Privacy

Account details (name, email or phone), and the tax data you bring in to file your return: your PAN, the documents you upload (Form 16, AIS, 26AS, broker and bank statements), the income and deduction figures derived from them, and the billing metadata needed to charge per return.

Only to read and reconcile your figures, compute your tax, prepare your return, and, once you approve, file it. We do not sell your data and we do not train shared models on your private tax data. Your documents are used for your return and nothing else.

Sensitive identifiers (PAN, bank account, IFSC) are encrypted at rest with authenticated envelope encryption (AES-256-GCM) and are never returned to the browser in full. Every record is scoped to you and enforced at the database with row-level security, so no one else can read your data.

To file, the relevant return data is sent to the income-tax department through an authorised channel (the portal / an e-Return Intermediary), and only after you approve. We rely on sub-processors for hosting and AI document reading under confidentiality terms; they may not use your data for their own purposes.

You can export or delete your data and your account at any time. For data-protection requests under the DPDP Act or comparable laws, contact privacy@spinalfluid.ai and we will act within the statutory window.