Privacy Policy

1. Introduction

This Privacy Policy describes how NAO Technologies Private Limited ("TaxNAO - a project of NAO Technologies", "we", "us", or "our") collects, uses, stores, and protects your personal data in accordance with the Digital Personal Data Protection Act, 2023 (DPDP Act) and other applicable Indian laws.

By using TaxNAO, you consent to the collection and use of your personal data as described in this Privacy Policy.

2. Data We Collect

2.1 Personal Information

• Name, email address, phone number
• PAN (Permanent Account Number)
• GSTIN (for business clients)
• Address and location data

2.2 Professional Information (for Chartered Accountants)

• ICAI Membership Number
• Professional credentials and certifications
• Work experience and specializations
• Profile photo and bio

2.3 Usage Data

• IP address, browser type, device information
• Pages visited, time spent on site
• Referral source
• Cookies and similar tracking technologies

2.4 Payment Information

• Payment method details (processed securely by Razorpay)
• Billing address
• Transaction history

3. How We Use Your Data

We use your personal data for the following purposes:

• Service Delivery: Facilitate connections between clients and Chartered Accountants
• Account Management: Create and manage user accounts
• Payments: Process subscription fees and service payments
• Verification: Verify ICAI membership for Chartered Accountants
• Communication: Send booking confirmations, notifications, and service updates
• Compliance: Comply with tax regulations, ICAI requirements, and legal obligations
• Improvement: Analyze usage patterns to improve our platform
• Security: Detect and prevent fraud, abuse, and security threats

4. Data Storage and Security

Data Localization: Your personal data is stored on secure servers located in India (AWS Mumbai region) in compliance with Indian data protection requirements.

Data Retention: We retain your personal data for as long as your account is active, plus 7 years thereafter for tax compliance and audit purposes as required by Indian law.

Security Measures: We implement industry-standard security measures including:

• Encryption of data in transit (SSL/TLS) and at rest
• Access controls and authentication
• Regular security audits and monitoring
• Secure backup and disaster recovery

5. Data Sharing and Disclosure

5.1 With Chartered Accountants

When you book a service, we share necessary information (name, contact details, service requirements) with the Chartered Accountant you select to facilitate service delivery.

5.2 With Service Providers

We share limited data with trusted third-party service providers:

• Razorpay: Payment processing (PCI-DSS compliant)
• SendGrid: Transactional email delivery
• AWS: Cloud hosting and storage (India region)
• PostHog: Privacy-first analytics (anonymized data)

5.3 With Authorities

We may share data with:

• ICAI: For verification of CA credentials
• Tax Authorities: As required by law (GST, Income Tax Department)
• Law Enforcement: When legally obligated (court orders, subpoenas)

5.4 We Do NOT Sell Your Data

We never sell, rent, or trade your personal data to third parties for marketing purposes.

6. Your Rights Under DPDP Act

Under the Digital Personal Data Protection Act, 2023, you have the following rights:

To exercise your rights, contact us at: privacy@taxnao.com

We will respond to your request within 30 days.

7. Cookies and Tracking

We use cookies and similar technologies to:

• Essential Cookies: Maintain your session, authentication, and preferences
• Analytics Cookies: Understand usage patterns (Google Analytics, PostHog - anonymized)
• Functional Cookies: Remember your language and location preferences

You can control cookies through your browser settings. Note that disabling essential cookies may limit site functionality.

8. Children's Privacy

TaxNAO is not intended for users under 18 years of age. We do not knowingly collect data from minors. If you believe we have collected data from a minor, please contact us immediately.

9. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be notified via email or prominent site notice. Continued use after changes constitutes acceptance of the updated policy.

Previous versions are archived and available upon request.

10. Contact Us