Privacy policy

Filingo is operated by Skygnosis, a sole proprietorship of Manish Girdhari Lal Agarwal, with its principal place of business at A-3/701, Nandanvan-2, VIP Road, Vesu, Surat, Gujarat 395007 (GSTIN 24EAGPA0524R1ZR). This policy explains what we collect, what we never collect, and your rights under the Digital Personal Data Protection Act, 2023.

Files you open in the tools never reach us

The tools (challan PDF to Excel, GSTR-2B and 26AS reconciliation, MSME 43B(h), Tally Day Book, Excel to Tally, certificates) read your files inside your own browser. The PDFs, spreadsheets, XML files and their contents are not uploaded, not stored and not visible to us. Closing the tab discards them.

AI drafting, only when you ask

The AI notice reply drafter is the only feature that sends document content off your computer, and only after you tick its consent box and press Draft.

• What is sent: the notice text and notes shown in its preview. By default, PAN, GSTIN, TAN, Aadhaar, phone, email and bank account numbers, and any names you list, are replaced with placeholders in your browser before sending and put back in your browser afterwards. The PDF file itself is never uploaded.
• Who receives it: OpenAI, through its API (model gpt-5-nano). OpenAI does not use API data to train its models, and keeps abuse-monitoring logs for up to 30 days. (their terms) The drafting page names the service before you consent, and this section is updated before text is sent to any other service.
• What we keep: a usage record (date, firm, model, token counts and estimated cost) to count your monthly allowance. We do not store the notice text or the draft.

What we store when you create an account

• Your login: email address, and the firm name you give.
• Firm Desk data you type in: client names, GSTIN, PAN, TAN, the staff member handling them, phone number, and the status you mark each month.
• Registers you keep: DSC expiry records and UDIN log entries.
• Subscription records: plan, status and renewal date. Card, UPI and bank details are handled by Razorpay and never reach our servers.

We never ask for and never store portal usernames or passwords, client documents, bank statements or Aadhaar numbers.

Without an account

Firm Desk and the registers work without signing up. In that case everything is kept only in your browser's storage on your computer and is not sent to us.

Chrome extension and Google Sheets add-on

The Chrome extension has no permission to read any website. It stores your chosen tab and filing types on your computer. The Google Sheets add-on can read only the spreadsheet you have open, runs inside Google's Apps Script, and sends nothing to us or anyone else. Neither collects personal data.

How we use what we store

• To show your firm's data to you and the staff you invite.
• To send login links and service messages.
• To bill your subscription and issue GST invoices.

We do not sell data, show advertising, or use your data to train AI models.

Who processes data for us

• Supabase hosts the database and login system.
• Razorpay processes payments.
• OpenAI drafts notice replies, only for text you send with the AI drafter.
• Vercel hosts the website, keeps short-lived access logs (IP address, browser, pages requested), and provides cookieless, aggregate page-view counts. We set no advertising or tracking cookies.

Security

Every table is protected by row-level security, so a firm can read only its own rows. Traffic is encrypted in transit. Access inside a firm is limited to people its owner invites, and each invitation must be accepted by the invited person.

Retention and deletion

Your data stays while your account exists. Write to support@filingo.in from your login email to export or delete your firm's data; we complete deletion within 30 days, except invoices we must keep under tax law.

Your rights

You may ask for access, correction or erasure of your personal data, withdraw consent, and nominate another person to exercise these rights. Grievances: our grievance officer, Manish Girdhari Lal Agarwal, Proprietor, at support@filingo.in; we acknowledge within 48 hours and resolve within one month. If unresolved, you may approach the Data Protection Board of India.

Your clients' data

For client details you enter in Firm Desk you are the data fiduciary and we act as your processor. Enter only what you need to track their filings.

Changes

We will post changes here and, for material changes, email account owners before they take effect.