1. Information We Collect
Account Information
- Name, email address, mobile number
- Business name, GSTIN, PAN, business type
- Password (stored as encrypted hash, never in plain text)
Financial Information You Enter
- Income, expense, and investment data you manually enter
- Bank statements you upload (stored encrypted)
- Tax-related documents and computations
- Business financial data (turnover, P&L, balance sheet entries)
Usage Data
- Pages visited, features used, time spent on platform
- Device type, browser, IP address (for security monitoring)
- Crash reports and error logs (anonymised)
- Masked session replays — a reconstruction of how you moved through a page, with all typed input hidden
2. How We Use Your Information
- To provide and improve our services — CA-assisted filing, AI advisory, compliance tracking
- To send compliance reminders, deadline alerts, and important notices
- To verify your identity and prevent fraud
- To respond to your queries and support requests
- To generate anonymised, aggregate analytics (never individual-level sharing)
3. Data Storage and Security
India-only servers: All account data and all financial data you enter — income, investments, bank statements, tax computations — is stored exclusively on servers located in India. We do not transfer your financial data outside India.
The one exception, stated plainly: our website analytics providers (Microsoft Clarity and Google Analytics) process technical usage data — pages visited, device type, IP address — on their own infrastructure, which is located outside India. This is limited to how the website is used. It never includes the financial data you enter into the platform.
Encryption: All stored data is encrypted using AES-256 encryption. All data in transit is protected by HTTPS/TLS.
Access controls: Financial data is accessible only to you and, when you submit a filing request, to our authorised CA team members assigned to your account.
DPDP Act 2023: We are compliant with the Digital Personal Data Protection Act 2023 and its rules as notified by the Government of India.
4. Data Sharing
We never sell your personal or financial data to any third party. We share data only in these limited cases:
- Government portals: When you submit a filing request, our CA team uploads required data to GSTN, Income Tax Portal, MCA21, EPFO, ESIC as needed to file your return
- Service providers: Hosting (Hostinger — India servers), email delivery, payment processing (Razorpay). These providers are bound by confidentiality agreements
- Analytics providers: Microsoft (Clarity) and Google (Analytics) receive website usage data — pages visited, device and browser type, IP address, and masked session replays. They do not receive the financial data you enter into the platform
- Legal requirement: When required by Indian law, court order, or government authority
5. Your Rights
- Access: Download all your data from your account settings at any time
- Correction: Update incorrect information directly in your profile
- Deletion: Request deletion of your account and all associated data by emailing privacy@vittsphere.com. We will process within 30 days.
- Portability: Export your data in JSON/CSV format from your account
6. Cookies and Analytics
Essential cookies
Used for session management (keeping you logged in) and security. These cannot be turned off without breaking the platform.
Microsoft Clarity
We use Microsoft Clarity to understand how visitors move through the site — which pages are read, where people stop scrolling, which calculators get used. Clarity loads on every page and records page interactions and session replays. It does not record what you type: text and input fields are masked in your browser before anything is transmitted, so figures entered into our calculators are not captured. Clarity is a Microsoft service and sets cookies including _clck, _clsk and MUID.
Google Analytics
We use Google Analytics 4 to measure traffic. Analytics cookies are set only after you accept cookies. If you decline, Google Analytics runs in a cookie-less mode that counts the visit without identifying you.
Advertising
No advertising script is loaded unless you accept cookies. If you decline, the Meta Pixel does not load at all.
Your control
You can decline non-essential cookies from the banner, disable cookies in your browser, or opt out of Clarity entirely by writing to privacy@vittsphere.com. Neither Clarity nor Google Analytics receives the financial data you enter into the platform.
7. AI Advisory Disclaimer
Our AI CFO Advisory feature processes your financial data to provide guidance. All AI-generated advice is for informational purposes only and does not constitute professional legal, tax, or financial advice. Please consult a qualified CA for final decisions on tax filings.
8. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes via email and by posting a notice on our platform at least 14 days before the change takes effect.
9. Grievance Redressal and Contact
Under the Digital Personal Data Protection Act 2023, you may raise any question or complaint about how we handle your personal data with our grievance officer, who will respond within 30 days.
Grievance Officer: CA Prabhakar Kumar
Email: info@vittsphere.com
VittSphere Technologies Private Limited
Undri, Pune, Maharashtra — 411060
CIN: U62099PN2026PTC253995
If you are not satisfied with our response, you may approach the Data Protection Board of India.