Privacy policy
This policy explains what personal data Devendra Saraf & Associates, Chartered Accountants, Mumbai (“we”) collects through this portal, why, how long we keep it and what you can do about it. Policy version: 2026-10-14.
The law that applies
We handle personal data with regard to the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025. The Act and the Rules come into force in stages, so some of their provisions may not yet be in force on the date you read this. We follow the practices in this policy now, whether or not a given provision is yet in force, and we will update this policy as further provisions take effect. Under that law we act as the Data Fiduciary for the data described here.
What we collect
| Data | Why we need it | Required? |
|---|---|---|
| Full name and email address | To create and secure your account and to write to you about it | Yes |
| Password | To let you log in. It is stored only in hashed form by our authentication provider; we cannot read it | Yes |
| Profession | To decide whether to approve your registration, to understand who uses the portal and to plan its content | Yes |
| Organisation and city | Only if you choose to give them, for the same purpose | No |
| Your consent record (policy version and time) | To show when you agreed to the terms of use and this policy | Yes |
| Registration status (awaiting approval, approved, not approved or suspended), the date of the decision and any note on it | Every registration is approved by the firm before the portal can be used. We keep this record to show who has access and why | Yes |
| Newsletter choice and its confirmation | To send the weekly updates newsletter only if you asked for it and confirmed it | No |
| Questions you send to the AI research assistant | To produce the answer you asked for. We do not store them in our database | Only if you use it |
We do not collect your mobile number, PAN, Aadhaar, address or payment details. Please do not enter personal data of other people, or confidential client information, into the calculators or the AI research assistant.
Cookies and storage in your browser
We use only the cookies needed to keep you logged in. Your browser also remembers your choice of light or dark theme. We do not use advertising or tracking cookies, and we do not run third-party analytics.
Who processes the data for us
We use service providers who process data only on our instructions:
- an authentication and database provider, which holds your account and profile;
- a website hosting provider, which serves the portal;
- an email delivery provider, which sends account emails and, if you asked for it, the newsletter;
- an AI service provider, which processes questions sent to the AI research assistant.
Some of these providers may process data on servers outside India. We do not sell or rent personal data, and we do not share it with anyone for marketing.
How long we keep it
We keep your account data while your account exists. When you delete your account, we delete your profile and newsletter choice. We may keep a record only where a law requires us to.
Your rights and choices
- See and correct your details on the profile page.
- Download a copy of your data from the your data page.
- Stop the newsletter at any time with the unsubscribe link in any issue, or on the newsletter page.
- Withdraw your consent and erase your data by deleting your account on the your data page. Withdrawal does not affect what was done before it.
- Nominate another person to exercise your rights if you die or become unable to do so, by writing to us.
- Raise a grievance with us, as below.
Age
The portal is for persons aged 18 years or older. Please do not register if you are younger.
Security
Data travels over encrypted connections. Access to the database is limited by row-level rules so that each user can read only their own profile. No system is perfectly secure; if a breach affects your data, we will inform you and the authorities as the law requires.
Grievances and contact
Write to devendra@fcpdevendrasaraf.com with your registered email address and your request. We will reply as soon as we can and within the time the law allows. If you are not satisfied, you may approach the Data Protection Board of India once the relevant provisions are in force.
Changes to this policy
We will post any change here with a new version date. If a change needs your fresh consent, we will ask for it when you next log in.