Privacy Policy

Last Updated: September 21, 2026

Applies to the FINCORPx mobile applications for iOS and Android, and to www.fincorpx.in

Privacy at a Glance

This summary is provided for convenience. The full policy below governs.

We collect only the information needed to create your account, secure it, and deliver Accounting, GST and TDS compliance services.
We never sell your personal information, and we never rent, trade or disclose it to data brokers.
We do not share your information with advertising networks, we do not serve you advertisements, and we do not track you across apps or websites owned by other companies.
All data is stored on servers located within India. We do not transfer your personal information outside India.
You can ask us to delete your account and your personal information at any time, and we will action it. See Deleting Your Account and Your Data.

About Us

WHITE AI ANALYTICS PRIVATE LIMITED (“White”, “FINCORPx”, “WAAPL”, “FCX”, “We”, “Our”, “Us”) is a company incorporated in India having its registered office at S1, Chandra Flats, 14/28, North Street, VP Colony, Aynavaram, Perumbur, Purasaiwalkam, Tamil Nadu, Chennai 600023.

We started with the mission to simplify Accounting, GST & TDS compliance management for Business Owners, Tax payers, Chartered Accountants, Tax Advocates, and Tax Practitioners. Today, we're transforming the way professionals manage Accounting, Bookkeeping & GST compliance for their clients through seamless collaboration with simple AI Powered GST Return Filing and Reporting solutions.

WE AT FINCORPX VALUE YOUR TRUST & RESPECT YOUR PRIVACY.

This policy (“Privacy Policy”) provides You with details about the manner in which Your data including Personal Information is collected, processed, stored, shared, retained and deleted by Us. You are advised to read this Privacy Policy carefully. By registering on the Platform and consenting to this Privacy Policy, You permit Us to use and disclose Your data including Personal Information in accordance with this Privacy Policy, and only in accordance with this Privacy Policy.

Important Notes:

We do not store your GST portal (GSTN) password on our servers. It is used only to authenticate your session directly with the GST Network at the moment you ask us to perform a filing or data fetch, and it is transmitted only over an encrypted channel.
We do not store complete GST return data permanently. Data is processed for compliance purposes and securely deleted as per our retention schedule set out below.
It is strongly recommended for you to return to this page periodically to review the most current version of this Privacy Policy.

Scope of This Privacy Policy

This Privacy Policy applies to the FINCORPx mobile applications (iOS and Android), the FINCORPx web application, and our website at www.fincorpx.in (together, the “Platform”). It covers digital Personal Information and Personal Information collected in physical form and subsequently stored electronically.

We handle Personal Information in our own right (as a Data Fiduciary) for the account you hold with us, and on behalf of Users (as a Data Processor) for the client information they enter into the Platform.
FINCORPx is an account-based service. An account is required because the Platform stores your firm and client compliance records, connects to the GST Network on your behalf, and must be able to identify you securely across sessions and devices. We do not require any information that is not needed for that purpose.
The Platform should not be used or accessed by minors (persons under the age of 18 years).
By registering on the Platform, you are accepting this Privacy Policy. This Privacy Policy is incorporated into and subject to the terms of use governing access and use of the Platform (https://www.fincorpx.in/terms) (“Terms of Use”).

Information We Collect, Why We Collect It, and Whether It Is Required

The tables below list every category of Personal Information we collect, the specific purpose for which each is collected, and whether providing it is required in order to use the Platform. We do not collect any category of Personal Information that is not listed here.

A. Account information you provide when you register

Information	Why we collect it	Required?
Name	To identify you inside the Platform and to display your name on dashboards, lists, reports and correspondence	Required
Email address	Your unique account identifier and sign-in credential; used for service notifications, password reset and account recovery	Required
Password	To secure your account. Stored only as a salted, one-way cryptographic hash. We never store or have access to your password in readable form	Required
Mobile number	If you choose to provide it, we use it to recover an account you have lost access to and to reach you about time-critical filing or security issues. You can create and use an account without it. It is not used for marketing and is never shared with advertisers	Optional

B. Business and firm profile information

Information	Why we collect it	Required?
Firm name and owner name	To populate your dashboard, reports and generated documents	Optional
Owner email and owner mobile number	For official communication with the firm, notifications, verification and urgent support	Optional
Address, city and state	For correspondence, for state-wise GST compliance and reporting, and to apply the rules that are correct for your jurisdiction	Optional
Alternate mobile number	As a secondary business contact where you choose to provide one	Optional

C. GST and compliance information

Information	Why we collect it	Required?
GSTIN (GST number)	To identify the registration on whose behalf returns are prepared and filed with the GST Network	Required to use filing features
GST portal username	To authenticate the connection to the GST Network APIs on your instruction	Required to use filing features
GST portal password	Used only at the moment you initiate a filing or data fetch, to establish an authenticated session with the GST Network. It is transmitted over an encrypted channel and is not stored on our servers	Entered per session; not stored
GST return data and filing status	To prepare, validate and file returns, and to show pending or filed status on your dashboard. Return data is processed for the filing and is not retained permanently	Required to use filing features
Invoices and supporting documents you upload	To read the values needed for the return you have asked us to prepare	Optional

D. Client information entered by professional users

If you are a Chartered Accountant, Tax Advocate or Tax Practitioner, you may enter details of the clients whose compliance you manage: client name, contact person name, client email, client phone number, client address, client city and client state. We collect this only so that you can manage those clients' compliance within the Platform and produce their filings and reports.

In respect of this information we act as a Data Processor on your instructions. You are responsible for having the authority and, where required, the consent of those clients to enter their information into the Platform. We do not use client information for any purpose of our own, and we never use it for marketing.

E. Usage and technical information collected automatically

Information	Why we collect it
Last login time and session activity	Security monitoring, detecting unauthorised access, and identifying dormant accounts
In-app activity, such as reports generated or downloaded	To maintain an audit trail of actions taken on your account and to understand, in aggregate, which features are used so we can improve them
Device model, operating system version, app version and crash diagnostics	To diagnose crashes and defects and to keep the app working on your device
IP address	Security, fraud prevention and abuse detection

What we do not collect:

We do not collect any personal information concerning your race, ethnicity, religion, sexual orientation, political beliefs, or health.
We do not collect, store, or process biometric data in our systems. Where you enable device biometric unlock, the biometric check is performed by your device and the biometric data never leaves your device and is never sent to us.
We do not access your device files, media, contacts, call logs, SMS messages or telephony functions. Where a feature needs access to the camera or to a document you choose, we ask you first and we receive only the specific item you select.
We do not collect the advertising identifier (IDFA or GAID), we do not embed advertising SDKs, and we do not build advertising or marketing profiles. Because we do not track you across other companies' apps and websites, the app does not ask for App Tracking Transparency permission.
We do not collect precise location. Your state and city are taken only from what you type into your profile, for GST jurisdiction purposes.

Device Permissions in the Mobile App

The FINCORPx app asks for a device permission only at the point you use the feature that needs it, and it explains why at that moment. You may decline any permission, and the rest of the app will continue to work. You can change your choice at any time in your device settings.

Permission	What it is used for
Camera (optional)	To photograph an invoice or supporting document you want to upload. We receive only the image you capture for that upload
Photos and files (optional)	To let you pick an existing document or image to upload, and to save reports you download. We receive only the files you choose; we never browse your library
Notifications (optional)	To alert you about filing due dates, filing outcomes and security events on your account
Biometric unlock (optional)	To unlock the app using the biometric check your device already performs. No biometric data is sent to or stored by us

How We Use Your Information

We use the information described above only for the following purposes:

To create, authenticate and secure your account, including one-time password verification and two-factor authentication.
To provide the core service: preparing, validating, filing and reconciling GST and TDS returns through the GST Network, and generating the associated reports.
To display your dashboards, client lists, filing status and compliance calendar.
To send you service communications you need in order to use the Platform, such as one-time passwords, filing reminders, filing outcomes, security alerts, and notices of changes to this Privacy Policy or the Terms of Use.
To provide customer support and to investigate and resolve grievances.
To detect, prevent, mitigate and investigate fraud, unauthorised access, and misuse of the Platform.
To diagnose crashes and defects and, using aggregated and de-identified usage data, to improve the Platform.
To comply with our legal, tax, accounting and regulatory obligations, and to establish, exercise or defend legal claims.

We do not use your Personal Information for any purpose other than those listed above. If we ever wish to use it for a new purpose, we will tell you what that purpose is and obtain your consent before doing so. We do not use your Personal Information, your uploaded documents or your clients' data to train third-party artificial intelligence models, and we do not disclose them to any third party for that purpose.

Information Sharing and Disclosure

What we never do:

We do not sell your Personal Information, and we never have.
We do not rent, trade, or disclose your Personal Information to data brokers or list vendors.
We do not share your Personal Information with advertising networks or ad-tech providers, and we do not use it to target advertising to you on or off the Platform.
We do not share your Personal Information with third parties for their own independent marketing purposes.
We do not disclose your GST portal credentials to anyone other than the GST Network itself, when you instruct us to perform a filing or fetch.

Who we do share information with, and why

Recipient	What they receive	Why
GST Network (GSTN) and our GST Suvidha Provider	GSTIN, GST portal username, session authentication token, and the return data being filed	This is the government system through which returns are filed. The transfer happens only when you instruct a filing or a data fetch
Cloud hosting and infrastructure provider (data centres located in India)	Encrypted Platform data at rest	To host, back up and secure the Platform. The provider processes data only on our instructions and has no independent right to use it
Email and SMS delivery providers	Your name, email address and mobile number, and the content of the message	To deliver one-time passwords and transactional service notifications to you
Crash reporting and product analytics providers	Device model, operating system and app version, crash diagnostics, and a pseudonymous installation identifier	To keep the app stable. They do not receive your return data, your documents, or your clients' details, and the data is not used for advertising
Payment gateway (only if you purchase a paid plan)	Your name, email address and the billing details needed to take the payment	To process your subscription payment. Card and bank details are handled by the gateway and are never stored by us
Professional advisors and auditors	Only the minimum information relevant to the engagement	Legal advice, audit and statutory compliance, under a duty of confidentiality
Government, tax and law-enforcement authorities	Only what is legally required	To comply with applicable law, including the GST Network for return filing and compliance and the Income Tax Department for TDS and other tax matters, and to prevent, detect and investigate fraudulent or illegal activity

Every service provider listed above is engaged under a written contract that requires them to protect your Personal Information to a standard at least equivalent to this Privacy Policy, to process it only for the specific purpose we instruct, to keep it confidential, not to use it for their own purposes, and to delete or return it when the engagement ends. We confirm that these third parties provide the same or equal protection of your data as stated in this Privacy Policy.

Business transfers: If we are involved in a merger, acquisition, financing or sale of assets, your Personal Information may form part of the transferred assets. We will notify you before your information is transferred, and any successor will remain bound by this Privacy Policy or will give you notice and a choice before applying a different one.

Information Security

Security measures we implement:

Industry-standard TLS encryption for all data in transit between your device and our servers, and between our servers and the GST Network.
Encryption of stored data at rest, and one-way salted hashing of account passwords, which means we cannot read your password.
GST portal passwords are transmitted only over an encrypted channel to authenticate your session and are not retained on our servers.
Role-based access controls, so that our personnel can access only the data needed to perform their role, together with authentication controls and access logging.
Regular security audits, vulnerability assessments and patching.
Encrypted data backups and documented disaster recovery procedures.

You acknowledge that while FINCORPx implements robust security measures, no system is completely immune to security breaches, and we continuously work to enhance our security protocols.

Breach notification: In the event of a personal data breach affecting your information, we will notify you and the Data Protection Board of India in the manner and within the timelines required by applicable law.

Data Retention

We retain Personal Information only for as long as it is needed for the purpose it was collected for, or for as long as applicable law requires us to keep it. Our retention periods are:

Category	How long we keep it
Account and profile information	For as long as your account is active. Deleted when you ask us to delete your account, as described below
GST portal password	Not stored. Used only for the duration of the session you initiate
GST return working data and uploaded documents	Kept only while needed to prepare and complete the filing you asked for, then securely deleted. They are also deleted when you delete your account
Filing acknowledgements and records that GST, income tax and company law require to be preserved	For the period the relevant statute requires (up to 7 years under GST law), held in a restricted archive used for no other purpose, and then deleted. This applies even if you delete your account, because we are not permitted to destroy these records earlier
Security, access and audit logs	Up to 30 days after your deletion request is processed, then permanently deleted
Support correspondence	Up to 12 months after the query is resolved

Deleting Your Account and Your Data

You may delete your FINCORPx account, and the Personal Information associated with it, at any time. You do not have to give a reason, and we do not charge for it.

In the app: open Profile → Edit Profile → Delete Account, or Settings → Delete account. Confirm your password and the account is deleted immediately. You do not need to contact us.

If you cannot sign in: email support@fincorpx.com from your registered email address and we will verify your identity and delete the account for you. Full step-by-step instructions are on our Delete Account page.

What happens next:

We confirm it is you, by asking for your password in the app or, for an emailed request, by verifying your registered details.
The app confirms on screen once the account has been deleted.
We permanently delete your user profile and account information, your uploaded files and documents, your settings and preferences, your personal identifiers including name, email and contact details, and your client records.
Residual copies in logs and backups are cleared within 30 days of the request being processed, after which the deletion is permanent and irreversible.
The only exception is the small set of records that GST, income tax or company law obliges us to preserve, which are described in the Data Retention table above. These are kept in a restricted archive, are not used for any other purpose, and are deleted at the end of the statutory period.

Deleting your account is permanent. Once the deletion is processed, we cannot restore your data or your filing history.

Your Rights

Right to Access

You may access a summary of your Personal Information being processed by us, along with information on the processing activities we have undertaken and the identities of the third parties with whom it has been shared.

Right to Correction and Completion

You may correct, complete or update your Personal Information. Most of it can be edited directly in the app from your profile screen; for anything else, write to us and we will make the correction.

Right to Withdraw Consent and Erase Data

You may withdraw your consent at any time, and you may ask us to erase your Personal Information. Withdrawing consent is as easy as giving it. Once you withdraw consent we will stop processing your Personal Information within a reasonable time and erase it, except where law requires us to retain specific records. Because the Platform cannot be provided without processing this information, withdrawing consent means you will no longer have access to the Platform. See the deletion section above for the process and the timelines.

Right to Nominate

You may nominate an individual who shall, in the event of your death or incapacity, exercise your rights with respect to us processing your Personal Information.

Right to Grievance Redressal

You may raise a grievance with our Grievance Officer about how we handle your Personal Information, and escalate to the Data Protection Board of India if you are not satisfied with our response.

How to exercise these rights: write to support@fincorpx.com from your registered email address. We will respond within 7 working days, and in any event within the period required by applicable law. We will not charge you, and we will not treat you differently for exercising a right.

Children's Privacy

The Platform is built for businesses and tax professionals and is not directed to children. We do not knowingly collect Personal Information from anyone under the age of 18 years, and we do not permit persons under 18 to register. We do not carry out any tracking, behavioural monitoring or targeted advertising directed at children. If we become aware that we have collected Personal Information from a person under 18, we will delete it promptly. If you believe a minor has provided us with Personal Information, please contact our Grievance Officer using the details below.

Data Localization

We maintain all data obtained in the course of providing our services exclusively within the geographical boundaries of India. This includes, but is not limited to, user information, GST return data, client information, and any other data collected during the performance of our services. We do not transfer your Personal Information outside India.

Cookies and Similar Technologies

Our website and web application use only the cookies and local storage necessary to keep you signed in, remember your preferences and keep the session secure. We do not use third-party advertising cookies, and we do not use cookies or similar technologies to track you across other websites. The mobile app does not use advertising or cross-app tracking technologies.

Your Data Belongs to You

You retain ownership of the information and documents you submit to the Platform, including your clients' information. We process them on your instructions in order to provide the service, and we claim no ownership of them. You may export or request a copy of your data, and you may ask us to erase it, as set out in the sections above.

Any unauthorized access to the Platform is a breach of these terms and a violation of the law. You agree not to access the Platform by any means other than through the interface that is provided by FINCORPx.

Links to Other Sites

Links to third-party websites may be provided on the Platform. FINCORPx is not responsible for any form of transmission received by You from any third-party website. The information provided by You to such third-party websites shall be governed in accordance with the privacy policies of such third-party websites, and it is recommended that You review the privacy policy of such third-party websites prior to using such websites.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The date at the top of this page always shows when it was last revised. If we make a material change, such as collecting a new category of information or sharing information with a new category of recipient, we will notify you in the app or by email before the change takes effect, and where the law requires it we will ask for your consent again.

Grievance Redressal and Breach Reporting

If you have any questions, concerns, complaints or grievances regarding our privacy policies or our processing of Personal Information, please write to our Grievance Officer:

Name: Mr. Nachiyappan Vellaiyan

Email: support@fincorpx.com

Address: S1, Chandra Flats, 14/28, North Street, VP Colony, Aynavaram, Perumbur, Purasaiwalkam, Tamil Nadu, Chennai 600023

Hours: 10 AM to 7 PM (Monday to Friday)

We will endeavour to resolve any complaint or grievance within 7 working days or such other time-period as may be permitted under applicable law.

In the event we do not address your grievances or in the event of a personal data breach, you may approach the Data Protection Board of India to make a complaint.