RegisterBox operates this app and website. Privacy requests: registerbox@yahoo.com. Contact address: BBMP Ward, HAL Aerospace Division, 5th Cross Road, New Thippasandra Main Road, New Thippasandra, Bengaluru, Karnataka 560075. This contact is not a claim that a statutory Data Protection Officer has been appointed.

Email, account ID and sign-in/session information let us authenticate you and respond to support requests. Names, contact details, addresses, PAN/GSTIN where required, business activity, people involved in a business, uploaded documents, application answers, purchase invoices, return drafts and filing acknowledgements support the particular service you request. Do not upload another person’s information without authority. Saved drafts are not government submissions.

Supabase hosts authentication, database records and private document storage; Vercel delivers the website; Expo delivers app updates and receives installation/update technical identifiers. Groq receives only the optional AI inputs described separately below. Configured Sandbox/Quicko and government or DigiLocker services receive the data needed for the connection or verification you explicitly request. A receiving authority may retain submitted records independently. Staff access is role-controlled. These providers can operate infrastructure outside India; RegisterBox does not claim India-only storage or a universal cross-border exemption.

AI assistance and bill-image AI have separate, optional permissions, off until you grant them in Privacy Centre. You can withdraw each with one action; the server checks current permission before new AI processing. Withdrawal does not undo a previous filing or instantly erase provider copies. For service-processing withdrawal, submit a withdrawal request describing the service. Erasure is reviewed against applicable retention duties, shared records and legal holds; retained items must have a reason and an end date. There is no approved universal retention period for tax records or provider backups, and we do not promise their immediate erasure.

Use Privacy Centre while signed in with your account email to request a summary of your personal data and recipients, correction/completion/update, a privacy grievance, withdrawal, or review of a nominee. Use Account & Data Deletion for erasure. Nomination does not give immediate account access; death/incapacity and authority need verification. If you cannot sign in, email privacy support from your account email. Do not send passwords, OTPs or full identity documents in a general request. Our target response is 30 days; unresolved privacy grievances may be escalated through the official Data Protection Board process after RegisterBox’s grievance process, when the applicable provisions and complaint process are in force.

Public service information is available to all ages. Under-18 personalised processing and processing for a person requiring a lawful guardian need verified parental/guardian authority, not an ordinary checkbox. That verified self-service workflow is not yet available. A parent or lawful guardian should contact privacy support before providing a child’s information; do not send child identity documents in a general email. Adult self-declaration for optional AI is not parental verification. No targeted advertising is configured.

Access controls, private document storage, consent history and scoped operator access support privacy. An incident must be assessed by the responsible operator, contained, documented and notified through the applicable official process. This notice does not represent a completed independent security audit or a guarantee that no breach can occur.