Privacy Policy

1 Who we are

FinsyncX Consultancy ("FinsyncX", "we", "us", "our") is a chartered accountancy firm based at Madhapur, Hyderabad, Telangana 500081, India, offering income tax filing, GST compliance, accounting & bookkeeping, Virtual CFO, tax litigation and related professional services. This policy explains how we handle personal data collected through finsyncx.com, our free online tools, and when you contact us or engage us as a client.

Under India's Digital Personal Data Protection Act, 2023 (DPDP Act), FinsyncX acts as a Data Fiduciary for the personal data described below, and you (our website visitor or client) are the Data Principal.

2 Laws we follow

This policy is written to align with:

• The Digital Personal Data Protection Act, 2023 (DPDP Act) and its rules, as notified.
• The Information Technology Act, 2000 and the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (SPDI Rules), which continue to apply alongside the DPDP Act.
• The ICAI Code of Ethics, which independently binds our Chartered Accountants to strict client confidentiality obligations for any information received in the course of professional engagement — a duty that exists over and above data-protection law.

We serve clients primarily across India. If you are contacting us from outside India (for example, an NRI client), the data practices below still apply; we do not operate additional region-specific frameworks such as the EU GDPR at this time.

3 Data we collect

We only collect what a specific part of the website or our service actually needs. Here is a complete list — nothing on this site sends data anywhere that isn't listed here:

4 Our free tools & your data — the specifics

Bank Statement Analyser

This is the only free tool on our site that involves a server. Here is exactly what happens when you upload a statement:

1. Your PDF is uploaded to our server over an encrypted HTTPS connection.
2. If it's password-protected, the password you provide is used only in memory to unlock the file — it is never logged or written to disk.
3. The file is briefly written to a temporary, isolated location on our server so our parsing engine can read it, and the extracted transactions are categorised.
4. The temporary file is permanently deleted immediately after processing — every request, without exception, including if an error occurs.
5. We do not save your statement, its transactions, or your password to any database, log file, or backup, at any point.
6. The parsed data is sent back to your browser, where the Excel file is generated for you to download.

In short: we process your statement to build your Excel file, and then it's gone. We have no record of it afterwards.

Invoice Generator, Tax / EMI / HRA / TDS Calculators

These tools do all their calculation in JavaScript running in your own browser. No network request is ever made with the numbers you enter. If you use the "Print / Save PDF" option, that also happens entirely on your device via your browser's own print function.

5 How we use your data

• To respond to enquiries submitted through our contact form or WhatsApp/phone/email.
• To prepare, file and manage the tax, GST, accounting or compliance service you've specifically engaged us for.
• To meet our own statutory record-keeping obligations as a professional services firm (e.g. under the Income Tax Act, GST law, and ICAI regulations).
• To generate the output of a free tool (e.g. your bank statement Excel file) and return it to you — never for any other purpose.
• To understand aggregate website usage and improve site performance and content.

We do not use your data for automated profiling, targeted third-party advertising, or sell/rent your personal data to anyone, for any reason.

6 Our legal basis for processing

• Consent — when you submit our contact form, upload a file to a tool, or message us on WhatsApp, you are voluntarily providing that data for the stated purpose.
• Performance of a contract — once you engage us as a client, processing your documents is necessary to deliver the professional service you've asked for.
• Legal obligation — certain records must be retained to comply with the Income Tax Act, GST law, and ICAI's professional standards.

You may withdraw consent at any time for anything not already required by law or an active engagement (see Section 11, Your Rights).

7 Who we share data with

We do not sell your personal data. We share it only with the following categories of recipients, and only as needed:

We may also disclose data where required by law, court order, or a lawful request from a government authority.

8 How long we keep it

• Bank Statement Analyser uploads: not retained at all — deleted immediately after your Excel file is generated (see Section 4).
• Contact form enquiries: kept only as long as reasonably needed to respond to you and for our business records, and deleted or anonymised thereafter on request.
• Client engagement documents: retained for the duration of the engagement plus the statutory period applicable to tax records under Indian law (generally up to 6 years from the end of the relevant assessment year, longer if an assessment, appeal or litigation is pending).
• Website analytics: retained per Google Analytics' and Vercel's own default retention settings, in aggregated/anonymised form.

9 How we protect your data

• The entire website, including all tools, is served over HTTPS/TLS encryption — data in transit is encrypted.
• Our Bank Statement Analyser API only accepts requests from our own website (finsyncx.com) — it is not open to arbitrary third-party websites.
• Uploaded bank statements are processed in an isolated, temporary location and deleted immediately after use, as described in Section 4 — we minimise what could ever be exposed by not retaining it in the first place.
• Access to any client documents shared via WhatsApp/email is limited to the FinsyncX team members working on your engagement.

No method of transmission or storage is 100% secure, and we cannot guarantee absolute security — but we've designed our tools specifically to minimise what we hold, which is the strongest protection against a data breach: data that was never retained cannot be exposed.

10 Cookies & analytics

We use two analytics services:

• Google Analytics (GA4) — sets cookies in your browser to measure site traffic and usage patterns. You can block these via your browser's cookie settings, or opt out using Google's Analytics opt-out browser add-on.
• Vercel Analytics & Speed Insights — collect anonymised, aggregated usage and performance data without using cookies or tracking individual visitors across sites.

We do not currently use cookies for advertising or cross-site tracking. Blocking cookies in your browser will not prevent you from using any part of this website or its tools.

11 Your rights

Under the DPDP Act, 2023, you have the right to:

• Access — ask us what personal data we hold about you.
• Correction & erasure — ask us to correct inaccurate data, or delete data we no longer need to hold.
• Withdraw consent — for anything not already required by an active engagement or law.
• Grievance redressal — raise a complaint with our Grievance Officer (Section 15) if you believe we've mishandled your data.
• Nominate — under Section 14 of the DPDP Act, nominate another individual to exercise these rights on your behalf in the event of death or incapacity.

To exercise any of these rights, email us at FinsyncX@gmail.com with your request. We aim to respond within 30 days.

12 Children's privacy

Our services are intended for adults capable of entering into a professional engagement (tax filing, GST compliance, etc.) and are not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us data, contact us and we will delete it.

13 Third-party links

Our website links to third-party platforms — WhatsApp, LinkedIn, Instagram, and government portals (Income Tax e-filing, GST portal). Once you leave finsyncx.com through one of these links, that platform's own privacy policy applies, not ours. We encourage you to review their policies independently.

14 Changes to this policy

We may update this policy as our services, tools, or applicable law change. The "Last updated" date at the top of this page will always reflect the latest revision. Significant changes affecting how we handle your data will be reflected here before they take effect.

15 Grievance Officer & contact us

For any question about this Privacy Policy, a request to access/correct/delete your data, or a complaint about how we've handled it, please write to us at the email above. We aim to acknowledge and resolve grievances within 30 days, in line with the IT Rules, 2011.