Vishal Accounting Services ("we", "us") respects your privacy. This notice explains, in simple words, what personal data we collect, why, how long we keep it, who we share it with and what your rights are. It follows the Digital Personal Data Protection Act, 2023 ("DPDP Act"), the DPDP Rules, 2025 and the Information Technology Act, 2000. Under the DPDP Act we are the Data Fiduciary for the data you give us, and you are the Data Principal.
1. What data we collect
- Website forms (enquiry, consultation, feedback): your name, city, business type and the message you write. These forms only open WhatsApp with your message ready; nothing is saved on our website. The data reaches us only when you press Send in WhatsApp.
- Client data app (GST data upload): your name, firm name, GST holder's name, GSTIN, mobile number, email (optional), your PIN (to let you log in) and the reports, bills and documents you upload.
- Documents for a service: depending on the work, PAN, Aadhaar, photo, address proof, bank details, sales and purchase data, tax returns and notices. We ask only for what that service needs.
- Messages and calls: what you send us on WhatsApp, phone or email.
- Website visits: see section 8 (cookies and analytics).
2. Aadhaar, PAN and bank details
We use Aadhaar, PAN and bank details only for the filing or registration you asked for (for example GST registration, ITR or e-verification). We never use them for anything else. We do not ask for or store your card numbers, CVV, UPI PIN, net-banking password or bank OTP. A GST or income-tax portal OTP is used only at the moment of a filing you have asked us to do.
3. Data of other people you give us
Your bills, reports and returns may contain details of other people, such as your customers and suppliers, partners, directors, employees or family members. When you share such data with us, you confirm that you are allowed to share it for your tax and accounting work. We use it only for that work.
4. Why we use your data
- To reply to your enquiry and provide the service you asked for.
- To prepare and file your GST, income-tax and other returns, and to send you due-date reminders, return copies and fee reminders.
- To keep records that the law requires us to keep.
We do not sell your data, and we do not share it with anyone for their marketing.
5. Your consent
We ask for your consent with an empty tick box before we take your details. You can withdraw consent at any time, as easily as you gave it: send "DELETE MY DATA" on WhatsApp to +91 93590 76851, or use "Delete my account" in the client app. After that we stop using your data, except what the law requires us to keep. Withdrawing consent does not affect work already done.
6. Messages we send
We send service messages about your work (reminders, return copies, fee and due dates) on WhatsApp, SMS, phone, email or app notifications. We may sometimes send news about GST changes or our services. To stop these, reply "STOP" on WhatsApp at any time. Service messages about work you have given us will continue while you are our client.
7. Payments
We do not use a payment gateway on this website and do not collect card or bank login details. Fees are paid by UPI or bank transfer. We keep only the payment record (amount, date, reference) for our accounts.
8. Cookies and analytics
This website does not use advertising or tracking cookies. We use Cloudflare Web Analytics, which counts page visits without cookies and without identifying you. Fonts load from Google Fonts. The client app keeps your login on your own phone (local storage) so you need not type your PIN every time.
9. Software and AI tools
We use accounting software and AI-based tools to read and organise your reports and bills faster. A person from our team checks the results before anything is filed.
10. Who we share it with
- Government portals and departments (GST, Income Tax, MCA and others) when filing on your behalf.
- Service providers who store or carry data for us: Google (Drive and Apps Script), Cloudflare (website hosting) and WhatsApp (messages). They may store data on servers inside or outside India, under their own security standards.
- Authorities, courts or police, only when the law requires it.
11. How long we keep it
- Website enquiries: deleted within 12 months if you do not become a client.
- Uploaded reports and bills: removed from our online storage after the return is filed (usually within a month). Return copies are given to you, so please keep your own copy.
- GST and tax records: kept for the period the law requires (for GST, generally 72 months from the annual return due date), then deleted.
- App login logs: kept for 1 year for security.
12. How we protect it
We use:
- HTTPS on every page
- PINs stored in scrambled (hashed) form
- logins locked after repeated wrong tries
- limited staff access
- two-step verification on our accounts
- regular deletion of old uploads
If a data breach happens, we will inform you and the Data Protection Board of India as the Rules require.
13. Beware of fake calls
We will never ask you for your bank password, card number, CVV or UPI PIN, and we never ask you to pay to a personal account other than the one we have already shared with you. If someone contacts you in our name asking for these, do not share them and call us on +91 93590 76851.
14. Your rights
- Know what data we hold about you and who we shared it with.
- Correct or update it.
- Ask us to delete it (except records the law requires us to keep).
- Withdraw your consent.
- Nominate a person to act for you in case of death or incapacity.
- Complain to us, and then to the Data Protection Board of India.
15. Children
Our services are for businesses and adults. We do not knowingly collect data of anyone under 18. If a minor's details are needed (for example in a family ITR), we take them only from the parent or guardian.
16. GST Billing software
In our GST Billing app, your customers' names, numbers and bills stay on your own phone or computer. We do not receive them. For that data you, the shop owner, decide how it is used.
17. Links to other websites
Our pages link to government portals, marketplaces, YouTube and Instagram. Their own privacy policies apply there.
18. Changes to this policy
If we change this policy, we will update the date at the top. If the change is important, we will also tell existing clients on WhatsApp or in the app.
19. Grievance Officer
Vishal Patil, Vishal Accounting Services, Jalgaon, Maharashtra
WhatsApp / phone: +91 93590 76851
We reply within 7 days. If you are not satisfied, you may complain to the Data Protection Board of India. This policy is governed by the laws of India.
प्राइवेसी नीति (हिंदी में सार)
- कानून: ये नीति DPDP Act 2023, DPDP Rules 2025 और IT Act 2000 के हिसाब से है।
- हम क्या लेते हैं:
- वेबसाइट फॉर्म: नाम, शहर, बिज़नेस और मैसेज। ये फॉर्म सिर्फ़ WhatsApp खोलते हैं, वेबसाइट पर कुछ सेव नहीं होता।
- क्लाइंट ऐप: नाम, फर्म, GSTIN, मोबाइल, ईमेल, PIN और आपकी भेजी रिपोर्ट या बिल।
- कोई सर्विस लेने पर: उस काम के लिए ज़रूरी डॉक्यूमेंट।
- आधार, PAN और बैंक की जानकारी: सिर्फ़ उसी फाइलिंग या रजिस्ट्रेशन के लिए इस्तेमाल होती है जो आपने कहा है। कार्ड नंबर, UPI PIN, बैंक पासवर्ड या बैंक OTP हम कभी नहीं माँगते।
- दूसरों का डेटा: आपके बिलों में ग्राहक, सप्लायर या कर्मचारी की जानकारी होती है। वो हम सिर्फ़ आपके टैक्स के काम के लिए इस्तेमाल करते हैं।
- क्यों लेते हैं: आपका काम करने, रिटर्न फाइल करने, रिमाइंडर भेजने और कानूनी रिकॉर्ड रखने के लिए। आपका डेटा न बेचते हैं, न किसी को मार्केटिंग के लिए देते हैं।
- सहमति: डेटा लेने से पहले खाली टिक बॉक्स से आपकी सहमति लेते हैं। ये सहमति आप कभी भी वापस ले सकते हैं: WhatsApp पर "DELETE MY DATA" भेजें, या ऐप में "मेरा अकाउंट हटाएँ" दबाएँ।
- मैसेज: आपके काम के रिमाइंडर आते रहेंगे। न्यूज़ या ऑफर वाले मैसेज बंद करने हों तो WhatsApp पर "STOP" भेजें।
- कुकीज़: वेबसाइट पर विज्ञापन या ट्रैकिंग वाली कुकीज़ नहीं हैं।
- सॉफ्टवेयर और AI: रिपोर्ट जल्दी पढ़ने के लिए सॉफ्टवेयर और AI टूल इस्तेमाल करते हैं, पर फाइलिंग से पहले हमारी टीम का व्यक्ति सब जाँचता है।
- किसके साथ शेयर करते हैं:
- फाइलिंग के लिए सरकारी पोर्टल।
- Google, Cloudflare और WhatsApp, स्टोरेज और मैसेज के लिए। इनके सर्वर भारत के बाहर भी हो सकते हैं।
- सरकार, जब कानून कहे।
- कितने दिन रखते हैं:
- अपलोड की गई फाइलें रिटर्न फाइल होने के बाद हटा दी जाती हैं।
- GST और टैक्स के रिकॉर्ड उतने समय तक रखते हैं जितना कानून कहता है।
- लॉगिन का रिकॉर्ड 1 साल तक रहता है।
- नकली कॉल से सावधान: हमारे नाम से कोई बैंक पासवर्ड, कार्ड नंबर या UPI PIN माँगे तो न दें, और हमें तुरंत कॉल करें।
- आपके अधिकार: अपना डेटा देखना, सुधरवाना, हटवाना, सहमति वापस लेना, नॉमिनी बनाना और शिकायत करना।
- शिकायत अधिकारी: विशाल पाटिल, WhatsApp / फोन +91 93590 76851। हम 7 दिन में जवाब देंगे।