Filingo

Privacy policy

Last updated 21 September 2026 · Skygnosis

In short

  • Your files stay with you

    PDFs, spreadsheets and Tally files are opened inside your own browser. They are never uploaded, so we do not have them.

  • Never used to train AI

    We train no AI on anything you give us, and we do not sell it or show advertising. The AI features are optional and send only a small piece of text, such as a notice you approve or a list of column headings. Never a file.

  • We keep only what you save

    Once you log in, the board and the registers save what you enter, so it opens on any computer. Never the files themselves, never a portal password.

This policy explains what Filingo collects, what it never collects, and your rights under the Digital Personal Data Protection Act, 2023.

Files you open in the tools never reach us

The tools (challan PDF to Excel, GSTR-2B and 26AS reconciliation, MSME 43B(h), Tally Day Book, Excel to Tally, certificates) read your files inside your own browser. The PDFs, spreadsheets, XML files and their contents are not uploaded, not stored and not visible to us. Closing the tab discards them. There are two exceptions in the GSTR-2B reconciliation, both something you choose yourself. "Match suppliers by name" sends pairs of supplier names, with any GSTIN, PAN, amount or number removed from them first, and nothing else from the files (see AI below). On the paid plans there is one more choice, in every tool that imports a spreadsheet: "Match with AI" can send the column headings of the sheet, never its rows (see AI below). And when you save a result for a client with "Keep the open items for next month" ticked, the documents still open are kept for that client (listed under what we store, below); untick it and only the one-line note is saved.

AI on notices, supplier names and columns, only when you ask

Four features send text off your computer, each only when you ask. On the AI notice reply drafter, pressing the button is the consent: the sentence under the button says what is sent and where, and the same holds for its free reading and for "Explain to the client". Two need you to tick a consent box first: "Read this notice" on the notice register, which fills in the law, the stage and the reply-by date from a notice you paste; and "Match supplier names" in the GSTR-2B reconciliation, which sends pairs of supplier names and nothing else. The fourth is "Match with AI" on the columns of a spreadsheet you import, described below.

  • What is sent: the notice text and notes shown in its preview. By default, PAN, GSTIN, TAN, Aadhaar, phone, email and bank account numbers, and any names you list, are replaced with placeholders in your browser before sending and put back in your browser afterwards. The PDF file itself is never uploaded.
  • Who receives it: an outside AI service, through its API. It does not use what it is sent to train its models. The drafting page says this before you consent, and this section is updated before text is sent to any other kind of service. We give the name of the service on request: write to support@filingo.in.
  • Who reads a notice into the register: a second outside AI service. It does not train or fine-tune models on what it is sent and does not share it except with its service providers. It is processed in the United States. If it cannot read the text, an outside AI service reads it instead; the consent line describes both before you agree. It answers a fixed set of questions (which law, what stage, whether a hearing is fixed, whether an amount is stated, which of the dates in the text is the reply date) and cannot write anything into your register except those choices, which you confirm.
  • Supplier names in the GSTR-2B reconciliation: when a purchase row has no GSTIN, or a GSTIN not found in 2B, but a 2B invoice has the same amount, "Match supplier names" can send the two supplier names of each such pair to a second outside AI service (or an outside AI service if it cannot answer), only after you tick its consent box and press the button. Only the names are sent, in pairs: never amounts, GSTINs, invoice numbers, dates or the files. The answer is a yes or no on each pair, shown to you as a suggestion; the names are not stored.
  • Column headings when you import a spreadsheet: on the paid plans, when some columns could not be matched by their headings, "Match with AI" can send the headings of the sheet's columns, and whether each column holds dates, numbers or text, to a second outside AI service (or an outside AI service if it cannot answer). It runs only when you press the button, or if you ticked "Do this by itself from now on", which you can untick at any time. Anything in a heading shaped like a GSTIN, a PAN, a long number or an amount is removed in your browser first. The values in the sheet, its rows and the file are never sent. The answer says which column holds which field, shown to you to confirm; the headings are not stored.
  • What we keep: a usage record (date, firm, model, token counts and estimated cost) to count your allowance. We do not store the notice text or the draft. The notice register stores only the details you confirm, never the notice itself.

GST filing status from the GST portal's public record

When this is switched on, Firm Desk ticks your clients' GST returns itself. It sends each client's GSTIN and the financial year to Sandbox by Quicko, a GST Suvidha Provider licensed by GSTN, which reads GSTN's public record of the returns that GSTIN has filed (the same record anyone can see under Search Taxpayer on the GST portal) and sends back each return's type, period, ARN and filing date.

  • What is sent: the GSTIN and the year. Never a client's name, login, password or OTP, and never any invoice or file.
  • What we keep: the latest filing list for each GSTIN, in your firm's workspace, so colleagues do not check the same client twice in a day; and a count of checks made, for your plan's monthly allowance. The ARN and filing date are saved on the ticked box and can appear on your client reports.
  • When: only for firms on a paid plan: once a day for a return past its due date when Firm Desk is opened, and whenever someone presses "Check now".

What we store when you create an account

  • Your login: email address, and the firm name you give.
  • Firm Desk data you type in: client names, GSTIN, PAN, TAN, the staff member handling them, phone number, and the status you mark each month.
  • Work you set up: your firm's own recurring work (its name, how often, and which clients it covers).
  • Registers you keep: DSC expiry records, tax audits, UDIN log entries, and notices (client, law, stage, reference, dates, amount and status; never the notice text).
  • Fees: your billing details (name, address, GSTIN, PAN, bank and UPI details you choose to print), the invoices you raise (who was billed, their address and GSTIN, the lines and amounts), the receipts and TDS you record, and recurring fee schedules.
  • Open reconciliation items, only if you choose to keep them: in the GSTR-2B reconciler, when you save a result for a client with "Keep the open items for next month" ticked, each document still open is kept so next month's reconciliation can settle it: the supplier's GSTIN and name, the document number, its date and its amounts. The purchase register and the GSTR-2B themselves are never stored, and matched invoices are not kept. The lists for the last three months are kept per client; older ones are deleted when you save.
  • Client reports: the letterhead lines you type. The reports themselves are made in your browser and are not stored.
  • Subscription records: plan, status and renewal date. Card, UPI and bank details are handled by Razorpay and never reach our servers.

We never ask for and never store portal usernames or passwords, client documents, bank statements or Aadhaar numbers.

What happens when you sign up

One free workspace is meant for one firm, so at sign-up the email address you give is checked twice, and nothing else about you is examined.

  • Its domain is compared with a public, openly licensed list of temporary-inbox domains kept by the disposable-email-domains project. Ordinary mailbox providers, Gmail, Outlook, Yahoo, Rediffmail, iCloud, Proton and Zoho among them, are not on it.
  • It is compared with the addresses accounts already exist under. For Gmail addresses only, other spellings of the same address count as the same address, because Gmail ignores dots in the name and anything after a +. For this we keep one row per mailbox that has created an account, holding the address in that compared form.

No IP address, device fingerprint or any other identifier is used for this. If a sign-up is refused, no account is created, and nothing that identifies you is recorded.

Without an account

Firm Desk and the registers work without signing up. In that case everything is kept only in your browser's storage on your computer and is not sent to us.

Chrome extension and Google Sheets add-on

The Chrome extension has no permission to read any website. It stores your chosen tab and filing types on your computer. The Google Sheets add-on can read only the spreadsheet you have open, runs inside Google's Apps Script, and sends nothing to us or anyone else. Neither collects personal data.

When you tell us something is wrong

Under every tool there is a line asking whether it helped, and a way to report a wrong result. Unlike the counts below, this one keeps what you type, because that is the only way we can find a misread challan or a wrong due date. We ask you not to put a client's name, PAN or GSTIN in it. What is stored is what you wrote, which tool and page you were on, and, if you are signed in, your firm and plan so we can tell a customer's note from a passer-by's. Only the people who run Filingo read it. Write to support@filingo.in if you would like a note of yours removed.

Usage statistics, without cookies

To learn which tools are useful, we count visits and tool use. We store no IP address and set no cookie that follows you. One short-lived cookie is used: while you log in, it remembers for 15 minutes the page you came from, so we can count where sign-ups start, and it is deleted when you land back. A link we share may carry a campaign name chosen by us, such as reddit-ca-oct; it is kept for that tab only.

  • What is recorded: the page viewed; that a tool was used, how many files were opened in it, that its sample data was opened and that a blank template or a result was downloaded; the website that referred you; your country and city as reported by our host; the kind of device. For signed-in firms we also record logins, checkouts and subscription changes against the firm.
  • How visitors are counted: by a code made from your IP address and browser with a secret that changes every day. It counts unique visitors per day, cannot follow you from one day to the next, and cannot be turned back into your IP address.
  • What is never recorded: the contents of any file, anything you type into a tool, screen recordings or keystrokes.
  • Who sees it: only the people who run Filingo, as totals. It is kept for 400 days.

How we use what we store

  • To show your firm's data to you and the staff you invite.
  • To send login links and service messages.
  • To bill your subscription and issue GST invoices.

We do not sell data, show advertising, or use your data to train AI models.

Who processes data for us

  • Supabase hosts the database and login system.
  • Razorpay processes payments.
  • Sandbox by Quicko, a GSTN-licensed GST Suvidha Provider, reads the public GST filing record for the GSTINs Firm Desk asks about.
  • An outside AI service drafts notice replies, only for text you send to it.
  • A second outside AI service reads notices into the register and judges pairs of supplier names in the GSTR-2B reconciliation and matches column headings of imported spreadsheets, only for text you send to it.
  • Vercel hosts the website, keeps short-lived access logs (IP address, browser, pages requested), and provides cookieless, aggregate page-view counts. We set no advertising or tracking cookies.

Security

Every table is protected by row-level security, so a firm can read only its own rows. Traffic is encrypted in transit. Access inside a firm is limited to people its owner invites, and each invitation must be accepted by the invited person.

Retention and deletion

Your data stays while your account exists. Write to support@filingo.in from your login email to export or delete your firm's data; we complete deletion within 30 days, except invoices we must keep under tax law.

Your rights

You may ask for access, correction or erasure of your personal data, withdraw consent, and nominate another person to exercise these rights. Grievances: write to our grievance officer at support@filingo.in with “Grievance” in the subject; we acknowledge within 48 hours and resolve within one month. If unresolved, you may approach the Data Protection Board of India.

Your clients' data

For client details you enter in Firm Desk you are the data fiduciary and we act as your processor. Enter only what you need to track their filings.

Changes

We will post changes here and, for material changes, email account owners before they take effect.