Security & how it works
We don’t use buzzwords. Here’s what actually happens to your data and how we protect it.
When you upload a file
Your Form 16, AIS, or other documents are sent over HTTPS (encrypted in transit). They’re stored on Google Cloud in India. We use them only to extract the figures we need for your ITR and then we delete the originals within 30 days — or immediately if you choose “Delete all my data” in the filing flow.
Encryption
Data at rest is encrypted with AES-256. Data in transit uses TLS (the same padlock you see in the browser). We don’t do anything fancy — we use standard, well-understood practices.
Payment
We use Razorpay for payments. We never see or store your card details. Razorpay is PCI-DSS compliant and handles the entire payment flow on their side.
Who can see your data
Only our systems and the people who need to fix bugs or run the service. We don’t sell data, we don’t share it with advertisers, and we don’t use it for marketing. For the full legal wording, see our Privacy Policy.
How the ITR is generated
You upload documents and fill in a few details. Our systems parse the documents, run tax calculations (same rules as the IT department), and produce a JSON file that matches the official schema. You download that file and upload it to incometax.gov.in yourself. We don’t submit on your behalf — you stay in control.
Questions? support@taxclawd.in. For grievances: grievance@taxclawd.in.