1. Who we are
RushTax (“we”, “us”, “our”) operates rushtax.app — an Indian tax filing and compliance service that also provides professional GST reconciliation tools for Chartered Accountants (Ledgr). This policy explains what personal data we collect, why we collect it, and how we protect it.
RushTax is a product of Whereto Studios, the studio that builds and maintains the platform. References to “we” in this policy include Whereto Studios acting as the operator of RushTax.
2. Data we collect
- Account data: name, email address, phone number.
- Tax data: GSTIN, PAN, income figures, uploaded GST/TDS files — used only to run reconciliations and calculators you initiate.
- Usage data: pages visited, features used, error logs (via Sentry).
- Analytics: aggregated usage patterns via Google Analytics 4 and Microsoft Clarity (session recordings — sensitive form fields are masked).
3. How we use your data
- To provide reconciliation, calculator, and filing assistance services.
- To send transactional emails (reconciliation results, deadline reminders).
- To improve the platform and fix errors.
- We do not sell your data to third parties.
- We do not share your tax data with any third party except as required by law.
4. Third-party services
We use a small number of trusted third-party services to operate the platform. Each is bound by its own privacy policy and applicable data protection law.
- Authentication & database: Your account credentials and tax data are stored in a secure cloud database. Data is hosted in the India / Singapore region and never leaves the region without your consent.
- Transactional email: When we send you emails (reconciliation results, deadline reminders, account notifications), they are delivered via a third-party email service. No marketing emails are sent without your explicit consent.
- Error monitoring: We use an error monitoring service to catch and fix technical issues. Error reports contain no personally identifiable information — we specifically configure it to exclude PII from all payloads.
- Analytics (consent-gated): If you accept analytics cookies, we collect aggregated usage data (pages visited, features used) to improve the product. This is only activated after you consent via the cookie banner.
- Session recordings (consent-gated): If you accept analytics cookies, anonymised session recordings may be collected to understand how people use the platform. All sensitive fields (tax data, PAN, GSTIN, form inputs) are permanently masked. Recordings are disabled entirely on Ledgr and dashboard pages.
We do not use any advertising networks, sell data to third parties, or share your tax data with any service beyond what is strictly necessary to deliver the product.
5. Data retention
Reconciliation audit logs are retained for 7 years as required for CA compliance purposes. Account data is retained until you delete your account. Uploaded files are processed in memory and not stored permanently.
6. Your rights (DPDP Act 2023)
Under the Digital Personal Data Protection Act 2023, you have the right to:
- Access the personal data we hold about you.
- Correct inaccurate personal data.
- Delete your account and associated personal data (audit logs retained per legal obligation).
- Withdraw consent for analytics at any time via the cookie settings.
To exercise these rights, email us at hello@rushtax.app.
7. Cookies
We use two types of cookies:
- Essential cookies: Required for authentication and session management. These keep you logged in and cannot be disabled without breaking the product.
- Analytics cookies: Only set after you explicitly accept via the cookie consent banner. Used for usage analytics and session recordings (sensitive fields masked). You can withdraw consent at any time via your cookie settings.