Privacy Policy

Welcome to ApniReturn.com and the ApniReturn Mobile Application (collectively referred to as the “Platform”).

This Privacy Policy explains how ApniReturn.com collects, uses, processes, stores, protects and discloses personal information of customers, clients, users, agents and other individuals who access or use our website, mobile application and associated services.

ApniReturn.com provides and facilitates digital, taxation, business registration, documentation, consultancy, compliance and other professional services, including Income Tax Return (ITR) filing assistance, GST registration and filing, PAN-related services, digital signature services, business registrations and other services made available through the Platform.

We recognize the importance of protecting personal information and maintaining the confidentiality of customer documents, financial records, tax information, identity documents and other sensitive business information.

Our objective is to ensure that Customer information is accessed only for legitimate, authorized and lawful purposes and is protected against unauthorized access, disclosure, misuse or alteration.

This Policy shall be interpreted in accordance with applicable Indian laws, including the Information Technology Act, 2000, applicable rules and regulations, the Digital Personal Data Protection Act, 2023, and the Digital Personal Data Protection Rules, 2025, to the extent applicable and in force.

This Privacy Policy applies to all users of:

• The official website, ApniReturn.com;
• The ApniReturn Mobile Application;
• Customer and agent registration facilities;
• Online payment and service-booking facilities;
• Document-upload and verification facilities;
• Customer support and communication channels; and
• Other digital services provided through the Platform.

By accessing or using the Platform, users acknowledge that this Privacy Policy has been made available to them. Where consent is required under applicable law, the relevant consent shall be obtained in accordance with the applicable requirements.

Depending on the services requested and the information necessary to provide them, we may collect the following categories of information.

Personal Information: full name and date of birth; registered mobile number and email address; residential and business address; identity and address verification information; customer or agent account details; and authorized representative information.

Taxation and Financial Information: for taxation, accounting, registration and compliance-related services, we may collect PAN-related information; Aadhaar-related information where lawfully required; Income Tax Return records and acknowledgements; Form 16, Form 26AS, AIS and TIS information; bank statements and financial transaction records; GSTIN, GST returns and other tax records; income, deductions, TDS and business financial information; accounting documents and supporting financial records; and other documents voluntarily provided or lawfully required for the requested service.

Business and Registration Information: depending on the selected service, we may collect information relating to proprietorships, partnerships, LLPs, companies, directors, partners, business addresses, incorporation documents, MSME registration, FSSAI licences, PF, ESI and other registrations or statutory compliances.

Documents and Uploaded Files: users may upload identity proofs, PAN documents, Aadhaar documents, photographs, signatures, bank statements, tax returns, certificates, agreements, business documents and other records necessary for a particular service. We expect users to provide accurate information and upload only documents they are authorized to share.

Payment Information: we may collect transaction references, order IDs, payment status, payment amounts, invoice details and refund-related information. Online payments may be processed through authorized payment gateways or payment service providers. Payment credentials are handled in accordance with the relevant payment provider’s systems and applicable requirements.

Technical Information: we may collect limited technical information such as IP addresses, browser details, device type, application version, login records, session information, security logs and Platform usage information, subject to applicable law and relevant settings.

We process personal information for legitimate and disclosed purposes, including:

• Creating and managing customer and agent accounts;
• Providing the services selected by users;
• Preparing and processing tax returns, GST filings, registrations and other applications;
• Verifying identity and authorized instructions;
• Processing payments, invoices, refunds and service requests;
• Communicating service updates, document requirements and filing status;
• Maintaining customer records and complying with applicable laws;
• Preventing fraud, impersonation and unauthorized account access;
• Providing customer support and resolving grievances;
• Maintaining the security, performance and functionality of the Platform; and
• Sending promotional communications where legally permitted and where required consent or preferences have been appropriately addressed.

We shall not knowingly use personal information for an unrelated purpose in a manner inconsistent with applicable law.

ApniReturn.com is committed to maintaining the confidentiality of Customer information.

We do not sell, rent or commercially trade personal information belonging to our customers or clients. We do not voluntarily share confidential Customer information with unrelated or unauthorized third parties.

Customer documents, tax records, financial information, identity documents and other confidential information shall be handled on a need-to-know basis and accessed only by authorized personnel for legitimate service-related purposes.

No person shall be permitted to obtain Customer information merely by claiming to be a relative, friend, employee, business associate, agent or representative of the Customer.

We shall not voluntarily disclose confidential Customer information to an unverified person merely because that person knows the Customer’s name, PAN, Aadhaar number, registered mobile number, email address or transaction reference.

This confidentiality commitment does not prohibit limited processing necessary to deliver an authorized service, disclosure required by law or disclosure otherwise lawfully permitted under this Policy.

ApniReturn.com shall ordinarily communicate confidential Customer-specific information through the mobile number or email address registered and verified in the Customer’s account records, subject to the nature of the communication and applicable security requirements.

Registered Mobile Number: where required, verification may be carried out through an OTP, confirmation message or another appropriate authentication method sent to the registered mobile number.

Registered Email Address: where required, verification may be carried out through a confirmation link, OTP or another appropriate authentication method sent to the registered email address.

Information Disclosure: confidential documents, tax information, account information and other Customer-specific records shall not ordinarily be disclosed to a person using a different or unverified contact channel without satisfactory authorization.

Change of Contact Details: where a Customer changes their registered mobile number or email address, the new contact details may be used for confidential communications only after the prescribed verification process has been completed.

Additional Verification: a registered mobile number or email address is an important verification method, but it may not establish legal authority in every situation. ApniReturn.com may request additional identity verification or supporting authorization documents where reasonably necessary to protect Customer information.

ApniReturn.com follows a strict authorization process for requests made by persons other than the Customer.

A person seeking access to a Customer’s confidential information must establish appropriate authority through a verifiable method.

Depending on the circumstances, we may require:

• OTP verification through the registered mobile number;
• Confirmation through the registered email address;
• Confirmation through an officially recognized WhatsApp communication channel, where available;
• Written authorization or a legally valid authorization document;
• Verification of the requesting person’s identity; or
• Additional information reasonably necessary to verify the scope and validity of the request.

Without satisfactory verification of the required authorization, ApniReturn.com shall not voluntarily disclose confidential Customer information to a third party.

Authorization for one transaction, document or service shall not automatically be treated as authorization to access all Customer records.

We reserve the right to reject incomplete, suspicious, expired, inconsistent or otherwise insufficient authorization requests.

Where disclosure is required or lawfully permitted under applicable law, a valid court order, a competent authority’s lawful direction or another recognized legal exception, separate OTP or email authorization may not be required.

ApniReturn.com does not sell Customer data. However, certain services require limited information to be processed by authorized service providers.

Depending on the service, these may include:

• Payment gateways and payment processors;
• Website hosting and cloud infrastructure providers;
• SMS, email and OTP delivery providers;
• Technical support and cybersecurity providers;
• Authorized employees, professionals and service personnel;
• Government departments and official filing portals; and
• Other service providers necessary for an authorized and lawful business purpose.

Access shall be limited, as reasonably practicable, to the information necessary for the relevant function.

Where appropriate, we seek to impose confidentiality and security obligations on service providers and restrict the use of Customer information for unrelated purposes.

Any consent, notice, authorization or other legal basis required for such processing shall be addressed in accordance with applicable law.

Services such as Income Tax Return filing, GST compliance, PAN-related assistance, digital signatures and business registrations may require information to be submitted to government departments, statutory authorities or official portals.

Where a Customer requests such a service, the information necessary to complete the authorized service may be processed and submitted for that specific purpose.

Once information is submitted to an independent government authority or statutory portal, its subsequent handling may be governed by that authority’s own laws, procedures and privacy practices.

ApniReturn.com shall not use Customer documents to make unrelated filings or submissions without appropriate authorization or another lawful basis.

Customers should review the accuracy of the information supplied for filing and provide complete and correct documents.

Customers must protect their passwords, OTPs, digital signature credentials, banking PINs and other confidential authentication information.

Where OTP-based authentication, e-signature, Aadhaar-based verification or digital signature services are used, the process shall be carried out through the relevant authorized system or service provider.

Customers should verify the purpose of an authentication request before approving it.

ApniReturn.com does not intentionally request banking PINs or banking passwords to process ordinary customer support or refund requests.

Customers should promptly notify us if they suspect unauthorized access to their account, registered mobile number, email address or digital signature credentials.

We take reasonable security measures designed to protect personal information against unauthorized access, disclosure, alteration, loss or misuse.

Depending on the information and service, measures may include access restrictions, authentication procedures, secure transmission methods, technical monitoring, backup procedures and confidentiality obligations for authorized personnel.

No electronic platform or storage system can be guaranteed to be completely secure in all circumstances. Therefore, we do not represent that unauthorized access or cyber incidents are impossible.

Where a personal data breach occurs, ApniReturn.com shall take appropriate remedial steps and comply with applicable notification and reporting obligations to the extent required by law.

Our website or mobile application may use cookies, session identifiers and similar technologies to maintain login sessions, support essential features, improve performance, diagnose technical issues and understand Platform usage.

Where analytics or non-essential tracking technologies are used, the applicable consent and preference requirements shall be followed.

Users may restrict cookies through their browser settings. However, disabling essential cookies may affect certain Platform functions.

We may send essential service-related communications, including payment confirmations, order updates, filing reminders, document requests, security alerts and refund notifications.

Promotional messages, marketing emails and similar communications shall be handled in accordance with applicable law and the relevant consent and preference requirements.

Where an opt-out facility is available or legally required, users may use it to stop promotional communications. Essential transactional and security communications may continue where necessary and legally permitted.

ApniReturn.com retains personal information for as long as reasonably necessary to provide the relevant services and fulfil applicable legal, tax, accounting, regulatory, contractual and dispute-resolution obligations.

Retention may depend on the type of service, the nature of the records, applicable statutory requirements, pending complaints or legal proceedings and other lawful purposes.

When information is no longer required and there is no lawful basis for retaining it, we shall take appropriate steps to erase or dispose of it in accordance with applicable law and our retention procedures.

Deletion may be delayed where records must legally be retained, a transaction remains unresolved or information is required for a lawful claim or regulatory obligation.

Subject to applicable law and the provisions in force at the relevant time, Customers may have rights to request information about their personal data, seek correction of inaccurate information, request erasure where legally permissible, withdraw consent where processing is based on consent and raise grievances concerning the processing of personal data.

Requests shall be submitted through the official contact channels specified in this Policy.

We may require reasonable identity verification before acting on a request.

Requests may be limited or declined where permitted or required by law, including where records must be retained for legal compliance or where the request cannot be adequately verified.

Withdrawal of consent may affect our ability to provide a service that depends on the relevant information. It does not invalidate processing lawfully carried out before the withdrawal.

Where personal data relating to a child is required for a legitimate service, ApniReturn.com shall handle such information in accordance with applicable law, including any applicable requirements concerning parental or guardian consent and children’s data.

We do not knowingly collect children’s personal information for unrelated purposes or unauthorized commercial exploitation.

Where we become aware of processing that violates applicable requirements, we shall take appropriate action in accordance with the law.

Where an agent or representative assists a Customer through the Platform, access to Customer information shall be limited to the extent necessary for the authorized service and subject to applicable authorization and access controls.

An agent shall not automatically be entitled to access all information associated with a Customer’s account.

Access may be restricted, suspended or revoked where authorization expires, is withdrawn, becomes invalid or raises reasonable security concerns.

Customers should not share account passwords or confidential credentials with agents unless an appropriate and secure authorization mechanism is expressly supported.

The Platform may contain links to government websites, payment portals, statutory authorities or other external websites.

The collection and use of information by independent external websites may be governed by their own privacy policies and terms.

Users should review the relevant terms before submitting information directly to an external website.

ApniReturn.com does not control independent third-party websites and cannot guarantee their privacy practices. This clause does not exclude any responsibility that may otherwise arise under applicable law.

Certain technical service providers may process or store information outside India.

Any such processing or transfer shall be subject to applicable Indian law and relevant restrictions or requirements concerning cross-border transfers of personal data.

Where a legal restriction, consent or authorization requirement applies, we shall comply with that requirement.

Customers are responsible for providing accurate information, maintaining the security of their registered contact details and promptly reporting suspected unauthorized access.

Customers should not voluntarily share confidential documents, OTPs, passwords or authentication credentials with unknown persons.

Where a Customer suspects that personal information has been disclosed or accessed without authorization, the Customer should notify ApniReturn.com promptly so that appropriate steps can be considered.

ApniReturn.com may update this Privacy Policy to reflect changes in services, technology, security practices, business operations or applicable law.

The revised version shall be published on the website and made available through the mobile application, as appropriate, with an updated revision date.

Where a material change requires a new notice or consent under applicable law, the necessary steps shall be taken.

No revision shall retrospectively remove rights already accrued to a Customer or override mandatory legal requirements.

Customers may raise privacy-related complaints, request correction of personal information, report suspected unauthorized disclosure or seek information about the processing of their personal data through the official customer support or grievance facility available on ApniReturn.com and the ApniReturn Mobile Application.

Privacy-related requests should include sufficient information to identify the relevant account or transaction. Customers should not send passwords, banking PINs or unnecessary sensitive information.

ApniReturn.com shall handle such requests in accordance with applicable law and the relevant grievance redressal requirements.

This Privacy Policy shall be governed by the laws of India.

Subject to applicable law, competent courts at Shahdara, Delhi, including courts having territorial and subject-matter jurisdiction in the Karkardooma Court complex, may exercise jurisdiction over disputes arising from this Policy where such jurisdiction is legally available.

Nothing in this clause shall exclude the jurisdiction of any statutory authority, consumer commission, data protection authority or other competent forum where applicable law confers jurisdiction upon that forum.

ApniReturn.com is committed to protecting Customer confidentiality and preventing unauthorized access, disclosure, misuse or commercial exploitation of personal information.

We do not sell Customer personal information and do not voluntarily disclose confidential Customer data to unrelated or unauthorized third parties without appropriate authorization or another lawful basis.

Where limited data processing is necessary to deliver an authorized service, comply with applicable law or meet a legitimate legal obligation, we shall seek to restrict the information to the relevant purpose and comply with applicable requirements.

This Privacy Policy shall be read together with the Terms and Conditions, Refund Policy and other applicable service-specific terms of ApniReturn.com and the ApniReturn Mobile Application.