How we handle your data.

Access & authentication

Client portal access requires an email-based account. Sessions are issued and refreshed by our authentication provider; passwords are never stored by us in plain text.

Each engagement is scoped to a client it belongs to. Database row-level security rules enforce that a signed-in client can only read and write records linked to their own account, and staff access is limited to internal advisor and admin roles.

Hosting & platform

Our website and client portal run on Lovable Cloud platform, which provides managed application hosting, a managed Postgres database, file storage, and authentication. Traffic to our site and portal is served over HTTPS.

This page describes app-visible controls we have enabled. It is maintained by TaxSalahkars and is not an independent audit or certification.

Data we collect

From our public site: information you submit through contact and consultation forms (name, email, phone, message, and topic you selected). Standard server logs may record IP address and request metadata.

From our client portal: profile details you provide, documents you upload for your engagement, messages exchanged with your advisor, and engagement-related records such as deadlines and status notes.

How we use your data

We use submitted information to respond to your enquiry, prepare and deliver an advisory engagement you have asked for, and meet our professional record-keeping obligations as Chartered Accountants in India.

We do not sell client data, and we do not use client documents to train third-party AI models.

Document storage

Client documents uploaded through our portal are stored in a private storage bucket. They are not publicly listable or downloadable by URL; access is gated by same row-level rules that protect the rest of an engagement record.

Subprocessors

We rely on a small number of vendors to operate our service: Lovable Cloud (hosting, database, authentication, storage) and Resend (transactional email for consultation confirmations and notifications).

If you would like our current list with contact details for a vendor diligence questionnaire, write to Consult@TaxSalahkars.com.

Retention & deletion

Engagement records are retained for a period required by Indian tax and professional record-keeping rules. After that period, or earlier on written request where law permits, we delete or anonymise client-identifying data.

To request a copy or deletion of your personal data, email Consult@TaxSalahkars.com from an address on file and we will respond within a reasonable time.

Reporting a security concern

If you believe you have found a security issue affecting our website or client portal, please email Consult@TaxSalahkars.com with the subject line "Security report" and a description of an issue. Please do not publicly disclose that issue until we have had a reasonable opportunity to investigate.