, and develop new features.
• Legal Compliance: Retaining records as required by applicable Indian tax, corporate, and regulatory laws.

4 Sharing & Disclosure

Filing Mantra does not sell your personal data. We only share your information in the following limited circumstances:

• Government Authorities: For the purpose of legal filings on official portals — MCA21, GSTN (Income Tax), Ministry of Labour, and other regulatory bodies as required by your service request.
• Service Partners: Chartered Accountants, Company Secretaries, or Legal Professionals assigned to your case. All our partners are bound by confidentiality agreements.
• Payment Processors: Secure, PCI-DSS compliant payment gateways (e.g., Razorpay, PayU) solely to facilitate transaction processing. We do not store your card details.
• Legal Obligations: When required by law, court order, or government directive, we may disclose information to the appropriate authorities.
• Business Transfer: In the event of a merger, acquisition, or asset sale, user data may be transferred to the acquiring entity, subject to the same privacy protections.

5 Data Security

We implement industry-leading technical and organizational measures to protect your data:

• 256-Bit Encryption: All data at rest and in transit is protected with AES-256 encryption — the same standard used by banks and financial institutions.
• Secure Server Infrastructure: Our servers are hosted in Tier-3 certified data centers with 24/7 physical and digital security monitoring.
• Access Controls: Strict role-based access controls ensure that only authorized professionals can access your case files.
• Regular Security Audits: We conduct periodic penetration testing and vulnerability assessments to identify and mitigate risks.
• Two-Factor Authentication: Available for all user accounts to add an extra layer of protection.

6 Your Privacy Rights

You have the following rights regarding your personal data stored on our platform:

• Right to Access: Request a copy of all personal data we hold about you.
• Right to Correction: Request correction of inaccurate or incomplete personal data.
• Right to Deletion: Request deletion of your personal data, subject to our legal retention obligations.
• Right to Portability: Receive your personal data in a structured, machine-readable format.
• Right to Withdraw Consent: Withdraw consent for data processing where processing is based on consent.
• Right to Object: Object to processing of your data for marketing or profiling purposes.

To exercise any of these rights, please contact our Privacy Officer at info@filingmantra.com. We will respond within 30 days of receiving your request.

7 Cookies & Tracking

Our website uses cookies and similar tracking technologies to enhance your browsing experience:

• Essential Cookies: Required for the platform to function. Cannot be disabled.
• Analytics Cookies: Help us understand how visitors use our site (via Google Analytics). You can opt out.
• Preference Cookies: Remember your settings and preferences for a better experience.
• Marketing Cookies: Used to show you relevant advertisements. Requires your explicit consent.

You can manage or disable non-essential cookies through your browser settings at any time.

8 Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy, or as required by applicable Indian laws:

• Service-related documents: 7 years (as required by tax and corporate laws in India).
• Account data: Duration of your account plus 2 years after closure.
• Communication logs: 3 years from the date of the last interaction.
• Anonymized analytics data: Up to 5 years.

9 Contact Our Privacy Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or the way we handle your data, please contact us: