1. Information We Collect
When you use ComplyBuddy's services, we collect the following types of information:
- Personal Information: Name, email address, phone number, PAN, Aadhaar number, address, and other identity documents required for compliance filings.
- Business Information: Business name, GSTIN, CIN, registration details, financial statements, and related documents.
- Payment Information: Transaction details processed via Razorpay. We do not store card or bank account details on our servers.
- Usage Data: IP address, browser type, pages visited, and session data for security and service improvement.
2. How We Use Your Information
We use the information collected to:
- Provide tax and compliance filing services on your behalf
- Process payments and generate invoices
- Communicate service updates, reminders for due dates, and important notices
- Maintain client portal access and document management
- Comply with applicable laws and regulatory requirements
- Improve our services and website experience
3. Data Sharing
We do not sell, rent, or trade your personal information. We share data only:
- With Government Authorities: As required for GST, Income Tax, MCA, and other regulatory filings on your behalf.
- With Payment Processors: Razorpay for payment processing (governed by their privacy policy).
- With Service Partners: Chartered Accountants and authorized professionals engaged to complete your work, under strict confidentiality obligations.
- Legal Compliance: When required by law, court order, or government authority.
4. Data Security
We implement industry-standard security measures including SSL encryption, secure cloud storage (Supabase/AWS), access controls, and regular security reviews. However, no internet transmission is 100% secure, and we cannot guarantee absolute security.
5. Data Retention
We retain your data for as long as necessary to provide our services and comply with legal obligations. Tax and compliance records are typically retained for 7 years as required by Indian law. You may request deletion of your account data by contacting us, subject to legal retention requirements.
6. Your Rights
Under the Digital Personal Data Protection Act, 2023 and other applicable laws, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate or incomplete data
- Request deletion of your data (subject to legal requirements)
- Withdraw consent for non-essential data processing
To exercise these rights, contact us at admin.complybuddy@gmail.com.
7. Cookies
We use cookies for session management (login authentication) and basic analytics. No third-party advertising cookies are used. You can disable cookies in your browser settings, but this may affect functionality.
8. Children's Privacy
Our services are intended for businesses and adults (18+). We do not knowingly collect personal data from minors.
9. Changes to This Policy
We may update this policy periodically. Significant changes will be communicated via email or a prominent notice on our website. Continued use of our services constitutes acceptance of the updated policy.