Privacy Policy

Last updated: July 26, 2026

Effective date: July 26, 2026

Arth is a tax filing tool. You trust us with sensitive financial information — PAN numbers, salary details, tax documents. We take that seriously. This policy explains exactly what we collect, why, and what happens to it. It applies to all users of askarth.com and the Arth product.

1. Data Controller

When you use Arth, we are the data controller — we determine what personal data is collected and how it is processed. No third party has access to your financial data except as explicitly described in Section 4 below.

2. Information We Collect

2.1 Account Information

When you sign in with Google, we receive your name, email address, and profile picture. We use this solely to identify your account. We do not access your Google contacts, calendar, drive, or any other Google data.

2.2 Tax Documents

When you upload a document (Form 16, AIS, broker P&L, RSU confirmation, or other tax-related file), we:

  • (a) Store the original PDF on our servers;
  • (b) Extract structured data from it — salary figures, TDS amounts, employer details, interest income, capital gains, foreign asset details; and
  • (c) Store the extracted data in your personal filing record.

2.3 Financial Data You Enter

Income, deductions, investments, bank details, PAN, Aadhaar — any information you type into the filing form or provide to the AI assistant. This data is stored in your personal filing and is used only to compute your tax and generate your ITR.

2.4 Chat Messages

Conversations with the AI assistant are stored so you can resume where you left off. These messages may contain financial details you shared in conversation.

2.5 Usage Data

We use Google Analytics to understand how people use Arth — which pages are visited, how long sessions last, which features are used. This data is aggregated and does not include your financial information.

3. How We Use Your Information

We process your data for the following purposes:

  • (a) To parse your tax documents and populate your ITR sections;
  • (b) To compute your tax liability under old and new regimes;
  • (c) To generate ITR JSON for upload to the income tax portal;
  • (d) To power the AI assistant's responses about your specific filing;
  • (e) To save your progress so you can return later; and
  • (f) To improve the product based on aggregated, anonymised usage patterns.

WE DO NOT SELL, RENT, OR SHARE YOUR FINANCIAL DATA WITH THIRD PARTIES FOR ADVERTISING, MARKETING, OR PROFILING PURPOSES. WE DO NOT USE YOUR DATA TO TRAIN AI MODELS.

4. Third-Party Services

We use a limited number of third-party services. Each has access only to what is strictly necessary:

4.1 Google Sign-In

Used for authentication. Google receives your sign-in event but not your financial data. Governed by Google's Privacy Policy.

4.2 Razorpay

Used for payment processing (premium features). Razorpay handles your card or UPI details directly. We never see or store your payment credentials.

4.3 Google Analytics

Used for aggregated usage statistics. No financial data is sent to Analytics.

4.4 AI Model Providers

The AI assistant sends your filing context to a large language model (LLM) to generate responses. This is necessary for the product to function. We do not permit model providers to retain or use your data for training purposes.

No other third party receives your data.

5. Data Storage and Security

Your data is stored on servers hosted on Microsoft Azure infrastructure. All connections use HTTPS (TLS 1.2 or higher). The database is not directly accessible from the public internet — it sits behind the application server, which enforces authentication and authorisation before any data is read or written.

For further details on our security practices, see our Security page.

6. Data Retention

Your account, filing data, and uploaded documents are retained for as long as your account exists. If you request deletion, we will remove all your data within 30 days.

We do not keep backup copies of individual user data after deletion. Aggregated analytics data (which contains no personal information) may be retained indefinitely.

7. Cookies

We use a small number of cookies: one session cookie for authentication and Google Analytics cookies for usage statistics. We do not use advertising, remarketing, or cross-site tracking cookies. For the full list, see our Cookies Policy.

8. Your Rights

You have the following rights with respect to your personal data:

  • (a) Access — request a copy of all data we hold about you (your filing data is always visible within the application);
  • (b) Rectification — correct any information in your filing at any time;
  • (c) Erasure — request complete deletion of your account and all associated data;
  • (d) Portability — download your filing data and generated ITR JSON at any time.

To exercise any of these rights, email contact@askarth.com.

9. Children

Arth is not intended for use by anyone under the age of 18. We do not knowingly collect data from minors. If you believe a minor has created an account, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this policy from time to time. If we make material changes to how we handle your data, we will update this page and the "last updated" date above. For significant changes, we will notify you by email.

11. Contact

For questions about this policy or your personal data:

Email: contact@askarth.com

Website: askarth.com