Privacy Policy

The Services are operated by Adhivitta Filewithus Private Limited (CIN: U69200TS2025PTC208480; GSTIN: 36ABECA4484G1ZL), with its registered office at Plot No 277, H.No. 3-6-13/2, 4th Floor, Usha Enclave, Vivekananda Nagar Colony, Kukatpally, Hyderabad 500072, Telangana, India. For any privacy question or request, contact us at support@filewithus.ai.

We collect only what we need to provide tax, billing, and compliance services:

• Account data: your name, email address, mobile number, and a securely hashed password (or a Google sign-in identifier if you use Google).
• Business & tax data: business name, PAN, GSTIN, addresses, bank account details, invoices, purchases, payments, inventory, and the financial records you create or upload.
• KYC / uploaded documents: documents you choose to upload such as Form 16, PAN, Aadhaar, and bank statements, used for the features you request (e.g. OCR, return preparation).
• Customer / vendor data you enter: details of your clients and suppliers (names, contact details, GSTINs) that you add to manage your invoicing and compliance. You are responsible for having a lawful basis to provide this to us.
• Device & usage data: app version, device type, IP address, and log/diagnostic data used for security and reliability.
• Mobile permissions: with your consent, the Android app uses your camera and photo/file picker only to let you capture or attach documents and images. We do not scan your gallery or files in the background.

• To provide the Services — generate GST-compliant invoices, prepare tax returns, track compliance, and manage your business records.
• To authenticate you, keep your account secure, and prevent fraud or abuse.
• To process payments for paid plans through our payment partner.
• To provide customer support and respond to your requests.
• To meet legal, tax, and regulatory obligations.

We do not sell your personal data, and we do not use your financial documents for advertising.

We process your personal data based on the consent you provide when you create an account and use specific features, and for legitimate uses permitted under the DPDP Act, including providing a service you have requested and complying with law. You may withdraw consent at any time (see “Your rights” below); withdrawing consent for essential processing may mean we can no longer provide the Services.

We share data only with parties that help us run the Services or where the law requires it:

• Cloud hosting & storage (Amazon Web Services, India region) to host the application and store your data securely.
• Payment processing (Razorpay) when you purchase a paid plan — they receive only what is needed to process the transaction.
• Email/communication providers to deliver transactional emails such as reminders and notifications.
• Chartered Accountants you connect — if you invite or share with a CA through the Services, the data you share becomes accessible to them at your direction.
• Government & regulatory bodies (e.g. GSTN, the Income Tax Department) when you file or as required by law.

We require our service providers to protect your data and use it only for the purposes we specify.

• Sensitive identifiers (such as Aadhaar, PAN, and bank account numbers) are encrypted at rest.
• All data in transit is protected with TLS/HTTPS encryption.
• Access is restricted through authentication, role-based permissions, and audit logging of financial actions.
• Data is hosted in the India (ap-south-1) region.

No method of transmission or storage is 100% secure, but we work to protect your information using industry-standard safeguards.

We keep your personal and financial data for as long as your account is active and for as long as needed to provide the Services. Because invoices, tax returns, and related financial records are subject to statutory retention requirements under GST and Income Tax law, we may retain certain records for the period required by law (generally up to 8 years) even after you request deletion. After the applicable period, we delete or anonymise the data.

Under the DPDP Act, you have the right to:

• Access a summary of the personal data we process about you.
• Correct or update inaccurate or incomplete data.
• Request erasure of your personal data (subject to legal retention above).
• Withdraw consent and nominate another individual to exercise your rights.
• Raise a grievance with our Grievance Officer.

To exercise any of these rights, email support@filewithus.ai or use the in-app option in Profile → Delete account.

You can request deletion of your account and associated personal data at any time. See our Account & Data Deletion page for what is deleted, what we are legally required to retain, and how to make the request.

The Services are intended for businesses and individuals aged 18 and over. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.

We may update this Privacy Policy from time to time. We will revise the “Last updated” date above and, where appropriate, notify you in the app or by email.

For privacy questions or to raise a grievance under the DPDP Act:

• Grievance Officer, Adhivitta Filewithus Private Limited
• Email: support@filewithus.ai
• Address: Plot No 277, H.No. 3-6-13/2, 4th Floor, Usha Enclave, Vivekananda Nagar Colony, Kukatpally, Hyderabad 500072, Telangana, India