PRIVACY POLICY
OPEN FINANCIAL TECHNOLOGIES PRIVATE LIMITED (“OFTPL”, "Optotax", "We", "Our", "Us") is a company incorporated in India having its registered office at 3rd Floor, Tower 2, RGA Tech Park, 18 Sarjapur Road, Hadosiddapura, Doddakannelli, Bengaluru, Karnataka – 560035. We started with the mission to simplify GST compliance management for Chartered Accountants, Tax Advocates, and Tax Practitioners. Today, we're transforming the way professionals manage GST compliance for their clients through seamless collaboration with simple GST Return Filing and Reporting solutions.
This policy ("Privacy Policy") provides You (defined below) with details about the manner in which Your (defined below) data including Personal Information is collected, processed, stored and used by Us (defined below). You are advised to read this Privacy Policy carefully. By registering on the Platform (defined below) and consenting to this Privacy Policy using any medium: website, web Platform, mobile site, mobile application or otherwise, You permit Us to use and disclose Your data including Personal Information (defined below) in accordance with this Privacy Policy. If You do not agree to the terms of the Privacy Policy, please do not use, or access the Platform.
Additionally, by using this Platform and while sharing any information on the Platform you confirm and agree that you have all the necessary consents and approvals of any concerned third-party/client in place to share such information with Us.
"Personal Information" of a person means any information that relates to a natural person, which, either directly or indirectly, in combination with other information available or likely to be available with Us, is capable of identifying such person.
“Platform” means the Website i.e. www.optotax.com and Optotax mobile application (including all associated services, features, and content).
Note 1: We do not store GSTN passwords in plain text format. All GSTN passwords are encrypted using industry-standard encryption methods.
Note 2: We do not store complete GST return data permanently. Data is processed for compliance purposes and securely deleted as per our retention policy.
Note 3: It is strongly recommended for you to return to this page periodically to review the most current version of this Privacy Policy, which is amended by us from time to time.
Throughout this Privacy Policy, the capitalized terms "Optotax", "We", "Us" and "Our" refers to Open Financial Technologies Private Limited, its affiliates and assigns, and the terms "User", "You", "Your", and "Yourself" refer to the users of the Platform whose Personal Information is being collected in accordance with the terms of this Privacy Policy. Optotax is providing this Privacy Policy to familiarize you with:
This Privacy Policy applies to digital Personal Information or Personal Information collected in physical form and subsequently stored electronically.
- We handle Personal Information in our own right and for and on behalf of the Users.
- The Platform should not be used or accessed by minors (persons under the age of 18 years).
- By registering on the Platform, You are accepting this Privacy Policy. This Privacy Policy is incorporated into and subject to the terms of use governing access and use of the Platform (hosted at www.optotax.com/terms) ("Terms of Use").
When You interact with Us, depending on who you are (Chartered Accountant, Tax Advocate, Tax Practitioner, or business professional) and how You interact with Us (telephone, online via Platform, or offline), We may collect, use, receive, store, analyse, combine, transfer or otherwise process different categories of your Personal Information. This allows Us to provide services and features that most likely meet Your needs, and to customise the Platform to meet your requirements and make Your experience safer and easier. We collect Personal Information from You that We consider necessary for achieving the purposes specified below.
We have summarised the categories of Personal Information and the purposes of processing such Personal Information in the table below:
| Category | Purpose |
|---|---|
| 1) Email | Used as a unique identifier |
| 2) Firm Practice Type | Used for user classification and personalized process flow |
| 3) Firm Name | To populate the details in dashboard, lists etc |
| 4) Firm Owner Name | To populate the details in dashboard, lists etc |
| 5) Firm Email | For official communication with the firm, notifications, and account recovery |
| 6) Firm Owner Mobile Number | For direct contact, verification, two-factor authentication, and urgent support |
| 7) Firm State | For regional compliance, reporting, and tailoring services to local regulations & targeted communication |
| 8) Firm City | For location-specific services, analytics, and targeted communication |
| 9) Firm Address | For correspondence, verification, compliance, and accurate delivery of documents |
| 10) Membership Number | To verify professional credentials, enable membership tracking, and compliance |
| 11) Firm Mobile Number | For alternate contact & Business communication |
| 12) GST portal username | For ease of access to GST portal APIs |
| 13) GST portal password | For ease of access to GST portal APIs |
| 14) GST Number | For ease of access to GST portal APIs |
| 15) Client Name | To populate the details in dashboard, lists etc |
| 16) Client phone number | To update and enhance experience on the Optotax Platform and incidental services if any |
| 17) Client Email | To update and enhance experience on the Optotax Platform and incidental services if any |
| 18) Client contact person name | To update and enhance experience on the Optotax Platform and incidental services if any |
| 19) Client address | To update and enhance experience on the Optotax Platform and incidental services if any |
| 20) Client city | To update and enhance experience on the Optotax Platform and incidental services if any |
| 21) Client state | For location-based reporting and analytics |
| 22) GST filing status | To show pending/filed status in dashboard |
| 23) User last login status | To track the latest activity of the customer, for security monitoring, user engagement analytics, and to detect inactive accounts |
| 24) Users activity in Optotax like reports download etc | For product usage analytics, feature adoption tracking, and improving user experience |
Please note:
- We do not collect any personal information concerning your race, ethnicity, religion, sexual orientation, political beliefs, or health.
- We do not collect, store, or process biometric data in our systems, except where explicitly permitted under applicable laws and regulations.
- We do not access your device's files, media, contacts, call logs, or telephony functions without explicit permission.
Optotax respects the privacy of its Users and is committed to protect such privacy as detailed herein. You may encounter "Cookies" or other similar devices on a web page. These are data collection devices to help analyse Our web flow and measure promotional effectiveness. "Cookies" are small files placed on Your hard drive that assist Us in providing Services to You. Most cookies are session cookies, meaning that they are automatically deleted from Your hard drive at the end of a session. You are always free to decline a cookie if Your browser permits.
Once you create an account (register) on the Platform and give Us Your Personal Information, You are not anonymous to Us. Wherever possible, We indicate which fields are required and which fields are optional. If You are unable to provide the mandatory information We need, We may not be able to provide You with the Service You have requested.
Optotax offers the Platform services as a technology aggregator for GST compliance management. In view of this, disclosure of Your information may be required by Us to provide You access to Our services, to comply with Our legal obligations, to prevent, detect, mitigate, and investigate fraudulent or illegal activities related to Our services.
We have partnered with certain entities as listed below ("Vendors"), for the purpose of providing comprehensive GST compliance services. We may use their assistance on a case-to-case basis and as per the services availed by the User on the Platform.
We ensure that these Vendors are contractually obligated to implement/have the appropriate organizational, security and technical measures and safeguards to secure Your Personal Information, from unauthorized access, disclosure, or use, which may include where commercially reasonable or to the extent required by applicable laws, using appropriate data encryption, firewalls, and/or other appropriate security measures in line with generally accepted industry standards and in compliance with applicable laws. We also try to contractually obligate the Vendors to not store or retain any Personal Information belonging to You beyond what is necessary for service delivery. All Your data received by the Vendor is stored by the Vendor exclusively within the territory of India. Notwithstanding anything herein, these Vendors/third parties process your Personal Information as per their independent privacy policies which can be accessed through their individual websites.
We do not disclose Your Personal Information to third parties except in accordance with the terms contained herein.
Government and Regulatory Compliance: We may share your information with government authorities, tax departments, and regulatory bodies as required by applicable laws, including but not limited to:
- GST Network (GSTN) for return filing and compliance
- Income Tax Department for TDS and other tax-related matters
- Other regulatory authorities as mandated by law
We may disclose Personal Information if required to do so by law or in the good faith belief that such disclosure is reasonably necessary to respond to subpoenas, court orders, or other legal process.
We may disclose Personal Information to law enforcement offices, third party rights owners, or others in the good faith belief that such disclosure is reasonably necessary to: enforce the Terms of Use or this Privacy Policy; respond to claims that content violates the rights of a third party; or protect the rights, property or personal safety of Our users or the general public.
You are aware of all security risks, including possible third-party interception of any of Your transactions and data on the internet. You agree and undertake that You shall not hold Optotax liable therefore in any way. The use and storage of any information, including without limitation, GSTN credentials, client data, transaction information, and any other information available or stored on Your Device is at Your own risk and responsibility.
Security Measures We Implement:
- Industry-standard encryption for all data transmission
- Secure storage of GSTN credentials using advanced encryption
- Regular security audits and vulnerability assessments
- Access controls and authentication mechanisms
- Data backup and disaster recovery procedures
You furthermore acknowledge and accept that while Optotax implements robust security measures, no system is completely immune to security breaches, and we continuously work to enhance our security protocols.
Right to Access
You may access:
- A summary of your Personal Information being processed by us along with information on the processing activities undertaken by us with respect to your Personal Data
- Subject to applicable law, the identities of the third-parties with whom we have shared your Personal Information along with a description of such Personal Information
- Any other information relating to your Personal Information as we may be required to share in accordance with applicable Data Protection Law
You may submit a request to access your Personal Information through the procedure prescribed under applicable law.
Right to withdraw consent to processing of your Personal Information and Right to erase your Personal Information
Where consent is the basis of us processing of your Personal Information, when you log into your account, you may withdraw such consent and we will, within reasonable time and subject to applicable law, cease to process your Personal Information. However, you may no longer have access to the Platform in the event you withdraw your consent to us processing your Personal Information. Upon withdrawal of your consent to us processing your Personal Information, we will also, unless we are required to retain your Personal Information for compliance with applicable Data Protection Law, erase your Personal Information, but may retain aggregated data or de-identified data derived from or incorporating your Personal Information that does not identify you.
You may submit a request to erase your Personal Information in our possession, through the procedure prescribed under applicable Data Protection Law. Upon receipt of such request, unless we are required to retain your Personal Information for compliance with applicable Data Protection Law, we will erase your Personal Information but may retain aggregated data or de-identified data derived from or incorporating your Personal Information that does not identify you.
Right to nominate
You may submit a request, through the procedure prescribed under applicable Data Protection Law, to nominate an individual who shall, in the event of your death or incapacity, exercise your rights with respect to us processing your Personal Information.
Data Retention
We retain Personal Information for as long as reasonably necessary for the purposes described in this Privacy Policy, or as required by applicable law (e.g., for tax, legal, accounting, GST compliance, or other regulatory purposes), whichever is longer. Specifically:
- GST-related data may be retained for 7 years or as per GST law requirements
- Account information is retained for the duration of active use plus applicable legal retention periods
- Transaction logs and compliance records are maintained as per regulatory requirements
Data Localization
We maintain all data obtained in the course of providing our services exclusively within the geographical boundaries of India. This includes, but is not limited to, user information, GST return data, client information, and any other data collected during the performance of our services.
If you have any questions, concerns, complaints or grievances regarding our privacy policies or our processing of Personal Information, please write to our Grievance Officer at:
Grievance Officer Details:
- Name: Mr. Premjith MR
- Email: [email protected]
- Address: Open Financial Technologies Private Limited, 3rd Floor, Tower 2, RGA Tech Park, 18 Sarjapur Road, Hadosiddapura, Doddakannelli, Bengaluru, Karnataka – 560035
- Hours: 10 AM to 7 PM (Monday to Friday)
We will endeavour to resolve any complaint or grievance that you may have regarding our use of your Personal Information within 7 working days or such other time-period as may be permitted under applicable law.
In the event we do not address your grievances or in the event of a personal data breach, you may approach the Data Protection Board of India to make a complaint.
Links to third-party advertisements, third-party websites or any third-party electronic communication service which are operated by third parties may be provided on the Platform. Such links may not be controlled by, or affiliated to, or associated with, Optotax unless otherwise expressly specified on the Platform.
Optotax is not responsible for any form of transmission, whatsoever, received by You from any third-party website. Accordingly, Optotax does not make any representations concerning the privacy practices or policies of such third parties or terms of use of such third-party websites, nor does Optotax control or guarantee the accuracy, integrity, or quality of the information, data, text, software, or other materials available on such third-party websites. The inclusion or exclusion does not imply any endorsement by Optotax of the third-party websites, the website's provider, or the information on the third-party website. The information provided by You to such third-party websites shall be governed in accordance with the privacy policies of such third-party websites, and it is recommended that You review the privacy policy of such third-party websites prior to using such websites.
You hereby agree that the application and copies of all documents submitted by You, to the extent permitted under applicable law, are and shall remain the property of Optotax, and Optotax shall not be obliged to return the same to You upon Your request. Any unauthorized access to the Platform is a breach of these terms and a violation of the law. You agree not to access the Platform by any means other than through the interface that is provided by Optotax.
Note :- This Privacy Policy is subject to frequent changes. Please check this page regularly for any changes/updates in the Privacy Policy.