Privacy Policy

Version 2026-11-01 · Effective 1 November 2026

This Privacy Policy explains how Tax Margin, Paschim Vihar, New Delhi – 110063, India (“Tax Margin”, “we”) collects, uses, stores and shares personal data when you use www.taxmargin.com and its tools (the “Services”). It is published under the Information Technology Act, 2000, the rules made under it, and the Digital Personal Data Protection Act, 2023 (“DPDP Act”). It forms part of our Terms of Use.

1. What we collect

• Account details (TaxMargin Pro): your name, firm or business name, email address and password. Passwords are stored only as a one-way hash, never in readable form.
• Data you upload or create in the tools: bank statements (PDF, Excel, CSV, images), the transactions read from them, ledger lists fetched from your Tally company, ledger-mapping rules, learned mappings and statements you choose to save in your account. For the GST Reconciliation Tool: the purchase register and GSTR-2B files you upload.
• Security and usage records: IP address, date and time of sign-in, sign-up and tool use, sign-in attempts, device session tokens, and the names of files uploaded to the GST Reconciliation Tool with a summary of the result.
• Consent records: the version of these terms you accepted, with the date, time and IP address.
• Messages: what you send us by email, phone or WhatsApp. The contact form on this website does not store anything on our server; it opens WhatsApp with your details filled in, and the message is handled by WhatsApp under its own policy.

Statements and registers you upload can contain personal data about others (for example, names in bank narrations or supplier details). Please read Section 7.

2. Why we use it

• to create and secure your account, sign you in and send activation and password-reset emails;
• to provide the tools: read statements, suggest ledgers, prepare vouchers and reports, and keep your rules and saved statements available on any computer you sign in from;
• to prevent misuse, enforce usage limits and investigate problems;
• to reply to you and provide services you ask for;
• to meet legal obligations and to establish, exercise or defend legal claims.

We process personal data on the basis of your consent, given when you create an account and accept these terms, and for the legitimate uses permitted by Section 7 of the DPDP Act. We do not sell your personal data and we do not use your uploaded statements for advertising.

3. Who we share it with

• Our web hosting provider, which stores the website and account data on its servers.
• Google: statements are first read on your own computer. Only when that is not possible (typically scanned PDFs or photos) and the statement is read with AI, the file or its page images are sent to Google's Gemini service to extract the transactions, under Google's terms for that service. Passwords of protected PDFs are never sent.
• Email service: our mailbox provider, to send account emails.
• Your browser also loads fonts, icons and scripts from Google Fonts and content delivery networks, which receive your IP address as part of normal web requests.
• Authorities, when required by law, court order or a lawful request.

Some of these providers may process data outside India, as permitted under the DPDP Act.

4. Data kept on your own computer

TaxMargin Pro keeps your sign-in session, a copy of your rules and, if you use them, passwords for password-protected PDF statements in your browser's local storage on that computer, so they work offline and faster. Saved PDF passwords never leave your browser. You can remove them from the account menu (“Forget saved statement passwords”) or by clearing your browser's site data. The Tally Connector runs on your PC and talks only to your local Tally and to this website.

5. How long we keep it

• Account details, rules, mappings and saved statements: while your account exists. When you ask us to delete your account, we delete them within 30 days, except records we must keep by law.
• GST Reconciliation Tool: uploaded files are processed and discarded. The downloadable report is deleted from our server within about 6 hours.
• Security, activity and consent records: for as long as needed for security and to establish or defend legal claims, and no longer than the applicable limitation period.

6. Security

We use HTTPS encryption, hashed passwords, per-user access to stored data, storage of private data outside the public web folder, sign-in attempt limits and automatic sign-out after inactivity. No system is completely secure. If a personal data breach occurs, we will inform affected users and the Data Protection Board of India as the DPDP Act requires.

7. Data about your clients and other people

When you upload statements or registers containing other people's personal data, you decide why and how that data is processed, and we process it on your behalf to provide the tools. You are responsible for having their consent or another lawful basis to do so, and for honouring their rights. Do not upload data you are not entitled to share.

8. Your rights

Under the DPDP Act you may ask us to:

• tell you what personal data of yours we process and with whom it has been shared;
• correct, complete or update it;
• erase it, or delete your account;
• withdraw your consent (this stops the Services that need it, but does not affect processing already done);
• nominate another person to exercise your rights in case of death or incapacity.

Write to the Grievance Officer below from your registered email address. If you are not satisfied with our response, you may complain to the Data Protection Board of India.

9. Children

The Services are meant for adults and businesses. We do not knowingly create accounts for, or collect data from, anyone under 18.

10. Changes to this policy

We may update this policy. The version date at the top changes when we do. For material changes, signed-in users are asked to accept the new version at their next sign-in.

11. Grievance Officer and contact

We will acknowledge your request within 24 hours and aim to resolve it within 15 days.

See also: Terms of Use