Privacy Policy

Your privacy is our priority. Learn how we protect your data under India's DPDP Act 2023.

Last Updated: November 20, 2025

Beta Product Notice

This product is currently in beta. As an active development stage, you may encounter breaking changes, incomplete features, or unexpected behaviour. We appreciate your patience and feedback.

1. Introduction

This Privacy Policy describes how NAO Technologies Private Limited ("TaxNAO - a project of NAO Technologies", "we", "us", or "our") collects, uses, stores, and protects your personal data in accordance with the Digital Personal Data Protection Act, 2023 (DPDP Act) and other applicable Indian laws.

By using TaxNAO, you consent to the collection and use of your personal data as described in this Privacy Policy.

2. Data We Collect

2.1 Personal Information

  • Name, email address, phone number
  • PAN (Permanent Account Number)
  • GSTIN (for business clients)
  • Address and location data

2.2 Professional Information (for Chartered Accountants)

  • ICAI Membership Number
  • Professional credentials and certifications
  • Work experience and specializations
  • Profile photo and bio

2.3 Usage Data

  • IP address, browser type, device information
  • Pages visited, time spent on site
  • Referral source
  • Cookies and similar tracking technologies

2.4 Payment Information

  • Payment method details (processed securely by Razorpay)
  • Billing address
  • Transaction history

3. How We Use Your Data

We use your personal data for the following purposes:

  • Service Delivery: Facilitate connections between clients and Chartered Accountants
  • Account Management: Create and manage user accounts
  • Payments: Process subscription fees and service payments
  • Verification: Verify ICAI membership for Chartered Accountants
  • Communication: Send booking confirmations, notifications, and service updates
  • Compliance: Comply with tax regulations, ICAI requirements, and legal obligations
  • Improvement: Analyze usage patterns to improve our platform
  • Security: Detect and prevent fraud, abuse, and security threats

4. Data Storage and Security

Data Localization: Your personal data is stored on secure servers located in India (AWS Mumbai region) in compliance with Indian data protection requirements.

Data Retention: We retain your personal data for as long as your account is active, plus 7 years thereafter for tax compliance and audit purposes as required by Indian law.

Security Measures: We implement industry-standard security measures including:

  • Encryption of data in transit (SSL/TLS) and at rest
  • Access controls and authentication
  • Regular security audits and monitoring
  • Secure backup and disaster recovery

5. Data Sharing and Disclosure

5.1 With Chartered Accountants

When you book a service, we share necessary information (name, contact details, service requirements) with the Chartered Accountant you select to facilitate service delivery.

5.2 With Service Providers

We share limited data with trusted third-party service providers:

  • Razorpay: Payment processing (PCI-DSS compliant)
  • SendGrid: Transactional email delivery
  • AWS: Cloud hosting and storage (India region)
  • PostHog: Privacy-first analytics (anonymized data)

5.3 With Authorities

We may share data with:

  • ICAI: For verification of CA credentials
  • Tax Authorities: As required by law (GST, Income Tax Department)
  • Law Enforcement: When legally obligated (court orders, subpoenas)

5.4 We Do NOT Sell Your Data

We never sell, rent, or trade your personal data to third parties for marketing purposes.

6. Your Rights Under DPDP Act

Under the Digital Personal Data Protection Act, 2023, you have the following rights:

Right to Access

Request a copy of your personal data we hold

Right to Correction

Request correction of inaccurate or incomplete data

Right to Erasure

Request deletion of your data (subject to legal retention requirements)

Right to Data Portability

Request your data in a machine-readable format

Right to Withdraw Consent

Withdraw consent for data processing (may limit service access)

Right to Complain

Lodge a complaint with the Data Protection Board of India

To exercise your rights, contact us at: [email protected]

We will respond to your request within 30 days.

7. Cookies and Tracking

We use cookies and similar technologies to:

  • Essential Cookies: Maintain your session, authentication, and preferences
  • Analytics Cookies: Understand usage patterns (Google Analytics, PostHog - anonymized)
  • Functional Cookies: Remember your language and location preferences

You can control cookies through your browser settings. Note that disabling essential cookies may limit site functionality.

8. Children's Privacy

TaxNAO is not intended for users under 18 years of age. We do not knowingly collect data from minors. If you believe we have collected data from a minor, please contact us immediately.

9. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be notified via email or prominent site notice. Continued use after changes constitutes acceptance of the updated policy.

Previous versions are archived and available upon request.

10. Contact Us

For Privacy-Related Inquiries:

NAO Technologies Private Limited
Block A, Connaught Place
Connaught Place
New Delhi, Delhi 110001
India

Email: [email protected]

Phone: +91 11 1234 5678

Disclaimer

This Privacy Policy is provided for informational purposes and constitutes a good faith effort to comply with the Digital Personal Data Protection Act, 2023. It should be reviewed by a qualified legal professional before final publication. TaxNAO reserves the right to seek legal counsel for compliance verification.