Privacy Policy

Last Updated: April 13, 2026

1. Introduction

TaxSurge CA ("TaxSurge CA", "we", "us", or "our") operates the website https://taxsurgeca.com and related services for tax filing, GST services, financial advisory, and Chartered Accountant (CA) consultation in India.

This Privacy Policy explains how we collect, use, disclose, and protect your personal data when you use our platform, communicate with us, or access our services.

2. Information We Collect

Personal Information

  • Name, email address, phone number, and profile details.
  • PAN, date of birth, and other KYC/identity details you provide for tax compliance.
  • Communication records when you contact support or request consultation.

Financial and Tax Information

  • Income details, deductions, exemptions, capital gains, GST-related data, and filing history shared by you.
  • Tax documents uploaded by you (for example, Form 16, investment proofs, invoices, and returns).
  • Payment metadata such as transaction IDs, amount, status, and timestamps from payment processors.

Usage and Technical Information

  • IP address, browser type, device information, operating system, and access logs.
  • App activity such as page views, feature usage, and session patterns.

Cookies and Similar Technologies

We use cookies, local storage, and similar technologies to maintain sessions, improve performance, remember preferences, and understand usage trends.

3. How We Use Information

We process your data to:

  • Provide tax filing, GST, financial advisory, and CA consultation services.
  • Prepare, review, and support tax and compliance workflows requested by you.
  • Process payments, issue invoices, and maintain transaction records.
  • Respond to your queries, provide support, and send service-related updates.
  • Improve platform reliability, user experience, and service quality.
  • Prevent fraud, misuse, unauthorized access, and security incidents.
  • Comply with legal, regulatory, and audit requirements.

4. Legal Basis (Digital Personal Data Protection Act, 2023 Compliance)

We process personal data in accordance with the Digital Personal Data Protection Act, 2023 ("DPDP Act") and applicable notified rules in India.

Depending on the context, we rely on one or more of the following lawful grounds:

  • Your consent for specific processing activities.
  • Processing necessary to provide services requested by you, including tax/GST filing and CA support.
  • Compliance with legal obligations under applicable Indian tax, accounting, and regulatory laws.
  • Legitimate uses permitted under applicable law, including fraud prevention and security.

5. Cookies and Tracking Technologies

We use cookies and similar technologies for:

  • Essential operations: login/session continuity and security controls.
  • Performance and analytics: understanding traffic, feature usage, and service quality.
  • Preference management: remembering settings and improving user experience.

You can manage cookie preferences through your browser settings. Disabling certain cookies may affect platform functionality.

6. Data Sharing and Disclosure

We do not sell your personal data. We share data only when necessary to provide services, with your consent, or where required by law.

We may share information with:

  • Authorized CAs, tax professionals, and internal operations teams working on your case.
  • Payment gateways and payment processing partners for secure transaction handling.
  • Technology providers such as cloud hosting, document storage, communication, and support tools.
  • Authentication and identity providers.
  • Analytics providers for aggregated usage insights and platform improvement.
  • Government authorities, courts, regulators, or law enforcement when legally required.

All such sharing is subject to contractual and/or legal safeguards appropriate to the nature of data.

7. Data Retention

We retain personal data only for as long as necessary for the purposes described in this Policy, unless a longer retention period is required or permitted by law.

  • Account and service records are retained while your account is active and as reasonably required after closure.
  • Tax, GST, payment, and compliance records may be retained for legally required periods under Indian law.
  • When data is no longer required, we delete or anonymize it using reasonable safeguards.

8. Data Security

We implement reasonable technical and organizational safeguards, including:

  • Encryption in transit and secure server infrastructure.
  • Access controls, role-based restrictions, and need-to-know access.
  • Secure authentication practices and transaction verification controls.
  • Monitoring, logging, and periodic security reviews.
  • Incident response procedures for handling suspected data breaches.

Fraud and Phishing Awareness

TaxSurge CA will never ask for your passwords, OTPs, full card details, or similar sensitive credentials through unsolicited emails, calls, or messages. If you receive suspicious communication claiming to be from us, contact [email protected] immediately.

9. User Rights

Subject to applicable law, including the DPDP Act, you may have the right to:

  • Request access to personal data we hold about you.
  • Request correction or updating of inaccurate or incomplete data.
  • Request deletion/erasure of personal data, subject to legal and compliance retention requirements.
  • Withdraw consent for specific processing activities.
  • Seek grievance redressal regarding how your data is handled.

To exercise these rights, write to [email protected] from your registered email address.

10. Third-Party Links

Our website or communications may include links to third-party websites or services. We are not responsible for the privacy practices or content of such third parties. Please review their privacy policies before sharing your data.

11. Children's Privacy

Our services are intended for users who are legally competent to enter into binding arrangements under applicable law. We do not knowingly process personal data of children in a manner prohibited by law.

Where processing of a child's data is required, we follow applicable legal requirements, including verifiable parental/guardian consent where mandated.

12. Changes to Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or operational practices. We will post the revised version on this page and update the "Last Updated" date.

13. Contact Information

For privacy-related questions, requests, or grievances, contact: