TaxSmart India · Last updated: March 2026 · DPDP Act 2023 Compliant
✅ Short version: We never store your documents or personal financial data. Everything is processed in memory and deleted immediately after extraction. We don't sell data. We don't run ads. Zero persistent storage.
As required under the Digital Personal Data Protection Act 2023 (DPDP Act), we have designated a Grievance Officer for data-related complaints:
You may contact the Grievance Officer to: request access to your data, request correction of inaccurate data, request erasure of data, or raise any data protection complaint.
When you upload documents for AI extraction:
When you use the manual calculator (without uploading documents), no data ever leaves your browser.
We follow a strict zero-retention policy for financial documents. The table below specifies retention periods for each data category:
| Data Type | Retention Period | Storage Location |
|---|---|---|
| Uploaded PDF documents (Form 16, 26AS, AIS) | 0 seconds — deleted immediately after extraction | Server RAM only, never disk |
| AI-extracted financial data (salary, TDS, etc.) | 0 seconds — returned to browser, not stored | Your browser only |
| Server access logs (IP, timestamp, endpoint) | Up to 30 days (Render hosting standard logs) | Render.com servers |
| Rate limiting records (IP address) | 1 hour (resets automatically) | Server memory |
| Optional reminder email (if opted in) | Until you unsubscribe or request deletion | Secure email service |
To request deletion of any data we may hold about you, contact our Grievance Officer at taxsmart.grievance@gmail.com. Requests are processed within 7 business days.
Your uploaded PDFs are held in server RAM only during AI processing (typically 10–45 seconds). They are:
In the unlikely event of a security breach involving personal data, TaxSmart will:
Given our zero-storage architecture (no documents written to disk, no database of financial data), the practical risk of a meaningful data breach is extremely low. There is no database to breach.
We use Google Gemini AI to read your PDF documents and extract tax data. When you upload a document:
Under the Digital Personal Data Protection Act 2023, our legal basis for processing your data is:
You may withdraw consent at any time by simply not uploading documents. The manual calculator works entirely without data processing.
We use no tracking cookies, no analytics platforms, no advertising networks. TaxSmart is a clean tool built for you, not to monetise your attention.
Your browser may store form values in localStorage so you don't lose your work — this data never leaves your device and you can clear it at any time through your browser settings.
As a Data Principal under the DPDP Act 2023, you have the right to:
To exercise any of these rights, contact: taxsmart.grievance@gmail.com
TaxSmart is a planning and estimation tool only. It is not a substitute for professional CA advice. Tax calculations are based on publicly available rules for FY 2025–26 and may not account for all individual circumstances or recent CBDT notifications.
Always verify your final tax liability with a qualified Chartered Accountant before filing your ITR. TaxSmart accepts no liability for tax penalties, notices, or financial loss arising from reliance on its outputs.
We may update this Privacy Policy periodically. The date at the top of this page reflects the most recent update. Material changes will be announced on the main TaxSmart page.
Grievance Officer: Vedant Agrawal
Email: taxsmart.grievance@gmail.com
Response time: Within 7 business days
If your complaint is not resolved within 30 days, you may escalate to the Data Protection Board of India once established under the DPDP Act 2023.
For general questions: github.com/vedant4557-dev/taxai