Privacy notice

Who is responsible. the firm decides what personal data is kept about you and why, and is the data fiduciary under the Digital Personal Data Protection Act, 2023. Aevantos provides the software the firm uses and processes the data only on the firm's instructions, as its data processor.

If you are a client of the firm, what is kept. Your name and contact details; PAN, GSTIN, TAN and other registrations; the people who sign for you and their digital signature certificates (never the token or its PIN); the documents you send and the firm prepares; your filings and their acknowledgements; invoices and payments; papers of yours the firm holds; appointments; and a record of every sign-in and action, kept for security.

Why. To prepare, file and track your statutory filings; to ask you for documents and remind you of due dates; to keep your records; to bill you for the services you engaged the firm for; and to meet the firm's own legal and professional obligations.

If you work at the firm, what is kept. Your name, email and role; the work assigned to and done by you, and time you log; your attendance — when you check in and out, and only whether you were at the office or how far away (to the nearest 100 metres), never your location itself, which does not leave your device; your leave; and, where the firm runs payroll here, your salary, deductions and payslips. It is used to run the office and pay you, and for nothing else.

Who else sees it. No one outside the firm and Aevantos, except as the law requires and the services need: the tax and government portals your filings go to; the GST Suvidha Provider and the payment gateway, if the firm uses them; and the firm's email and WhatsApp providers, for messages to you. WhatsApp messages are sent only if you agreed to them. Your data is never sold or used for advertising.

Where it is kept. The application runs, and documents are stored, in Mumbai, India. The database is in Singapore, with Neon Inc., because that provider offers no Indian region; the Act permits this. Email passes through Resend to be delivered.

How long. For as long as you are a client of, or work at, the firm, and afterwards for as long as tax, company and professional rules require records to be kept. Then it is deleted.

How it is protected. Encryption in transit and at rest; two-step sign-in for everyone; documents sealed against change; access limited by role and recorded in an audit trail; daily backups.

Your rights. You may ask the firm for a summary of the data held about you and who it has been shared with; for it to be corrected, completed or updated; and for it to be erased once the law no longer requires it to be kept. You may withdraw your agreement at any time — the firm will then stop using the data, except what it must keep by law — and you may name someone to exercise these rights for you. You may complain to the firm first and, if not satisfied, to the Data Protection Board of India.

Children. A person under 18 is a client only through a parent or guardian, who agrees for them.

Contact and grievances. the firm's office. Questions about the software itself can go to Aevantos at info@aevantos.com.

Changes. If this notice changes in substance, you will be shown it again and asked to agree before you continue.