Privacy Policy

Categories of Personal Data

We collect the following categories of personal and business data to provide our compliance automation services.

• Business registration details (GSTIN, PAN, CIN, LLPIN)
• Financial transaction data (bank statements, UPI IDs, cheque images)
• Invoice and billing records (sales invoices, purchase bills, credit notes)
• Contact and communication data (email, mobile number, WhatsApp business number)
• Device and log information (IP address, browser type, access timestamps)

Purpose of Processing

Your data is processed for the following lawful purposes:

• Automated preparation and filing of GSTR-1, GSTR-3B, and annual GST returns
• TDS return generation and Form 16 / 16A issuance
• Bank-statement reconciliation and cash-flow analytics
• Tax liability computation and advance-tax reminders
• E-invoice and e-way bill generation via government APIs
• Fraud detection and compliance risk scoring
• Customer support and service-related communications

Data Recipients and Transfers

We may disclose your data to the following categories of recipients:

• Government tax portals (GSTN, TRACES, Income Tax e-Filing, ICEGATE)
• Certified cloud infrastructure providers located within India
• Statutory auditors and chartered accountants authorised by you
• Payment gateways for subscription billing

Data Retention

We retain your personal data for as long as your account is active or as needed to provide services and comply with legal obligations. Upon account closure, data is archived for 7 years as mandated by Indian tax laws and then securely deleted.

Security Measures

We implement industry-standard security measures including AES-256 encryption at rest, TLS 1.3 in transit, role-based access control, and regular penetration testing. Our infrastructure is hosted in ISO 27001-certified data centres.

Cookies and Tracking

We use cookies and similar technologies for the following purposes:

• Authentication and session management
• Preference storage (language, dashboard layout)
• Analytics and performance monitoring
• Security and fraud prevention
• Feature experimentation (A/B testing)
• Marketing campaign attribution

You can manage cookie preferences through your browser settings or our cookie consent banner.

Children's Privacy

FileKaro.ai is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us immediately.

Policy Updates

We may update this Privacy Policy from time to time. Material changes will be notified via email and a prominent banner on the platform. The 'Last Updated' date at the top reflects the most recent revision.

Contact Us

For general privacy inquiries, please email privacy@filekaro.ai. For formal complaints, please contact our Grievance Officer using the details in Section 10.

Grievance Officer Details

In accordance with the DPDP Act, 2023, the following Grievance Officer has been appointed:

Submit a grievance