Privacy Policy & Data Protection

This Privacy Policy constitutes a legally binding document between you (the “Data Principal” or “User”) and VYAPTAX INDIA LLP, a limited liability partnership incorporated under the Limited Liability Partnership Act, 2008, having its principal corporate place of business at A-110, Top Floor, Sai Sal Apt, Koproli, Matheran Road, New Panvel, Panvel, Raigad, Maharashtra 410206 (the “Data Fiduciary”, “VyapTax”, “we”, or “us”).

This Policy is drafted and published pursuant to Section 43A of the Information Technology Act, 2000, Rule 4 of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (“SPDI Rules”), and the provisions of the Digital Personal Data Protection Act, 2023 (“DPDP Act”).

To perform corporate registrations, tax submissions, and statutory certifications, we collect and process the following structured datasets:

VyapTax processes your personal and corporate data strictly in accordance with lawful processing conditions recognized under Section 4 and Section 7 of the DPDP Act, 2023:

• Contractual Execution: Preparing, compiling, and submitting government compliance forms requested by you, including SPICe+ (Company Incorporation), FiLLiP (LLP Formation), REG-01 (GST Registration), and TM-A (Trademark Applications).
• Statutory Legal Compliance: Complying with mandatory filing regimes prescribed by the Ministry of Corporate Affairs (MCA), Central Board of Direct Taxes (CBDT), and Central Board of Indirect Taxes and Customs (CBIC).
• Anti-Fraud & KYC Verification: Verifying the authenticity of directors and shareholders to comply with the Prevention of Money Laundering Act, 2002 (PMLA) and Sections 447/448 of the Companies Act, 2013.
• Transaction Invoicing & GST Credit: Generating tax invoices, delivering electronic delivery receipts, and transmitting GSTR-1 filings to allow input tax credit claim on your GSTIN.

Corporate filing in India requires the affixation of Class 3 Digital Signature Certificates (DSC) issued by Licensed Certifying Authorities (CCA-approved CAs). Our DSC security protocol guarantees:

VyapTax discloses data exclusively to authorised recipients necessary to deliver the commissioned corporate services:

For international corporate formations (such as US Delaware LLCs, UK Companies House filings, UAE Mainland / Freezone licences, and Singapore ACRA entities), we transfer necessary director identity documentation to overseas registered registered agents and company registries.

Such cross-border transfers are executed strictly under Section 16 of the DPDP Act, 2023, ensuring that the recipient jurisdiction provides adequate data protection safeguards and is not subject to sovereign negative listing by the Central Government of India.

In compliance with mandatory Indian corporate and tax statutes, VyapTax adheres to strict document retention schedules:

As a Data Principal under Chapter III of the DPDP Act, 2023, you are entitled to exercise the following statutory rights:

• Right to Access Summary: Request a concise summary of your personal data held by VyapTax and the identities of third parties with whom it was shared.
• Right to Correction & Completion: Request the rectification of misleading, outdated, or incomplete personal data in our operational vault.
• Right to Erasure (Subject to Law): Request data erasure when processing is no longer required, subject to mandatory 8-year statutory tax retention requirements.
• Right of Grievance Redressal: Direct escalation to our designated Data Protection Officer before filing complaints with the Data Protection Board of India.
• Right to Nominate: Designate an authorized individual to exercise your data principal rights in the event of death or incapacity.

VyapTax implements reasonable security practices and procedures in compliance with Rule 5 of the SPDI Rules and Section 8(5) of the DPDP Act, 2023:

The Platform uses small cryptographic text files known as cookies to maintain authenticated sessions, secure form submissions, and calculate aggregate anonymous traffic metrics. We deploy:

• Strictly Necessary Cookies: Essential for secure portal login, CSRF verification, and checkout continuity.
• Telemetry & Performance Cookies: Aggregated Google Analytics 4 tracking with IP anonymization enabled to identify page speed bottlenecks.

You can configure your browser to reject all cookies; however, certain portal functions such as document upload and dashboard logins will not function properly without operational cookies.

Our business registration and legal compliance services are directed exclusively to commercial enterprises and individuals possessing full legal capacity under the Indian Contract Act, 1872.

In strict adherence to Section 9 of the DPDP Act, 2023, VyapTax does not knowingly process personal data belonging to children (individuals under 18 years of age) or engage in behavioral tracking of minors. Any unintended minor data identified will be permanently expunged immediately.

To exercise your statutory data principal rights, request data corrections, or register privacy complaints, please contact our designated Data Protection Officer: