Privacy Policy
How TaxZeo collects, uses, and protects your data — compliant with the DPDP Act 2023 and IT Act 2000.
1. Who We Are
TaxZeo is a practice management and compliance platform for Chartered Accountant firms in India, operated by Ldelight Solutions Private Limited (CIN: U47912UP2024PTC196580), registered at A7 Second Floor, Sector 10, Noida, Uttar Pradesh – 201301, India.
This Privacy Policy explains how we collect, use, store, and protect information when you use the TaxZeo platform at https://ca.zeohq.com ("Service"). By accessing or using the Service, you agree to the practices described in this Policy.
This Policy is compliant with the Digital Personal Data Protection Act, 2023 (DPDP Act), the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 ("SPDI Rules").
2. Information We Collect
2.1 Account & Firm Information
When you register, we collect: firm name, your name, email address, phone number, ICAI registration number, business address, GST number, and chosen subscription plan.
2.2 Client & Lead Data (CRM Data)
Data you enter about your clients, prospects and leads — including names, contact details, PAN, GSTIN, financial records, compliance deadlines, documents, and notes. You are the Data Fiduciary for this data; we act solely as a Data Processor on your instructions.
2.3 Usage & Technical Data
- Log data: IP address, browser type, pages visited, timestamps
- Device information: operating system, screen resolution
- Feature usage patterns (aggregated and anonymised for product improvement)
- Error logs and performance metrics
2.4 Payment Information
Subscription payments are processed by Razorpay. We do not store full card numbers or CVV codes. We receive only masked card details and transaction confirmation from Razorpay.
2.5 Communications
Content of support tickets, emails, and chat messages you send us.
3. How We Use Your Information
- Provision, operate, and maintain the Service
- Process subscription payments and send invoices
- Send transactional emails (login OTP, expiry reminders, compliance alerts)
- Respond to support requests
- Detect and prevent fraud, abuse, and security incidents
- Comply with legal obligations under Indian law
- Aggregate, anonymise, and analyse usage data to improve the product
- Send product update announcements (opt-out available in Settings)
4. Your Client Data — Controller vs Processor
As a CRM platform, TaxZeo stores data you input about your own clients ("Client Data"). You remain the Data Fiduciary / Data Controller for all Client Data:
- You are responsible for obtaining consent from your clients to store their data in third-party software.
- You are responsible for ensuring the accuracy and lawfulness of Client Data you upload.
- We process Client Data solely on your instructions to deliver the Service.
- We do not access Client Data for our own commercial purposes.
- We do not sell, license, or share Client Data with third parties except as required by law.
If any of your clients exercise rights under the DPDP Act against you, we will cooperate to help you fulfil those obligations within reasonable technical means.
6. Data Storage and Security
- Data is stored on AWS Mumbai (ap-south-1) servers within India
- Data in transit: TLS 1.3 encryption
- Data at rest: AES-256 encryption for sensitive fields
- Role-based access control (RBAC) — employees access only what they need
- Routine penetration testing and vulnerability assessments
- Automatic daily backups retained for 30 days
Despite these measures, no Internet transmission is 100% secure. We encourage you to use strong passwords and enable two-factor authentication when available.
7. Data Retention
- Active account: data retained for the duration of your subscription
- After account cancellation: data retained for 90 days during which you may export it
- After 90 days: all firm and client data is permanently deleted from production systems
- Backups: purged within 30 days of the deletion date
- Legal hold: if required by law, certain records may be retained longer
- Anonymised analytics data may be retained indefinitely
8. Your Rights Under the DPDP Act, 2023
As a Data Principal under the DPDP Act, you have the right to:
- Access — obtain a summary of personal data we hold about you and how it is processed
- Correction — correct inaccurate or incomplete personal data
- Erasure — request deletion of your personal data (subject to legal retention obligations)
- Grievance Redressal — raise concerns with our Grievance Officer
- Nomination — nominate another individual to exercise rights on your behalf in the event of death or incapacity
To exercise these rights, email us at support@zeohq.com with subject line "DPDP Right: [Right Name]". We will respond within 30 days.
Grievance Officer
In accordance with the IT Act 2000 and SPDI Rules 2011, our Grievance Officer is:
Name: Compliance Team, Ldelight Solutions Private Limited
Email: support@zeohq.com
Address: A7 Second Floor, Sector 10, Noida, Uttar Pradesh – 201301, India
Response time: We acknowledge within 48 hours and resolve within 30 days.
9. Children's Privacy
TaxZeo is a B2B professional platform intended exclusively for Chartered Accountants and their firms. We do not knowingly collect personal data from individuals under 18 years of age. If you believe a minor has provided data to us, contact us immediately.
11. Changes to This Policy
We may update this Policy periodically. Material changes will be communicated via email (to your registered address) and an in-app banner at least 14 days before taking effect. Continued use of the Service after the effective date constitutes acceptance.
12. Contact Us
For privacy questions or data requests:
Ldelight Solutions Private Limited
A7 Second Floor, Sector 10, Noida, Uttar Pradesh – 201301, India
Email: support@zeohq.com
Ldelight Solutions Private Limited
CIN: U47912UP2024PTC196580
A7 Second Floor, Sector 10, Noida, Uttar Pradesh – 201301, India
© 2026 Ldelight Solutions Private Limited. All rights reserved. TaxZeo is a registered trademark of Ldelight Solutions Private Limited.