Privacy Policy

Last updated: March 2026

TaxInvestInsure ("we", "our", "us"), operated by SMART MONEY, is committed to protecting the privacy and security of your personal and financial information. This Privacy Policy explains what data we collect, how we use it, and the steps we take to keep it safe.

By using our website and services, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

We collect the following types of information:

  • Identity information: Name, date of birth, PAN number, Aadhaar number (collected only for ITR filing purposes)
  • Contact information: Email address, phone number, WhatsApp number, postal address
  • Financial information: Bank account details, income details, investment information, tax documents
  • Documents: Form 16, rent receipts, investment proofs, and other documents you upload
  • Usage data: IP address, browser type, pages visited, timestamps of access

2. How We Use Your Information

We use the information we collect to:

  • Provide income tax return filing services
  • Offer mutual fund advisory and investment recommendations
  • Assist with insurance planning and NPS advisory
  • Communicate with you about your service requests and account status
  • Comply with legal obligations under the Income Tax Act and other applicable Indian laws
  • Maintain an audit trail of document access for security purposes

3. Data Storage & Security

Your data is stored on secure servers hosted in India (Mumbai region) on Oracle Cloud Infrastructure. We implement the following security measures:

  • All uploaded documents are encrypted at rest using AES-256 (Fernet) encryption
  • Sensitive fields (PAN, Aadhaar, bank account numbers) are encrypted individually at the database level
  • All data is transmitted over HTTPS (TLS 1.2+)
  • Access to your documents is restricted to you and the CA(s) assigned to your account
  • Every document access event is logged with user, IP address, and timestamp
  • Regular database backups are taken and stored securely

4. Sharing Your Information

We do not sell, trade, or rent your personal information to third parties. We may share information only in the following circumstances:

  • Service delivery: With the CA professionals within our team who are handling your account
  • Legal compliance: If required by law, court order, or government authority (e.g., Income Tax Department)
  • Business transfers: In the unlikely event of a merger or acquisition, with appropriate data protection obligations

We do not share your data with insurance companies, mutual fund companies, or any third party without your explicit consent.

5. Cookies

We use only essential cookies required for the functioning of the website — specifically, session cookies for authentication and CSRF protection. We do not use advertising or tracking cookies. We do not use Google Analytics or any third-party analytics on authenticated pages.

6. Your Rights

Under India's Digital Personal Data Protection Act (DPDP Act) 2023, you have the right to:

  • Access: Request a copy of the personal data we hold about you
  • Correction: Update inaccurate or incomplete information via your profile page
  • Erasure: Request deletion of your data (subject to legal retention requirements)
  • Grievance redressal: Contact us with any data protection concerns

To exercise any of these rights, contact us at our contact page.

7. Data Retention

We retain your data for as long as your account is active and for a period of 7 years after account closure, in compliance with Indian tax and accounting regulations. After this period, your personal data will be securely deleted or anonymised.

Uploaded documents may be retained for longer if required by applicable law (e.g., income tax records).

8. Children's Privacy

Our services are intended for individuals aged 18 and above. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, please contact us immediately and we will take steps to delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of significant changes via email or a notice on the platform. The "Last updated" date at the top of this page will be revised accordingly. Continued use of our services after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your data, please reach out:

  • Website: Contact page
  • Location: Nagpur, Maharashtra, India