Privacy Notice

At CoralTax.ai ("we", "our", or "us"), we are committed to protecting your personal data and processing it in a fair, transparent, and secure manner. This Privacy Notice explains how we collect, use, store, share, and protect your personal data in accordance with the Digital Personal Data Protection Act, 2023 (DPDP Act) and other applicable laws.

Your Rights as a Data Principal

As a Data Principal under the DPDP Act, you are entitled to the following rights:

Right to Access Information

You may request information regarding the personal data we process about you, including:

• The categories of personal data being processed.
• The purposes for which your personal data is processed.
• The categories of recipients with whom your personal data has been shared, where applicable.
• Any other information required to be provided under applicable law.

Right to Correction, Completion and Erasure

You may request that we:

• Correct inaccurate personal data.
• Update or complete incomplete personal data.
• Erase your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal and regulatory obligations.

Right to Withdraw Consent

Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal but may affect our ability to provide certain services.

Right to Grievance Redressal

If you have any concerns regarding the manner in which your personal data is processed, you may contact our Grievance Officer. We will acknowledge and address your grievance within the timelines prescribed under applicable law.

Right to Nominate

You may nominate another individual to exercise your rights under the DPDP Act on your behalf in the event of your death or incapacity, in accordance with applicable law.

Data Retention

We retain your personal data only for as long as it is necessary to:

• Provide the services requested by you.
• Fulfil our contractual obligations.
• Comply with applicable laws, regulations, statutory requirements, and professional obligations.
• Resolve disputes and enforce our legal rights.

Certain records relating to taxation, accounting, financial reporting, anti-money laundering, or other statutory requirements may be retained for periods prescribed under applicable laws, including but not limited to the Income-tax Act, Companies Act, Goods and Services Tax laws, and other regulatory requirements. Once the applicable retention period has expired, and where no legal obligation requires further retention, your personal data will be securely deleted or anonymized.

Security of Your Personal Data

We implement appropriate technical and organizational measures designed to safeguard your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include, where appropriate:

• Encryption of data in transit and, where applicable, at rest.
• Secure authentication and role-based access controls.
• Continuous monitoring and logging of access to systems.
• Regular security assessments and vulnerability management.
• Employee confidentiality obligations and periodic security awareness training.
• Secure backup and disaster recovery procedures.

While we strive to protect your personal data using industry-recognized security practices, no method of electronic transmission or storage can be guaranteed to be completely secure.

Cross-Border Transfer of Personal Data

Your personal data may be processed or stored by our service providers or technology partners located outside India where necessary for providing our services. Any such transfer will be carried out only in accordance with the Digital Personal Data Protection Act, 2023, applicable rules, and notifications issued by the Government of India.

Where required, we will ensure that appropriate contractual, organizational, and technical safeguards are implemented to protect your personal data during such transfers.

Sharing of Personal Data

We may share your personal data only where necessary to:

• Provide the services requested by you.
• Engage trusted service providers acting on our behalf.
• Comply with legal, statutory, regulatory, or judicial requirements.
• Protect our legal rights or respond to lawful requests from competent authorities.

We do not sell your personal data to third parties.

Exercising Your Rights

To exercise any of your rights under the DPDP Act, or if you have questions regarding this Privacy Notice, please contact:

Grievance Officer

CoralTax.ai

Email: privacy@coraltax.ai

Support Email: support@coraltax.ai

Phone: +91 81478 54709

To protect your personal data, we may require reasonable information to verify your identity before acting on your request.

Updates to this Privacy Notice

We may update this Privacy Notice from time to time to reflect changes in our services, legal obligations, or business practices. Any revised version will be published on our website with the updated effective date.