Home Privacy policy

Privacy policy

How Taxhive collects, uses and protects your personal data, and the rights you have under India’s Digital Personal Data Protection Act, 2023.

Effective date: 17 October 2026 · Last updated: 17 October 2026

1. Who we are

Taxhive (“Taxhive”, “we”, “us”) is a brand of Taxhive Solutions Pvt Ltd (incorporation in progress). Taxhive provides GST registration and return filing, income tax return filing, accounting and related compliance services to businesses and individuals across India. Our office is at B18, Prajana CHSL, S V Road, Dahisar East, Mumbai 400068, Maharashtra, India.

For the purposes of the Digital Personal Data Protection Act, 2023 (the “DPDP Act”), Taxhive is the Data Fiduciary for the personal data described in this policy, and you are the Data Principal. This policy explains, in plain English, what we collect, why, who we share it with, how long we keep it and how you can exercise your rights.

2. What we collect

When you send an enquiry on our website

  • Your name, mobile number, business name, city, the service you are interested in and any message you write.
  • Your consent to be contacted on WhatsApp or phone about your enquiry.
  • Whether the box “Also contact me on WhatsApp about this enquiry.” was ticked when you sent the form. It is ticked by default and you can untick it; it covers follow-up about your enquiry only, never marketing. If you untick it, we will not contact you on WhatsApp about that enquiry (we will only call you), unless you message us on WhatsApp yourself; unticking it does not affect your enquiry otherwise. We record the exact wording, the date and time, and the hashed IP address described below.
  • A one-way, salted hash of your IP address and your browser’s user-agent string. We use these only to block spam and repeated submissions; we do not store your IP address itself.

When you message us on WhatsApp

  • Your WhatsApp name and number, and the messages, images and documents you exchange with us.
  • Delivery and read status of the messages we send you.
  • Your marketing choices: whether you agreed to receive updates (for example by tapping a button in one of our messages, or by telling our team, who must note how and when you agreed), and whether you opted out by replying STOP.

How you found us

If one of our partners or sales team members referred you, we record their code against your enquiry so that we can pay them a referral fee.

When you become a client

To deliver GST, income tax and accounting services we need the information those filings require. Depending on the service, this can include:

  • Sales and purchase invoices, debit and credit notes, bank statements, ledgers and other financial records.
  • PAN, GSTIN, Aadhaar and other KYC documents, business registration details and addresses.
  • Details of directors, partners or proprietors where a registration requires them.
  • Our fee records for you: the plan you chose, the fees billed, payments received (amount, date, payment mode and reference) and any outstanding balance.

Basic technical logs

Like any website, our hosting provider records routine technical information (such as request time, page requested and error logs) to keep the service secure and working. We do not use these logs to build profiles of visitors.

3. Why we process it (lawful basis)

We process personal data only for a lawful purpose and on one of the grounds the DPDP Act allows:

  • Your consent (section 6) — for example, when you tick the box on our enquiry form agreeing to be contacted on WhatsApp or phone, or when you start a WhatsApp conversation with us. Marketing messages are sent only with your separate, optional consent, which is never a condition of our service. You can withdraw consent at any time (see Your rights).
  • Legitimate uses (section 7) — in particular, where you have voluntarily given us your data for a specific purpose, such as asking us to prepare and file a return, and have not told us that you do not consent to that use.
  • Legal obligations — where Indian law requires us to process or retain information, such as record-keeping under tax laws or responding to lawful requests from authorities.

4. How we use your information

  • To reply to your enquiry and explain which service and plan suits you.
  • To prepare, file and confirm your GST returns, income tax returns, registrations and accounts.
  • To send you reminders about documents and due dates, filing confirmations and service updates on WhatsApp or phone.
  • To keep track of our fees, send you payment reminders for fees that are due, and keep proper business records.
  • Only if you have given your separate, optional consent: to send you occasional WhatsApp updates about GST deadlines, changes in the rules, and our services and offers.
  • To work out referral fees for the partner or salesperson who introduced you, if any.
  • To meet our legal and regulatory obligations and to protect our rights in a dispute.
  • To keep our website and systems secure and to prevent spam and misuse.

We do not use your data for automated decisions that have legal effects on you, and we do not send you third-party advertising.

5. Where your data is stored and who processes it

We do not sell or rent your personal data to anyone. We share it only with service providers who help us run our business, and only as far as they need it:

  • Cloudflare — hosts our website and our systems (including Cloudflare Workers and the Cloudflare D1 database), where enquiries and WhatsApp conversations are stored. Cloudflare may process data in data centres inside and outside India.
  • Meta (WhatsApp Business Platform) — carries the WhatsApp messages, images and documents we exchange with you. Meta’s handling of WhatsApp data is also covered by WhatsApp’s own terms and privacy policy.
  • Government authorities — when we file on your behalf, we submit the required information to the relevant tax authorities.
  • Referral partners: if a partner referred you, we may tell them that you became a client and which plan you chose, so that their referral fee can be settled. We do not share your documents, filings or financial records with them.
  • Authorities and advisers — where the law requires it, or where needed to establish or defend legal claims.

Our team members can access client data only as needed to deliver your service, and they are bound by confidentiality.

6. How we keep your data safe

We take reasonable security safeguards to protect personal data, including:

  • Encrypted connections (HTTPS) for our website and systems.
  • Individual staff accounts with securely stored sign-in details, secure session cookies and role-based access.
  • Verification that incoming WhatsApp data genuinely comes from Meta.
  • Storing only a hashed form of website visitors’ IP addresses.
  • Access to client documents limited to the people working on your account.

No system is completely secure. If a personal data breach occurs, we will inform affected people and the Data Protection Board of India as the DPDP Act requires.

We will never ask for your passwords or OTPs. Taxhive will never ask you for your passwords or OTPs by phone, WhatsApp, email or any other channel. If anyone claiming to be from Taxhive asks for them, please do not share them and report it to us on +91 8097597377.

7. How long we keep your data

  • Proof of your contact request: when and from which page you sent an enquiry, the advert or Google reference you came from (if any), the consent wording you were shown, whether the WhatsApp box was left ticked or unticked, any later WhatsApp message from you that allows WhatsApp again, and any opt-out are kept for 24 months, with your number stored only in coded (hashed) form, so we can show that we contacted you only as you asked. Then they are deleted.
  • Enquiries that do not become clients: kept for 13 months after your last contact with us, then deleted, unless you ask us to delete them earlier (subject to any minimum period the law requires).
  • Client records: for as long as our engagement lasts, plus the period tax and other laws require us to keep records (for example, up to 8 years), then deleted.
  • WhatsApp conversations: under the same rules — as an enquiry if you do not become a client, or as part of your client record if you do.
  • Marketing consent and opt-out records: for as long as we may message you, and for up to 3 years afterwards, so that we can show what you agreed to and that we respected your opt-out.

If you withdraw consent or ask us to erase your data, we will delete it unless the law requires us to keep it, in which case we will keep only what is required and only for as long as required.

8. Your rights under the DPDP Act

As a Data Principal, you have the right to:

  • Access — get a summary of the personal data we hold about you and how we process it, and the identities of those we have shared it with.
  • Correction and completion — ask us to correct inaccurate or misleading data, complete incomplete data, or update it.
  • Erasure — ask us to erase your data when it is no longer needed for the purpose it was given, unless the law requires us to retain it.
  • Withdraw consent — at any time, as easily as you gave it. For WhatsApp updates, just reply STOP. Withdrawal does not affect processing already done, and we may be unable to continue a service that depends on that data.
  • Nominate — nominate another person to exercise your rights if you die or become incapable of doing so.
  • Grievance redressal — complain to our Grievance Officer about how we handle your data.
  • Approach the Data Protection Board of India — if you are not satisfied with our response, after first using our grievance process.

How to make a request: message or call us on +91 80975 97377 (WhatsApp) or write to our office address below. Please tell us your name and the mobile number you used with us (and your GSTIN or PAN if you are a client) so we can identify you. We may ask for reasonable proof of identity before acting on a request.

9. How to delete your data

You can ask us to delete the personal data we hold about you at any time. This includes your WhatsApp data: your WhatsApp number and profile name, the messages, photos and documents you sent us, and the records of any WhatsApp opt-in or opt-out. It also includes your website enquiry and any client records we are not required by law to keep.

  1. Send a request. Send “Delete my data” on WhatsApp to +91 80975 97377 from the number you used with us, call us on +91 80975 97377 (Mon–Sat, 10am–7pm), or write to our office address in section 15. Tell us your name and the mobile number you used with us.
  2. We confirm it is you. We may ask for reasonable proof that the number or account is yours, so that no one else can delete your data. We will acknowledge your request within 48 hours.
  3. We delete it and confirm. We delete your data from our systems, including our WhatsApp inbox and records, within one month of receiving your request, and tell you when it is done.

What we may keep: records that tax or other laws require us to keep (for example, invoices for clients) are kept only for the required period and then deleted. If you asked us to stop messaging you, we keep only a coded (hashed) copy of your number so that we never contact you again.

Deleting the chat on your own phone does not delete the copy held by us, so please send us a request as above. You can also stop WhatsApp messages at any time by replying STOP.

10. Children

Our services are meant for businesses and adults. They are not directed at children (people under 18), and we do not knowingly collect children’s personal data. Where a filing requires information about a minor (for example, a dependant), we process it only with the verifiable consent of the parent or lawful guardian. If you believe a child has sent us personal data, please contact us and we will delete it.

11. WhatsApp messages, marketing consent and opting out

We send two kinds of WhatsApp messages:

  • Service messages: replies to your questions, document and due-date reminders, filing confirmations and reminders about fees that are due. We send these to people who have contacted us or who are our clients.
  • Marketing messages: occasional updates about GST deadlines, rule changes, and our services and offers. We send these only after you confirm on WhatsApp itself, by tapping a button such as “Yes, send me updates” in one of our messages or by replying START from your number. Ticking the optional box on our website only records a request for updates; it is not consent, and we will not send you marketing messages until you confirm on WhatsApp. We keep a record of your confirmation as proof.

To opt out, reply STOP (or “unsubscribe”, or “band karo”) at any time. We will send you one confirmation that you have been unsubscribed, record your choice, and stop sending you marketing messages and reminders. We will still reply if you message us yourself. To subscribe again, reply START. A request from our website never overrides a STOP. Opting out of reminders may mean you miss a due-date reminder, so please keep track of your deadlines.

12. Cookies

Our website does not use advertising or tracking cookies and does not run third-party analytics. It does not set cookies of its own for visitors. Our hosting provider, Cloudflare, may set a strictly necessary security cookie to protect the site from bots and attacks. Our home page shows an embedded Google Maps map; Google may set its own cookies when that map loads or when you use it, under Google’s privacy policy. Staff who sign in to our internal tools use a strictly necessary session cookie.

13. Grievance Officer

If you have a concern or complaint about how we handle your personal data, please contact our Grievance Officer:

Paras Nisar, Founder, Taxhive
Phone / WhatsApp: +91 80975 97377
Post: B18, Prajana CHSL, S V Road, Dahisar East, Mumbai 400068

We will acknowledge your complaint within 48 hours, send you a copy of it as we have recorded it, and resolve it within one month of receiving it. If you are not satisfied with our response, you may approach the Data Protection Board of India.

14. Changes to this policy

We may update this policy when our services, our providers or the law change. We will post the updated policy on this page with a new effective date, and where the changes are significant we will tell existing clients on WhatsApp.

15. Contact us

Questions about this policy or your data? We’re happy to help.

Post
Taxhive, B18, Prajana CHSL, S V Road, Dahisar East, Mumbai 400068, Maharashtra, India

See also our Terms of service.