Privacy Policy

2. Data we may collect

• Account and contact data: name, firm name, mobile, email, address and account identifiers.
• Tax and identity data: PAN, TAN, GSTIN, Aadhaar-related details where required, KYC material, signatures and application information.
• Service data: filing records, forms, FVU or other uploaded files, party details, instructions, status updates and correspondence.
• Payment data: wallet entries, invoices, transaction references, UTR and payment proof. We do not ask you to place a card PIN, UPI PIN or banking password in the portal.
• Party-management data: details and credentials you choose to store for parties you are authorised to manage.
• Technical and security data: login time, IP address, browser/device information, session, activity and audit logs.
• Support and enquiry data: ticket content, attachments, feedback and calls or messages you send to us.

3. Why we process data

• To create, verify, approve and secure portal accounts.
• To provide quotations, accept instructions, process services and track applications or filings.
• To maintain wallet, invoice, accounting, support and transaction records.
• To detect abuse, investigate errors, enforce access controls and protect the portal.
• To communicate OTPs, service updates, required actions, invoices and important policy changes.
• To meet tax, accounting, legal, regulatory and lawful authority requirements.
• To improve reliability, usability and service operations using proportionate records and analytics.

We limit collection to what is reasonably necessary for these purposes. Optional fields are identified at collection. If required data is not provided, the relevant account or service may not be available.

4. Consent and lawful use

Registration uses a clear, unticked acknowledgement linking to the applicable terms and privacy notices. Where processing is based on consent, you may withdraw it by contacting us. Withdrawal does not invalidate processing already carried out and may prevent us from continuing a requested service where the data is essential.

We may also process data where needed to perform your request, comply with law, respond to emergencies or legal claims, prevent fraud and undertake other uses permitted by applicable law. We do not treat silence, inactivity or a pre-ticked box as consent.

5. When data may be shared

We do not sell personal data. We may share only what is needed with:

• authorised TinCare personnel and professional associates working on the requested service;
• government departments, tax or e-governance portals and other authorities relevant to the instruction;
• hosting, email, communications, storage, security, courier, accounting or technology providers acting for us;
• auditors, advisers, insurers or parties involved in a lawful business reorganisation, subject to appropriate safeguards; and
• courts, regulators, law-enforcement or other recipients where disclosure is lawfully required or necessary to protect rights and safety.

6. Retention and deletion

We retain data only for as long as reasonably needed for the service, account administration, dispute handling, security and mandatory tax, accounting or legal records. Different records therefore have different retention periods. When data is no longer required, we delete, anonymise or securely archive it, subject to backups and lawful retention obligations.

Closing an account does not require immediate deletion of completed transaction, invoice, filing, audit or legal records that must still be retained.

7. Security

We use role-based access, authentication and OTP controls, encryption for designated stored credentials, protected file delivery, logging, backups and organisational safeguards appropriate to the data and service. No internet system is risk-free. You should use a unique password, protect OTPs, sign out on shared devices and report suspected misuse promptly.

8. Your choices and rights

Subject to applicable law and identity verification, you may ask us to:

• explain or provide a summary of personal data being processed;
• correct, complete or update inaccurate data;
• erase data that is no longer required or lawfully retained;
• withdraw consent where consent is the basis of processing;
• address a grievance or nominate another individual as permitted by applicable law; and
• close your portal account, subject to pending services and retention duties.

Send requests from your registered email to info@tincare.in. We may request proportionate verification and will explain if a request cannot be fully completed.

9. Cookies and external services

The portal uses necessary session, security and preference technologies to keep you signed in, prevent misuse and remember essential choices. External government or service-provider links are governed by their own privacy practices. Review their notices before submitting data directly to them.

10. Children

The portal is intended for adults and authorised business/professional use. A person under 18 should not create an independent account. If a service lawfully requires a child's data, it must be supplied by or with verifiable authority of the parent or lawful guardian and only for the stated service.

11. Data location and transfers

Data may be processed using service providers whose systems are located in India or other permitted locations. Where a cross-border transfer occurs, we use contractual, access-control and other safeguards appropriate to the service and comply with restrictions notified under applicable Indian law.

12. Changes and privacy contact

We may update this policy to reflect service, security or legal changes. Material changes will be posted prominently or communicated through the portal or registered contact details. The current version and effective date appear at the top of this page.

For privacy requests or grievances, contact the Data Protection/Grievance Contact at info@tincare.in or the postal address shown below. Please include your registered contact details and a clear description of the request.