Privacy Policy

1. Who we are

Fortax ("Fortax", "we", "us", "our") is an AI-powered compliance marketplace operated by Dalo, headquartered in India and associated with IIM Lucknow, STPI and MeitY since 2019. Fortax connects businesses with verified Chartered Accountants and provides integrated tools for GST, tax, invoicing, valuation, due diligence and investor readiness. This Privacy Policy explains how we handle information when you use fortax.in, the Fortax SAI assistant, our mobile apps, the Blockchain Compliance Card and any related services (together, the "Services").

For any questions about this policy, write to privacy@fortax.in.

2. Information we collect

2.1 Information you give us

Account data — name, email, phone, password, business name, GSTIN, PAN, CIN.
Business data — invoices, inventory, expenses, sales records, customer details you enter into Fortax.
Documents — files you upload to the SAI document analyst or data room.
Conversations — prompts and messages you send to Fortax SAI.
Payment data — processed by our payment partners; we store only transaction metadata.

2.2 Information we collect automatically

Usage data — pages visited, features used, clicks, timestamps.
Device data — IP address, browser, operating system, device model.
Cookies — for authentication, preferences and analytics (see Section 8).

2.3 Information from third parties

Where you authorise us to, we retrieve data from the GSTN portal, MCA, banks, accounting tools and similar public or permissioned sources on your behalf. We only fetch what is necessary for the task you requested.

3. How we use your information

To provide, maintain and improve the Services.
To generate invoices, compliance reminders, filings, valuations and due diligence packs you request.
To power the Fortax SAI assistant and deliver accurate answers.
To communicate with you about your account, billing, and product updates.
To detect fraud, abuse and security incidents.
To comply with legal obligations under Indian law.

4. Data study & research — with your consent

We believe in consent-first research. Fortax may use anonymised, aggregated usage data to study compliance patterns, improve AI models, and publish non-identifying insights about Indian MSMEs. This happens only when:

You have given explicit opt-in consent through our consent banner or account settings.
Data is stripped of personal identifiers before analysis (no names, GSTINs, PANs, phone numbers, invoice parties).
Results are reported only in aggregate form (e.g. "X% of MSMEs in Uttar Pradesh file GSTR-3B late"), never as individual records.
You can withdraw your consent at any time from Settings → Privacy → Research, with no effect on your service.

We will never sell your data, share it with advertisers, or use it to train models for third parties. Your business records belong to you.

5. When we share your information

We share data only with:

Chartered Accountants on the marketplace — only CAs you explicitly engage or accept matches with, and only the data needed for the job.
Service providers — cloud hosting, email, payment processing, customer support tools, strictly under confidentiality and data-processing agreements.
Authorised integrations — such as GSTN, banks, accounting systems, only at your instruction.
Professional advisors you add to your workspace (CAs, auditors, consultants).
Legal & regulatory authorities when required by Indian law, court order, or to protect rights and safety.
Successors in case of merger, acquisition, or restructuring — with continued protection.

6. Blockchain Compliance Card

The Blockchain Compliance Card stores a cryptographic hash of selected verification attributes (e.g. GSTIN, CIN, compliance score) on a tamper-proof ledger. Raw personal data is never written to the blockchain — only verifiable hashes. You control what is included, and you can revoke sharing at any time.

7. Data security

All data is encrypted in transit (TLS 1.2+) and at rest (AES-256).
Role-based access controls, least-privilege principles and audit logging.
Regular vulnerability scanning and third-party security reviews.
Strict secret management and isolated production environments.

No system is perfectly secure, but we work hard to protect your information and will notify affected users promptly in case of a breach, as required by law.

8. Cookies

We use essential cookies to keep you signed in and the app functioning. With your consent, we also use analytics cookies to understand how Fortax is used so we can improve it. You can accept or refuse non-essential cookies at any time from the consent banner or browser settings.

9. Data retention

We retain your data for as long as your account is active and for a reasonable period afterwards to meet legal, tax and accounting obligations under Indian law (typically up to 8 years for financial records). You may request deletion of non-mandatory data at any time.

10. Your rights

Subject to applicable law, you have the right to:

Access the personal data we hold about you.
Correct inaccurate or incomplete data.
Delete your data (where legally permitted).
Export your data in a portable format.
Withdraw consent to optional processing (including research).
Lodge a grievance with our Grievance Officer.

To exercise any of these rights, contact privacy@fortax.in.

11. Children

Fortax is not intended for users under 18. We do not knowingly collect data from minors. If you believe a minor has provided us with information, please contact us and we will delete it promptly.

12. International transfers

Fortax data is primarily hosted in India. Where processing involves transfer outside India (for example, for certain AI model providers), we rely on appropriate safeguards and contractual protections.

13. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated through the app or via email at least 14 days before they take effect.

14. Grievance Officer

In accordance with the Information Technology Act, 2000 and allied rules, the Grievance Officer can be reached at:

Grievance Officer
Fortax (Dalo)
Email: grievance@fortax.in
Address: IIM Lucknow STPI, Lucknow, Uttar Pradesh, India