Privacy notice

ITR Filer helps you prepare your own income tax return. It is run by Code Genie Technologies Private Limited. This notice says what personal data we hold, why, and what you can do about it, as the Digital Personal Data Protection Act, 2023 asks.

Your tax data stays on your device

The pre-filled data you bring from the income-tax portal, and everything you enter about your income, deductions, taxes and bank accounts, is read and worked out in your browser. It is kept in your browser’s storage on your device, and the return file is made there. None of it is sent to us: not your PAN, Aadhaar number, income, bank details or tax figures. We cannot see it, and we cannot recover it for you if your browser’s data is cleared.

We never ask for your income-tax portal password, and we never sign in to the portal.

What we hold about you

• From Google, when you sign in: your name, your email address, and the ID Google gives your account. We find your account by that ID.
• When you joined and last signed in, and a sign-in record for each browser you use. The record holds a scrambled copy (a SHA-256 hash) of the token in your browser’s cookie, and lapses after 30 days.
• The servers that host the app record each request, as every website’s do: the page asked for, the time, your IP address and your browser’s name. These records are used only to keep the service running and secure.

Why we hold it

To sign you in, keep you signed in, and keep the service secure. We hold it with your consent, which you give by signing in, and you can withdraw it at any time by deleting your account. We do not use it for advertising, we do not sell it, and the app has no analytics or tracking.

Who else handles it

• Google, which signs you in under its own privacy policy.
• The company that hosts the app and its database, which processes it only for us.

We share it with no one else, unless an Indian law or court requires us to.

Cookies

The app sets two cookies, both needed for signing in, and no others:

• itr_session keeps you signed in, for up to 30 days.
• itr_google lasts 10 minutes while you sign in with Google, so the app can check that the answer from Google is for you.

How long we keep it

Your account data is kept until you delete your account. Sign-in records are deleted when you sign out or when they lapse. Copies in backups are deleted as the backups expire.

Your rights

• To see it. Your account shows all we hold about you.
• To correct it. Your name and email address come from Google. Change them there, and they are updated here the next time you sign in.
• To erase it. Delete your account on your account page. Your account and sign-in records are deleted at once, along with the returns in that browser.
• To nominate someone to use these rights for you if you die or cannot, by writing to us.
• To complain. Write to our grievance officer at tax-assistant-support@codegenie.co.in. We answer within 30 days. If you are not satisfied, you can complain to the Data Protection Board of India.

Children

ITR Filer is for people aged 18 or over. A parent or guardian filing for a child should sign in with their own account.

Changes

If we change this notice, we will publish the new one here with its date.