Privacy Policy

1. Overview

This Privacy Policy applies to all services provided by Contactly ("we", "our", or "us"), including our website, mobile application, and professional advisory services covering income tax filing, GST compliance, company registration, accounting, and related legal and financial services.

By accessing or using our services, you acknowledge that you have read, understood, and agree to the terms described in this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of our services.

2. Information We Collect

We collect information necessary to provide you with accurate, legally compliant tax and business advisory services. The types of information we collect include:

2.1 Personal Identification Information

• Full name, date of birth, PAN card number, and Aadhaar number
• Residential address, email address, and phone number
• Bank account details and financial statements where required
• Business registration details including CIN, GSTIN, and TAN

2.2 Financial & Tax Information

• Income details, salary slips, Form 16, and TDS certificates
• Business income, profit & loss statements, and balance sheets
• Investment declarations, property details, and capital gains records
• GST transaction records and invoices

2.3 Technical & Usage Data

• IP address, browser type, and device information
• Pages visited, session duration, and click patterns on our website
• Log files, cookies, and analytics identifiers

3. How We Use Your Data

The information we collect is used exclusively to deliver and improve our professional services. We do not sell your data to third parties under any circumstances.

• To prepare and file your income tax returns, GST returns, and other statutory filings accurately
• To register your business, trademark, or other legal entities with appropriate government authorities
• To communicate with you regarding your service status, compliance deadlines, and important tax notifications
• To send relevant updates on tax law changes, GST circulars, and compliance requirements
• To improve our platform, diagnose technical issues, and enhance user experience
• To comply with our legal obligations under the Income Tax Act, GST Act, Companies Act, and other applicable laws

We process your personal data on the legal basis of contractual necessity, legal obligation, and legitimate interest to improve our services and prevent fraud.

4. Data Sharing & Disclosure

We treat all client information as strictly confidential. We may share your information only in the following limited circumstances:

4.1 Government & Regulatory Authorities

We share your data with the Income Tax Department, GST Network (GSTN), Ministry of Corporate Affairs (MCA), and other regulatory bodies solely for the purpose of filing your returns and statutory documents on your behalf.

4.2 Trusted Service Partners

We work with carefully vetted technology partners who process data on our behalf under strict data processing agreements. These partners are prohibited from using your data for any other purpose.

4.3 Legal Requirements

We may disclose your information when required by law, court order, or regulatory authority, or to protect the rights, property, or safety of Contactly, our clients, or the public.

5. Data Security

We implement industry-standard security measures to protect your personal and financial information from unauthorized access, alteration, or disclosure.

• 256-bit SSL/TLS encryption for all data transmitted through our platform
• Encrypted storage for all sensitive documents and financial records
• Role-based access controls ensuring only authorized personnel access client data
• Regular security audits, vulnerability assessments, and penetration testing
• Multi-factor authentication for all internal systems
• Secure data centers with physical access controls and redundant backups

While we employ rigorous security practices, no transmission over the internet is completely secure. Please notify us immediately at security@contactly.in if you suspect any unauthorized access.

6. Cookies & Tracking Technologies

Our website uses cookies and similar tracking technologies to provide a better browsing experience and to understand how our site is used.

6.1 Types of Cookies We Use

• Essential Cookies: Required for the website to function properly, including session management and security features
• Analytics Cookies: Help us understand visitor behavior using tools like Google Analytics (data is anonymized)
• Preference Cookies: Remember your settings and preferences across visits
• Marketing Cookies: Used to deliver relevant advertisements about our services (can be opted out)

You can control cookie settings through your browser preferences. Note that disabling certain cookies may affect the functionality of our website.

7. Data Retention

We retain your personal and financial data for as long as necessary to provide our services and to comply with applicable legal, regulatory, and accounting obligations.

• Tax-related documents and returns: minimum 8 years as required under the Income Tax Act
• GST records and invoices: minimum 6 years as required under the CGST Act
• Company registration documents: for the duration of the company's existence plus applicable statutory periods
• Account and contact information: for the duration of your engagement plus 3 years

Upon expiry of the applicable retention period, your data will be securely deleted or anonymized in accordance with our data disposal procedures.

8. Your Rights

Under applicable data protection laws, including the Digital Personal Data Protection (DPDP) Act, 2023, you have the following rights with respect to your personal data:

• Right to Access: Request a copy of the personal data we hold about you
• Right to Correction: Request correction of inaccurate or incomplete personal data
• Right to Erasure: Request deletion of your data, subject to our statutory retention obligations
• Right to Withdraw Consent: Withdraw consent for data processing where consent is the legal basis
• Right to Grievance Redressal: Lodge a complaint with our Data Protection Officer or the Data Protection Board of India

To exercise any of these rights, please submit a written request to our Data Protection Officer at dpo@contactly.in. We will respond within 30 days of receiving your request.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or best practices. We will notify you of material changes by:

• Posting the updated policy on our website with a revised "Last Updated" date
• Sending an email notification to your registered email address for significant changes
• Displaying a prominent notice on our platform when you next log in

We encourage you to review this policy periodically. Continued use of our services after any changes constitutes your acceptance of the revised policy.

10. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please reach out to us through any of the following channels: