Privacy Policy
Effective Date: 14/05/2026
Last Updated: 14/05/2026
MyFintax Advisors Private Limited ("we", "us", "our") operates StaxOps at staxops.myfintax.in ("Platform"). This Privacy Policy explains how we collect, use, store, share, and protect your personal data and business data.
This Policy complies with the Digital Personal Data Protection Act, 2023 ("DPDP Act"), the Information Technology Act, 2000 and IT (Reasonable Security Practices and Procedures) Rules, 2011, and the General Data Protection Regulation ("GDPR") for users in the European Union.
By using the Platform, you consent to the practices described in this Policy.
1. Data Controller
MyFintax Advisors Private Limited
Platform: staxops.myfintax.in
Contact: support@myfintax.in
Grievance Officer / Data Protection Officer: Authorised Representative, MyFintax Advisors Private Limited
2. Personal Data We Collect
2.1 Account Registration Data: Full name of authorised representative; email address; phone number; password (stored as irreversible cryptographic hash — never plain text).
2.2 Company Data: Company name, CIN; registered office address; director details (names, DIN, PAN); TAN; GST registration number and state.
2.3 Financial and Compliance Data: Invoices, revenue/expense transactions, TDS records, compliance filing status.
2.4 Automatically Collected Data: IP address, browser type, OS, pages visited, login/logout timestamps, session duration.
2.5 AI Interaction Data: Queries submitted to AI features and documents generated.
2.6 Payment Data: We do not collect or store card, UPI, or bank account details. Payments are processed entirely by Razorpay. We receive only transaction ID, amount, and status.
2.7 Course and Content Usage Data: Videos watched and completion status; ebook chapters accessed; progress data.
3. How We Collect Data
3.1 Directly from you when you register, complete your company profile, enter transactions, generate documents, or contact support.
3.2 Automatically through cookies and server logs when you use the Platform.
3.3 From third parties — company name and basic details from MCA database during CIN-based registration.
4. Legal Basis for Processing (DPDP Act and GDPR)
4.1 Contract performance: data necessary to provide subscribed services.
4.2 Consent: for marketing communications and non-essential cookies (withdrawable at any time).
4.3 Legal obligation: data retained as required under Indian law (Companies Act, Income Tax Act).
4.4 Legitimate interest: security monitoring, fraud prevention, service improvement — balanced against your privacy rights.
5. How We Use Your Data
We use your data exclusively to: (5.1) create and manage your account; (5.2) provide Platform features; (5.3) auto-populate compliance calendars, documents, and reports; (5.4) process payments and issue GST-compliant invoices; (5.5) send transactional emails; (5.6) provide customer support; (5.7) detect and prevent fraud; (5.8) improve performance using anonymised usage data; (5.9) comply with legal obligations; (5.10) send product update communications (you can unsubscribe).
We will NOT (5.11) sell your personal or business data; (5.12) display third-party advertising; (5.13) profile you for unrelated purposes.
6. Data Sharing
6.1 Razorpay — for payment processing (razorpay.com/privacy).
6.2 Cloud Infrastructure Provider — managed cloud database and file storage with secure access controls.
6.3 Vimeo — course video delivery (vimeo.com/privacy).
6.4 Email Service Provider — only your email address and name are shared for transactional email.
6.5 Legal and Regulatory Authorities — when required by court order, government request under applicable law, or to protect rights, property or safety.
6.6 Business Transfer — in event of merger or acquisition, data may be transferred subject to equivalent privacy protections.
We do NOT share data with advertisers, marketing networks, data brokers, or any party for commercial exploitation of your personal data.
7. Cookies and Tracking Technologies
7.1 Essential cookies — required for Platform function (session management, authentication, security).
7.2 Analytics cookies — anonymised, aggregated data to improve features.
7.3 Preference cookies — store theme, language, display preferences.
7.4 You can disable non-essential cookies in your browser. Disabling essential cookies will prevent login. We do not use third-party advertising cookies.
8. Data Retention
| Data Type | Retention | Reason |
|---|---|---|
| Account data | Account life + 90 days | Service & legal |
| Financial records | 7 years | Income Tax Act 1961 / Companies Act 2013 |
| Compliance data | 7 years | Regulatory |
| AI interaction data | 12 months | Service improvement |
| Usage / log data | 12 months | Security monitoring |
| Payment records | 7 years | Tax & legal |
| Backup copies | Up to 30 days after deletion | Technical |
After applicable retention periods, data is permanently and securely deleted.
9. Data Security
9.1 We implement: (a) AES-256 encryption at rest; (b) TLS 1.3 in transit; (c) role-based access (Row Level Security); (d) secure password hashing; (e) enterprise-grade cloud infrastructure with 99.9% uptime SLA; (f) continuous monitoring and intrusion detection.
9.2 Breach Notification: we will notify you within 72 hours of a breach likely to affect your rights, inform the relevant Data Protection Board as required under DPDP Act 2023, and provide details of the breach and remediation.
9.3 No system is completely secure. You are responsible for maintaining your credential security.
10. Your Rights Under DPDP Act 2023
10.1 Right to Access — request a copy of personal data we hold about you.
10.2 Right to Correction — request correction of inaccurate or incomplete data.
10.3 Right to Erasure — request deletion where data is no longer necessary or consent is withdrawn (subject to legal retention obligations).
10.4 Right to Grievance Redressal — raise complaints with our Grievance Officer.
10.5 Right to Nominate — nominate another individual to exercise rights on your behalf.
10.6 Right to Withdraw Consent — at any time, without affecting prior lawful processing.
To exercise: email support@myfintax.in with subject "Data Rights Request — [Your Name] — [Right You Are Exercising]". Acknowledged within 48 hours, responded within 30 days.
11. Your Rights Under GDPR (EU Users Only)
11.1 Right to data portability — receive data in structured, machine-readable format.
11.2 Right to object — to processing based on legitimate interest.
11.3 Right to restrict processing — in certain circumstances.
11.4 Right not to be subject to automated decision-making with legal effects.
11.5 Right to lodge a complaint with your national data protection supervisory authority.
12. Children's Privacy
12.1 The Platform is not intended for use by persons under 18.
12.2 We do not knowingly collect personal data from minors.
12.3 Discovered minor data will be deleted immediately.
12.4 Notify us at support@myfintax.in if you believe we have collected data from a minor.
13. Cross-Border Data Transfers
13.1 Data is primarily stored on servers located in India.
13.2 Certain third-party providers (Razorpay, Vimeo) may process data in other jurisdictions in compliance with applicable data protection laws.
13.3 We ensure international transfers are subject to appropriate safeguards.
14. Third-Party Links and Services
14.1 The Platform may contain links to third-party websites.
14.2 This Privacy Policy applies only to StaxOps.
14.3 We are not responsible for third-party privacy practices.
14.4 Review the privacy policies of any third-party services you access.
15. Changes to This Privacy Policy
15.1 We may update this Policy to reflect changes in law, technology, or practice.
15.2 Material changes will be notified via email at least 15 days before taking effect.
15.3 Minor changes may be made without specific notice — review periodically.
15.4 Continued use after the effective date constitutes acceptance.
16. Grievance Officer and Data Protection Officer
As required under the DPDP Act 2023 and IT (Intermediary Guidelines) Rules 2021:
Designation: Grievance Officer and Data Protection Officer
Organisation: MyFintax Advisors Private Limited
Platform: StaxOps (staxops.myfintax.in)
Email: support@myfintax.in
Working hours: Monday to Saturday, 10:00 AM to 6:00 PM IST
Acknowledgement: Within 48 hours
Resolution: Within 30 days of receipt
17. Contact Us
Email: support@myfintax.in
Platform: staxops.myfintax.in
Organisation: MyFintax Advisors Private Limited
© 2026 StaxOps. All rights reserved. A product of MyFintax Advisors Private Limited.