Privacy Policy

Last updated: 11 September 2026 · TriAvani Law Associates LLP

This policy explains how TriAvani Law Associates LLP (“we”, “us”) handles information when you use the 24eTax website, Android app, web application and related services, including AutoTally.

1. Who is responsible for your information

TriAvani Law Associates LLP operates 24eTax and handles account, support and website information. When a business adds its customers, suppliers or employees to the service, that business is responsible for having authority to provide those details and for giving appropriate notices. We process those records to provide the requested services.

2. Information we collect

• Account information: name, mobile number, email where provided, sign-in details, devices, business memberships and permissions.
• Business records: GSTINs, business addresses, customer and supplier contacts, invoices, purchases, inventory, payments, bank statements, accounting entries and GST information you enter, import or request from connected systems.
• Support and enquiries: contact details, messages, attachments, partner enquiries and download or purchase requests you submit.
• Payments: order and transaction references, plan, amount, payment status and billing details. Payment providers process card, UPI or banking credentials; do not send these credentials to support.
• Technical information: IP address, browser or device details, app version, security events, diagnostic information and website usage data.
• App usage, if you switch it on: which screens and steps of the app you use and where you stop, recorded against your account so we can see what is going wrong and offer help. Off until you allow it, and withdrawable at any time.

3. How we use information

We use information to create and secure accounts; provide invoicing, accounting, synchronisation and reporting; carry out GST or payment operations you request; process purchases; respond to enquiries; investigate faults and abuse; and meet applicable legal obligations. Optional communications and customer reminders are subject to the choices available for those features.

Camera-based bill scanning on supported phones performs text recognition on the device; extracted information can become part of the business records you save and sync. Documents you deliberately upload for imports, document processing or support are sent for that purpose. AutoTally processing can also depend on the local or cloud option you select.

Product analytics in the app: this is off until you switch it on under Privacy & data, and nothing is recorded before you do. When it is on, the app records which screens and steps you use and where you stop — for example that you left the GST filing at the submit step — against your account. We use that to find where the product is failing people and, where it helps, to contact you and guide you through it. It records names the app chose: a screen, a step, a button’s name. It never records invoice contents, customer or supplier details, GSTINs, PANs, bank details, anything you type, screenshots, session recordings or where on the screen you tapped, and none of it goes to an advertising network or any other third party. Events are deleted 180 days after they happen, and with your account if you delete it. Withdrawing the consent stops the recording immediately.

4. Website cookies, analytics and advertising measurement

The website uses Google Tag Manager, Google Analytics and the Meta (Facebook) Pixel. These tools can process page addresses, referrers, IP addresses, browser and device information, cookie identifiers and usage events to understand website use and measure advertising. These details can constitute personal information even when your name is not supplied.

We do not intentionally send invoice contents, GSTINs, PANs or form contact details as analytics or advertising event parameters. Google and Meta also process information under their own policies: Google Privacy Policy and Meta Privacy Policy.

You can block or remove cookies and restrict tracking using your browser settings; some website features may be affected. Privacy settings inside the app do not control cookies in your browser.

5. Sharing and service providers

Information is shared as needed with hosting, database, messaging, payment, document-processing, analytics and diagnostic providers. For example, Razorpay processes direct online purchases; GST operations send the relevant records through the configured GST Suvidha Provider to government systems; and customer reminders use the contact details and invoice information needed to deliver the message.

Records are available to the people your business authorises. We may disclose information where required by law, to investigate misuse or to protect legal rights. Provider processing locations can vary; we do not promise that every external service processes all data only in India. We do not sell your business books or use their contents for advertising.

In-app assistant ("Ask 24eTax"): the assistant is off until you switch it on, and nothing is sent to it before you do. Once on, the question you type, the screen you are on and your role are sent to Anthropic PBC (Claude), our AI provider, to write the answer. GSTINs, PANs, phone numbers, email addresses, bank and card numbers are masked out of the question before it leaves. With the business owner's separate opt-in, the assistant may also read summary figures and customer or supplier names from that business's books and send those; another business's records are never sent. Anthropic processes this outside India under its commercial terms, which do not permit training on the data. It keeps inputs and outputs for a limited period so the service can operate and be reviewed for safety, and longer where its own policies or the law require — see Anthropic’s published privacy and retention policy. The consent can be withdrawn at any time, and sending stops at the next question.

Reading your documents: a separate permission, off until the business owner switches it on under Privacy & data. Once on, a bill or GST notice you upload is sent to OpenAI, our AI provider for documents, which processes it outside India, to read the figures off it and, for a notice, to explain it and draft a reply for you to edit. The document is read as uploaded — names, GSTINs and amounts on it are not masked, because they are what is being read. Nothing else from your books is sent, and another business’s records are never sent. We do not keep the uploaded file; we keep a log of each read (who asked, when, file size and token counts), never the document or the result. Under OpenAI’s API terms the data is not used to train its models; we ask OpenAI not to store the request, and it may keep a copy for up to 30 days to monitor for abuse, and longer where its policies or the law require — see OpenAI’s API data usage policy. Without this consent, bills are read by our own server and notices are not read at all.

6. Retention and account deletion

We retain information for the purposes described above, including operating the service, legal record keeping and resolving disputes. The application uses an eight-year financial-record retention policy; applicable legal requirements, ongoing proceedings or investigations may require longer retention.

Account deletion anonymises account profile and sign-in information and revokes access. It also deletes your consent grants, your support conversations, tickets and screenshots, your authorised-signatory image, any documents uploaded for a GST registration application, and — for businesses you own — saved GST portal sessions and NIC credentials. It does not erase invoices, journals, GST returns or audit records: identifying details written on the face of those documents remain, because the document is the statutory record the law requires us to preserve. An employee leaving a business does not delete that business’s records. After the eight-year period a scheduled monthly process deletes the records retained because of a deletion request. Backups and records held by payment or government systems have separate retention requirements. The full schedule by data category is at Delete your account.

Contact us to request removal of enquiry or support information, or to ask which records must remain and why. We review retention against the purpose of the record and applicable obligations; deletion is not a promise of immediate removal from every system.

7. Your choices and requests

You can update account details, use the in-app data export and account-deletion options, and withdraw optional permissions where offered. You may also email us to request access, correction, deletion or assistance with a representative or nominee. We may ask for proportionate information to verify your identity and authority over a business account.

Withdrawal does not undo processing already completed, and stopping information necessary for a feature may prevent that feature from working. We handle requests under applicable Indian law, including the Digital Personal Data Protection Act, 2023 and its rules as their relevant provisions come into force.

8. Security

Controls include HTTPS/TLS, access permissions, business-level data separation and audit records. The native mobile app uses an encrypted local database; browser storage has different protections. Read the Data-security statement for the scope and limitations. No system can guarantee absolute security.

9. Children

24eTax is intended for adults authorised to act for a business, and is not directed at children under 18. Contact us if you believe a child has supplied personal information without appropriate authority.

10. Complaints and contact

Rajni Bhardwaj
Chief Technical Officer & Grievance Officer
TriAvani Law Associates LLP
208, Second Floor, Chattarpur, New Delhi - 110074

Email: support@24etax.com
Phone: +91 97171 58126
WhatsApp +91 97117 78126

Use the subject “Privacy grievance”. We acknowledge complaints within 48 hours and aim to resolve them within one month. We will explain the outcome or any additional investigation needed. This process does not restrict your right to approach an authority or seek a remedy available under applicable law.

11. Policy changes

We publish updates on this page with a revised date. Where a change requires a further notice or consent under applicable law, we will provide it. For pricing, payments and cancellation, see the Terms of Service and Refund & Cancellation Policy.