How we handle your data.

Access & authentication

Client portal access requires an email-based account. Sessions are issued and refreshed by our authentication provider; passwords are never stored by us in plain text.

Each engagement is scoped to the client it belongs to. Database row-level security rules enforce that a signed-in client can only read and write records linked to their own account, and staff access is limited to internal advisor and admin roles.

Hosting & platform

The website and client portal run on the Lovable Cloud platform, which provides managed application hosting, a managed Postgres database, file storage, and authentication. Traffic to the site and portal is served over HTTPS.

This page describes app-visible controls we have enabled. It is maintained by TaxSalahkars and is not an independent audit or certification.

Data we collect

From the public site: information you submit through the contact and consultation forms (name, email, phone, message, and the topic you selected). Standard server logs may record IP address and request metadata.

From the client portal: profile details you provide, documents you upload for your engagement, messages exchanged with your advisor, and engagement-related records such as deadlines and status notes.

How we use your data

We use submitted information to respond to your enquiry, prepare and deliver the advisory engagement you have asked for, and meet our professional record-keeping obligations as Chartered Accountants in India.

We do not sell client data, and we do not use client documents to train third-party AI models.

Document storage

Client documents uploaded through the portal are stored in a private storage bucket. They are not publicly listable or downloadable by URL; access is gated by the same row-level rules that protect the rest of the engagement record.

Subprocessors

We rely on a small number of vendors to operate the service: Lovable Cloud (hosting, database, authentication, storage) and Resend (transactional email for consultation confirmations and notifications).

If you would like the current list with contact details for a vendor diligence questionnaire, write to Consult@TaxSalahkars.com.

Retention & deletion

Engagement records are retained for the period required by Indian tax and professional record-keeping rules. After that period, or earlier on written request where law permits, we delete or anonymise client-identifying data.

To request a copy or deletion of your personal data, email Consult@TaxSalahkars.com from the address on file and we will respond within a reasonable time.

Reporting a security concern

If you believe you have found a security issue affecting our website or client portal, please email Consult@TaxSalahkars.com with the subject line "Security report" and a description of the issue. Please do not publicly disclose the issue until we have had a reasonable opportunity to investigate.