Digital Personal Data Protection (DPDP) Notice

Last Updated: June 2026

Notice Under the Digital Personal Data Protection Act, 2023

This Notice is provided by CoralTax AI Private Limited ("CoralTax", "we", "our", or "us") in accordance with the Digital Personal Data Protection Act, 2023 ("DPDP Act").

By providing your personal data through our website, applications, forms, portals, communication channels, or any related services, you acknowledge that you have read and understood this Notice.

Personal Data We Collect

Depending on the services requested, we may collect the following categories of personal data:

Identity Information

• Full name
• Date of birth
• Father's/Mother's name
• PAN
• Aadhaar details (where legally permitted and necessary)
• Passport details
• Voter ID or Driving Licence details (where applicable)

Contact Information

• Email address
• Mobile number
• Postal address
• Communication preferences

Financial and Tax Information

• Bank account details
• Income details
• Tax records
• Form 16, Form 26AS, AIS, TIS, and related tax documents
• Investment and capital gains information
• GST-related information
• Accounting and compliance records

Business Information

• Company details
• GSTIN
• CIN/LLPIN
• Business addresses
• Authorized signatory details

Technical Information

• IP address
• Device information
• Browser information
• Website usage data
• Login and audit logs

Documents Uploaded by You

• Tax documents
• Identity documents
• Compliance documents
• Financial statements
• Any other documents submitted through our portal

Purposes of Processing

We process your personal data for one or more of the following purposes:

• Providing income tax, GST, accounting, compliance, legal, advisory, and related services.
• Creating and managing your account.
• Preparing, reviewing, and filing statutory returns and forms.
• Communicating with you regarding services, transactions, updates, and support.
• Verifying identity and preventing fraud.
• Complying with legal, regulatory, and professional obligations.
• Improving our website, services, and user experience.
• Maintaining security, audit, and operational records.
• Sending service-related communications.

Where required by law, additional consent shall be obtained for specific processing activities.

Sharing of Personal Data

We may share your personal data with:

• Government authorities and regulators where required by law.
• Banks, payment processors, and financial institutions.
• Cloud service providers and technology partners.
• Professional advisors, consultants, and auditors.
• Authorized employees, contractors, and service providers engaged in delivering services to you.
• Any other person or entity where required for the provision of services requested by you or as required by law.

We do not sell personal data.

Your Rights

Subject to applicable law, you may exercise the following rights:

• Right to access information regarding your personal data.
• Right to correction and updating of inaccurate personal data.
• Right to erasure of personal data that is no longer necessary for the purpose for which it was processed, subject to legal and regulatory retention requirements.
• Right to withdraw consent where processing is based on consent.
• Right to nominate another individual to exercise rights on your behalf in accordance with applicable law.
• Right to seek grievance redressal.

Withdrawal of Consent

Where processing is based on your consent, you may withdraw such consent at any time. Withdrawal of consent shall not affect the lawfulness of processing undertaken before such withdrawal.

Please note that withdrawal of consent may affect our ability to provide certain services.

Retention of Personal Data

We retain personal data only for as long as necessary to fulfil the purposes described in this Notice, comply with applicable legal and regulatory requirements, resolve disputes, and enforce our agreements.

Security Measures

We implement reasonable technical, organizational, and administrative safeguards designed to protect personal data from unauthorized access, disclosure, alteration, loss, or misuse.

Grievance Redressal

If you have any questions, concerns, requests, or grievances regarding the processing of your personal data, please contact:

Grievance Officer

CoralTax AI Private Limited

Email: privacy@coraltax.ai

Support Email: support@coraltax.ai

Website: www.coraltax.ai

We will endeavour to acknowledge and address grievances within the timelines prescribed under applicable law.

Updates to this Notice

We may update this Notice from time to time to reflect changes in our services, legal requirements, or processing activities. The revised version will be posted on our website with an updated effective date.

Consent

By selecting "I Agree", creating an account, submitting information, uploading documents, or continuing to use our services, you consent to the processing of your personal data for the purposes described in this Notice and any associated consent request presented to you.