Privacy Policy
How DigiFiling collects, uses and protects the information you share with us.
Last updated: 1 January 2026
At DigiFiling (a proprietorship firm of Vivek Kumar; "DigiFiling", "we", "us", or "our"), we are deeply committed to protecting your privacy. This Privacy Policy applies to all visitors, users, and clients of our website www.digifiling.in and all related services. By accessing our website or availing our services, you consent to the collection and use of your information as described in this Policy. Please read this document carefully.
💡 TL;DR (Summary): We collect only what's needed to serve you, we never sell your data, we store it securely, and you can ask us to delete it anytime. That's our promise.
Section 01
Information We Collect
We collect information from you in two primary ways — information you provide directly to us, and information collected automatically when you use our website.
1.1 Information You Provide Directly
- •Personal Identification: Full name, email address, mobile number, PAN card number, Aadhaar number (only when required for government filings)
- •Business Information: Business name, type of entity, industry, annual turnover range, registered address, GSTIN (if applicable)
- •Documents Uploaded: Identity proofs, address proofs, business documents shared via WhatsApp, email, or our portal for the purpose of registration
- •Communication Data: Messages sent via contact forms, WhatsApp, email, or phone calls (with your consent)
- •Payment Information: Transaction details, UTR number — we do not store full card or UPI credentials on our servers
1.2 Information Collected Automatically
- •Device & Browser Data: IP address, browser type and version, operating system, device type
- •Usage Data: Pages visited, time spent on pages, referring URLs, click paths, search queries on our site
- •Location Data: Approximate geographic location derived from IP address (city/state level, not GPS)
- •Cookies & Tracking Technologies: Session cookies, analytics cookies — detailed in Section 4
🔒 Sensitive Information: Where we collect sensitive personal data such as Aadhaar, PAN, or financial records, we do so strictly for the purpose of government filing services and in accordance with the IT (Amendment) Act, 2008 and SPDI Rules, 2011.
Section 02
How We Use Your Information
We use the information we collect only for legitimate business purposes. We will never use your data in a way that you wouldn't reasonably expect.
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Process & fulfill your service request (FSSAI, GST, TM etc.) | Name, phone, documents, business info | Contractual necessity |
| Communicate about your application status | Phone, email, WhatsApp | Contractual necessity |
| File applications on govt portals on your behalf | Identity docs, Aadhaar, PAN, business details | Your explicit consent |
| Send renewal reminders, compliance alerts | Email, phone, service details | Legitimate interest |
| Process payments & issue receipts | Transaction data, name | Contractual necessity |
| Improve our website and services | Usage data, cookies, analytics | Legitimate interest |
| Marketing & promotional communications | Email, phone (opt-in only) | Consent (can opt out anytime) |
| Fraud prevention and security | IP, device data, usage patterns | Legitimate interest / Legal obligation |
| Comply with legal requirements | Any data as required by law | Legal obligation |
✅ Marketing opt-out: If you no longer wish to receive promotional SMS, emails, or WhatsApp messages from us, you can unsubscribe at any time by replying "STOP" or contacting us at support@digifiling.in. Service-related communications cannot be opted out of while your application is active.
Section 03
How We Share Your Information
We do not sell, rent, or trade your personal information to any third party for commercial purposes. Period. Your data is shared only in the following limited circumstances:
- Government Portals: We submit your data on official government portals (FSSAI FoSCoS, GST.gov.in, IP India, MCA21, DGFT, Udyam) as required to process your registration. This is the core service you have engaged us for.
- Qualified Professionals: Our in-house or empanelled CAs, CSs, and legal experts who work on your file under strict confidentiality obligations.
- Payment Processors: Secure payment gateways (Razorpay, PayU, or similar) for processing transactions. These gateways are PCI-DSS compliant and maintain their own privacy policies.
- Technology Service Providers: Cloud hosting providers (AWS/Google Cloud), SMS/email platforms, and analytics tools under strict data processing agreements.
- Legal Requirements: When required by Indian law, court order, government authority, or to protect the rights, property, or safety of DigiFiling, its users, or the public.
- Business Transfer: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the successor entity, with prior notice to you.
🚫 We NEVER: Sell your data to advertisers, share your Aadhaar/PAN with unauthorized parties, use your data for profiling or targeting by third-party companies, or transfer data outside India without adequate safeguards.
Section 04
Cookies & Tracking Technologies
Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze site traffic, and understand user behavior. Here's what we use:
| Cookie Type | Purpose | Duration | Can Opt Out |
|---|---|---|---|
| Essential Cookies | Required for website functionality — login sessions, form security, navigation | Session | No (required) |
| Analytics Cookies | Google Analytics — track page views, traffic sources, user behavior (anonymized) | Up to 2 years | Yes |
| Preference Cookies | Remember your language, region, and display preferences | 1 year | Yes |
| Marketing Cookies | Google Ads / Meta Pixel for retargeting campaigns (only with consent) | 90 days | Yes |
You can control cookies through your browser settings. Most browsers allow you to block or delete cookies. However, disabling essential cookies may affect website functionality.
💡 To opt out of Google Analytics tracking, you can install the Google Analytics Opt-Out Browser Add-On at tools.google.com/dlpage/gaoptout. To opt out of Meta/Facebook pixel, visit facebook.com/settings/ads.
Section 05
Data Security
We implement industry-standard technical and organizational measures to protect your personal information against unauthorized access, loss, destruction, or alteration.
- 🔒SSL/TLS Encryption: All data transmitted between your browser and our servers is encrypted using 256-bit SSL encryption.
- 🔒Secure Document Storage: All uploaded documents are stored in encrypted cloud storage with access controls and audit logs.
- 🔒Access Controls: Only authorized personnel with a legitimate need can access your data. All access is logged and monitored.
- 🔒No Card Storage: We do not store your full credit card, debit card, or UPI credentials on our servers. All payment processing is handled by PCI-DSS compliant payment gateways.
- 🔒Regular Security Audits: Our systems undergo periodic security assessments to identify and address vulnerabilities.
- 🔒Staff Training: All employees handling personal data are trained on data privacy and confidentiality obligations.
⚠ Important: While we take all reasonable precautions, no method of transmission over the internet is 100% secure. In the event of a data breach that affects your rights, we will notify you as required under applicable Indian law.
Section 06
Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements.
| Data Type | Retention Period | Reason |
|---|---|---|
| Active client records & documents | Duration of service + 7 years | Legal compliance, audit requirements |
| Completed registration files | 7 years from completion | Income Tax & Company Law requirements |
| Financial / payment records | 8 years | GST, Income Tax Act obligations |
| Enquiry / lead data (non-client) | 2 years | Business purpose, then deleted |
| Website analytics data | 26 months (Google Analytics default) | Performance analysis, then anonymized |
| Marketing consent records | Until opt-out + 1 year | Proof of consent |
| Employee/contractor data | 10 years post employment | Labour law requirements |
After the retention period expires, we securely delete or anonymize your data so it can no longer be linked to you as an individual.
Section 07
Your Rights & Choices
As our user or client, you have the following rights regarding your personal data. To exercise any right, contact us at privacy@digifiling.in— we will respond within 30 days.
Right to Access
Request a copy of all personal data we hold about you and how it's being used.
Right to Correction
Request correction of any inaccurate or incomplete personal data we hold about you.
Right to Deletion
Request deletion of your personal data, subject to legal retention requirements.
Right to Restrict Processing
Request that we stop processing your data in certain circumstances.
Right to Data Portability
Request your data in a machine-readable format to transfer to another service provider.
Right to Withdraw Consent
Withdraw consent for marketing communications at any time without affecting prior processing.
Right to Complain
Lodge a complaint with the Data Protection Authority or IT Secretary, Govt of India.
Right to Object
Object to processing of your data for marketing, profiling, or research purposes.
💬 To exercise your rights, email us at privacy@digifiling.in with the subject line "Data Privacy Request – [Your Name]". We may ask you to verify your identity before processing the request. Response time: within 30 calendar days.
Section 08
Third-Party Websites & Links
Our website may contain links to third-party websites, government portals, and external resources for your convenience. These include:
- 📌Government portals: fssai.gov.in, gst.gov.in, ipindia.gov.in, mca.gov.in, udyamregistration.gov.in, dgft.gov.in
- 📌Payment gateways: Razorpay, PayU, or other processors
- 📌Social media platforms: LinkedIn, Instagram, Facebook, YouTube
Once you leave our website by clicking on an external link, we are no longer responsible for the privacy practices of that website. We encourage you to review the privacy policies of any third-party sites you visit. DigiFiling is not liable for any data practices of external websites.
Section 09
Children's Privacy
Our services are intended for individuals who are 18 years of age or older. We do not knowingly collect, solicit, or process personal information from children under the age of 18.
If we become aware that we have inadvertently collected personal information from a person under 18 without verified parental consent, we will take immediate steps to delete such information from our records.
If you are a parent or guardian and believe that your child has provided us with personal information, please contact us immediately at privacy@digifiling.in and we will promptly delete such data.
Section 10
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, business practices, legal requirements, or as necessary to improve clarity. When we make material changes, we will:
- Update the "Last Updated" date at the top of this page
- Display a prominent notice on our website homepage for at least 30 days
- Send an email notification to registered users for significant changes
- Seek fresh consent where required for new types of data processing
Your continued use of our website or services after the effective date of the revised Privacy Policy constitutes your acceptance of the changes. We encourage you to review this Policy periodically.
Section 11
Grievance Officer
In accordance with the Information Technology Act, 2000 and the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, we have appointed a Grievance Officer to address any complaints or concerns regarding our privacy practices.
Grievance Officer
Mr. Karan Kumar
Compliance Officer DigiFiling
Contact Details
✉ grievance@digifiling.in 📞 +91 70113 96724 ⏱ Response within 30 days
Registered Address
Floor 3, 49, Gali No. 16, Dayalpur Extension, North East Delhi – 110094, Delhi (India)
ℹ If you are not satisfied with our response to your grievance, you may approach the Adjudicating Officer under the IT Act, 2000 or file a complaint with the Data Protection Board of India once established under the Digital Personal Data Protection Act, 2023.
Section 12
Contact Us About Privacy
If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please reach out to us through any of the following channels:
Privacy & Data Protection Team
DigiFiling (Proprietor: Vivek Kumar) Floor 3, 49, Gali No. 16, Dayalpur Extension, North East Delhi – 110094, Delhi (India) GSTIN: 07LBUPK9277M1Z8
✉ privacy@digifiling.in 📞 +91 70113 96724 📲 WhatsApp Support
This Privacy Policy was last reviewed and updated on Jan 1, 2026. This document is governed by the laws of the Republic of India. Any disputes arising from this Policy shall be subject to the exclusive jurisdiction of the courts at New Delhi, India.