Privacy Policy

01In short

efiletax is a brand and trade name under which Starkbros Consultancy Private Limited operates efiletax.in, to help you file income-tax returns, GST returns, company and ROC filings, and related compliances. To do this we handle sensitive financial and identity information, including your PAN, Aadhaar, income and bank details, and documents you upload.

This Policy explains what we collect, why we collect it, who we share it with, and the rights you have under the Digital Personal Data Protection Act, 2023 and the DPDP Rules, 2025. We do not sell your personal data.

02Who we are

This Privacy Policy ("Policy") is issued by Starkbros Consultancy Private Limited ("Starkbros", "efiletax", "we", "us" or "our"), a company incorporated under the Companies Act, 2013, which operates the website, web application and mobile applications at efiletax.in and related sub-domains (together, the "Platform") and the services offered through them (the "Services").

Legal name

Starkbros Consultancy Private Limited

CIN

U74999AP2020PTC114543

PAN

ABDCS6595F

Registered office

6-15-38, Sri Sainadh Complex, 5th Floor15/1 Arundelpet, GunturAndhra Pradesh 522002, India

Operational office

1227, Kambar Colony, 18th Main RoadAnna Nagar West, ChennaiTamil Nadu 600040, India

Contact

support@efiletax.insupport@efiletax.in

Under Indian data-protection law we are the Data Fiduciary that determines the purpose and means of processing your personal data, and you are the Data Principal whose data is processed.

03Scope and consent

This Policy applies to all personal data we collect through the Platform, our Services, our offices, and any communication you have with us. By creating an account, accessing the Platform, or giving us your information, you confirm that you have read and understood this Policy.

Where we rely on your consent, that consent is free, specific, informed, unconditional and unambiguous, and is given through a clear affirmative action. You may withdraw it at any time — see Your rights.

If you provide information about another person (an employee, family member, client or co-director), you confirm that you are authorised to do so and that you have made them aware of this Policy.

04Definitions

• Personal data — any data about an individual who is identifiable by or in relation to such data.
• Data Principal — the individual the personal data relates to. For a child, it includes the parent or lawful guardian; for a person with disability, their lawful guardian.
• Data Fiduciary — the person who determines the purpose and means of processing. Here, Starkbros.
• Data Processor — anyone who processes personal data on our behalf.
• Processing — any operation performed on personal data, including collection, storage, use, sharing, disclosure or erasure.

05Personal data we collect

What we collect depends on which Services you use.

Identity and account data

• Name, date of birth, gender, photograph, and login credentials.
• PAN, Aadhaar number (where you choose to provide it for e-verification or KYC), passport or other government identifiers, and Digital Signature Certificate (DSC) details.
• Income-tax portal, GST portal, TRACES and MCA/ROC login identifiers that you provide so we can file or retrieve records on your behalf.

Financial and tax data

• Income details, salary, Form 16 and 16A, Form 26AS / AIS / TIS data, capital-gains statements, business and profession income, deductions and investment proofs.
• Bank account number and IFSC (for refund credit and verification), GST turnover and invoice data, TDS details, and other financial records you upload or authorise us to access.

Documents and correspondence

• Files you upload — returns, challans, notices, ledgers, incorporation documents, agreements.
• Messages, emails, chat transcripts and call records with our team.

Payment data

• Billing details and transaction records. Card, UPI and net-banking credentials are handled directly by RBI-authorised payment gateway partners — we do not store full card numbers or payment passwords.

Technical and usage data

• IP address, device and browser type, operating system, unique device identifiers, pages viewed, features used, referring URLs, and cookies and similar technologies.

06How we collect it

• Directly from you — when you register, complete forms, upload documents, make payments or contact us.
• Automatically — through cookies and analytics as you use the Platform.
• From authorised third parties — government portals (Income Tax Department, GSTN, TRACES, MCA) accessed using credentials or consent you provide, and our service providers, where the law permits.

07Why we use your data

We process personal data only for lawful purposes, including to:

• Create and manage your account and verify your identity.
• Prepare, review and file income-tax returns, GST returns, ROC and MCA filings and other compliances, and to e-verify and track them.
• Retrieve and reconcile data from government portals you authorise us to access.
• Provide consultancy, respond to notices, and offer support.
• Process payments, issue invoices and manage refunds.
• Send service updates and filing deadlines, and — where you have opted in — marketing about our Services.
• Detect and prevent fraud, secure the Platform, and meet legal and regulatory obligations.
• Improve and develop our Services, including through aggregated or de-identified analytics.

08Lawful basis for processing

We process personal data on one or more bases recognised under the Digital Personal Data Protection Act, 2023: (a) your consent; and (b) certain legitimate uses, such as where you voluntarily provide data for a specified purpose and have not indicated that you object, where processing is needed to comply with law or a court order, or to respond to a medical or safety emergency.

For tax and financial filings, our primary basis is your consent together with the performance of the Services you have requested.

09How we share and disclose data

• Government and regulatory portals — the Income Tax Department, GSTN, TRACES, MCA/ROC, UIDAI (for permitted Aadhaar-based verification) and similar authorities, to complete the Services you request.
• Service providers and Data Processors — cloud hosting, payment gateways, communication (email, SMS, WhatsApp), analytics and support vendors who process data on our behalf under written contracts and confidentiality obligations.
• Professional advisers — chartered accountants, company secretaries or tax practitioners engaged to deliver your Services.
• Legal and safety — where required by law, regulation or legal process, or to protect the rights, safety and property of Starkbros, our users or the public.
• Business transfers — in a merger, acquisition, restructuring or sale of assets, with this Policy continuing to apply to your data.

10Third-party links and integrations

The Platform links to and integrates with third-party services, including government portals and payment gateways. We are not responsible for their privacy practices, and we encourage you to read their policies. Your use of a government portal is also governed by the terms of the relevant authority.

11Cookies

We use cookies and similar technologies to keep you signed in, remember preferences, secure the Platform and understand usage. You can control cookies through your browser settings, though disabling some will affect how the Platform works. Where required, we ask for your consent to non-essential cookies. Our Cookie Policy explains this in detail.

12How we protect your data

We apply reasonable security safeguards designed to protect personal data against unauthorised access, use, alteration, disclosure or loss — including encryption in transit, access controls, authentication, logging and periodic review — consistent with the DPDP Rules, 2025 and the Information Technology Act, 2000 framework.

No method of transmission or storage is completely secure, and you are responsible for keeping your login credentials confidential. If a personal data breach occurs, we will notify the Data Protection Board of India and affected Data Principals in the manner and within the timelines the law requires.

13Your rights as a Data Principal

Subject to applicable law, you have the right to:

• Access — obtain a summary of the personal data we process and what we do with it.
• Correct and update — have inaccurate or incomplete data corrected or completed.
• Erase — ask us to delete your data, unless we must retain it by law or for a legitimate purpose.
• Withdraw consent — at any time, and as easily as it was given. This does not affect processing already carried out.
• Raise a grievance — through a readily available means, described below.
• Nominate — appoint another individual to exercise your rights if you die or become incapacitated.

To exercise any right, write to support@efiletax.in from your registered email address, or use the request option inside your account. We may need to verify your identity before acting on a request.

14How long we keep it

We retain personal data only as long as necessary for the purposes in this Policy or as the law requires. Tax, GST, corporate and accounting records are typically retained for the periods mandated under the Income-tax Act, 1961, the GST laws and the Companies Act, 2013 — commonly up to eight years, and longer where a proceeding is pending.

When data is no longer needed and no legal obligation to keep it applies, we delete or anonymise it.

15Cross-border transfer

We primarily store and process personal data on servers located in India. Where processing or storage happens outside India — for example through a cloud or communication provider — we do so in line with the Digital Personal Data Protection Act, 2023 and any restrictions notified by the Central Government, and we require appropriate contractual and security safeguards.

16Children's data

The Services are intended for individuals aged 18 and above. We do not knowingly process a child's personal data except where a parent or lawful guardian gives verifiable consent as the law requires, and we do not carry out tracking, behavioural monitoring or targeted advertising directed at children.

If you believe a child's data has been given to us without proper consent, contact support@efiletax.in and we will act on it.

17Grievance redressal

Grievance Officer

Grievance Officer

Designation

Grievance Officer & Data Protection Contact

Email

support@efiletax.in

Phone

9696 160160

Address

1227, Kambar Colony, 18th Main RoadAnna Nagar West, ChennaiTamil Nadu 600040, India

Hours

Monday to Friday, 10:00 – 18:00 IST

We acknowledge grievances within 48 hours and aim to resolve them within the timelines prescribed by applicable law.

If your grievance is not resolved to your satisfaction, you may escalate it to the Data Protection Board of India under the Digital Personal Data Protection Act, 2023 and the DPDP Rules, 2025.

18Changes to this Policy

We update this Policy as law, technology or our practices change. The revised version appears here with a new "Last updated" date and version number, and where a change is significant we give additional notice. Continued use of the Services after the effective date means you accept the revised Policy.

19Contact us

For any question about this Policy or our data practices, write to support@efiletax.in or support@efiletax.in, or contact Starkbros Consultancy Private Limited at the addresses above.