CLARITY AT EVERY STEP

Privacy & service information

This page explains the current website’s data flows and service boundaries. Contact RegisterBox for service-specific engagement terms before commissioning work.

Your account and business data

The website uses the same Supabase-backed account and business records as the RegisterBox app. Email sign-in, business profiles, application answers, uploaded documents and application status use the existing RegisterBox services. Your browser stores your sign-in session so you can return to your workspace.

Documents and connected services

Document uploads go to the existing private business document storage. Access is associated with your signed-in account and business. Connected services such as GST, DigiLocker, identity verification and AI have their own consent steps and configuration requirements. Read those prompts before using a service.

Enquiries

The contact form prepares a message on your device. You choose whether to send it using WhatsApp or your email application. Those services handle the message you send. Avoid sharing government identifiers, credentials or OTPs in general enquiries.

Applications, payments and filing

Application answers and supporting documents can be saved as preparation drafts. Saving a draft does not submit it to a government authority or guarantee a registration. Eligibility, jurisdiction, evidence, fees and professional review must be confirmed for the relevant service.

Live payment collection is not configured in the current application. GST portal actions are controlled by the existing backend and provider availability; drafting is separate from successful filing. Only an actual acknowledgement can establish submission or filing status.

AI assistance

AI assistance can help explain options and organize next steps. It does not establish eligibility, certify tax conclusions or replace professional review. The AI flow asks for provider consent before sending a question to the configured service.

Detailed privacy notice & choices

Privacy notice · registerbox-privacy-2026-10-14-v1

Who handles your information

RegisterBox operates this app and website. Privacy requests: registerbox@yahoo.com. Contact address: BBMP Ward, HAL Aerospace Division, 5th Cross Road, New Thippasandra Main Road, New Thippasandra, Bengaluru, Karnataka 560075. This contact is not a claim that a statutory Data Protection Officer has been appointed.

Account and service records

Email, account ID and sign-in/session information let us authenticate you and respond to support requests. Names, contact details, addresses, PAN/GSTIN where required, business activity, people involved in a business, uploaded documents, application answers, purchase invoices, return drafts and filing acknowledgements support the particular service you request. Do not upload another person’s information without authority. Saved drafts are not government submissions.

Recipients and connected services

Supabase hosts authentication, database records and private document storage; Vercel delivers the website; Expo delivers app updates and receives installation/update technical identifiers. Groq receives only the optional AI inputs described separately below. Configured Sandbox/Quicko and government or DigiLocker services receive the data needed for the connection or verification you explicitly request. A receiving authority may retain submitted records independently. Staff access is role-controlled. These providers can operate infrastructure outside India; RegisterBox does not claim India-only storage or a universal cross-border exemption.

Choices, withdrawal and retention

AI assistance and bill-image AI have separate, optional permissions, off until you grant them in Privacy Centre. You can withdraw each with one action; the server checks current permission before new AI processing. Withdrawal does not undo a previous filing or instantly erase provider copies. For service-processing withdrawal, submit a withdrawal request describing the service. Erasure is reviewed against applicable retention duties, shared records and legal holds; retained items must have a reason and an end date. There is no approved universal retention period for tax records or provider backups, and we do not promise their immediate erasure.

Access, correction, erasure, grievance and nomination

Use Privacy Centre while signed in with your account email to request a summary of your personal data and recipients, correction/completion/update, a privacy grievance, withdrawal, or review of a nominee. Use Account & Data Deletion for erasure. Nomination does not give immediate account access; death/incapacity and authority need verification. If you cannot sign in, email privacy support from your account email. Do not send passwords, OTPs or full identity documents in a general request. Our target response is 30 days; unresolved privacy grievances may be escalated through the official Data Protection Board process after RegisterBox’s grievance process, when the applicable provisions and complaint process are in force.

Children and lawful guardians

Public service information is available to all ages. Under-18 personalised processing and processing for a person requiring a lawful guardian need verified parental/guardian authority, not an ordinary checkbox. That verified self-service workflow is not yet available. A parent or lawful guardian should contact privacy support before providing a child’s information; do not send child identity documents in a general email. Adult self-declaration for optional AI is not parental verification. No targeted advertising is configured.

Security and incidents

Access controls, private document storage, consent history and scoped operator access support privacy. An incident must be assessed by the responsible operator, contained, documented and notified through the applicable official process. This notice does not represent a completed independent security audit or a guarantee that no breach can occur.

registerbox@yahoo.com Privacy Centre · permissions and requests Account and data deletion

Account deletion & retention

Request account or selected data deletion →

Request account or data deletion

To delete your RegisterBox account and associated data, choose Account and associated data below, confirm your choice, and submit. To keep your account, choose Selected data and describe the documents, business profile or AI history to remove. Sign in with the email linked to your account to verify ownership.

Cannot sign in?

Email registerbox@yahoo.com from your registered email address with the subject RegisterBox deletion request. State whether you want account deletion or selected data deletion. Do not send passwords, OTPs, Aadhaar or PAN documents. We verify ownership before acting; you do not need to install the app to email a request.

What happens next

A submitted request receives a reference and status. Submission does not immediately erase data or cancel a government filing. Our team reviews ownership, shared business access and retention obligations, with a target response within 30 days. You can check status here while your account remains active; account-deletion completion is confirmed by email.

What is deleted

Account deletion removes your sign-in account, profile, personal application drafts, AI history and uploaded documents that are not required for a retained record or another authorized business member. Selected-data requests remove the items you identify after ownership review. We revoke account access as part of account deletion. Records already submitted to a government authority are not deleted from that authority by RegisterBox.

What may be retained and for how long

Ordinary account data is kept while you use the service, then removed when your verified request is fulfilled. Transaction invoices, filed-return acknowledgements and records subject to a legal obligation or an active dispute may need to be retained. If an exception applies, we tell you which records are retained, why, and the retention end date; access is restricted to that purpose. A minimal request receipt and resolution record is kept for 12 months after resolution, or until the notified retention end date if later. Closed receipts are automatically purged after that period. Provider backups may retain isolated copies until their configured expiry and are not used for routine access; restored data must reapply completed deletion requests before returning to service.

App updates and technical identifiers

The Android app uses Expo EAS Update to receive software updates over HTTPS. Update requests send a randomly generated installation identifier, operating-system and app/update information to Expo for update delivery and download statistics. This identifier is stored in the app’s native preferences and persists across launches and updates; it is not derived from your name, account or hardware ID. Clearing app data or reinstalling generally resets it, but restoring a device backup may restore it. It is not used by RegisterBox for advertising. Expo processes update-service data on our behalf; its retention and backup practices apply to these technical records. Account deletion does not itself clear native app preferences: remove the app’s data on your device and include technical-record questions in your deletion request.

Questions or data requests

For access, correction, deletion or other privacy requests, contact registerbox@yahoo.com. RegisterBox can confirm the process and any records that need to be retained. For service enquiries, contact our team.