QuickCAQuickCABY AI METHODS

Privacy Policy.

Effective 20 October 2026

1.Who we are

  1. 1.1QuickCA is a product of AI Methods, operating from Rajasthan, India ("QuickCA", "we" and "us").
  2. 1.2QuickCA sells income-tax filing and related tax services. A Chartered Accountant or firm, engaged by us as a partner, performs the work on our behalf.
  3. 1.3For the personal data described here, we are the Data Fiduciary under the Digital Personal Data Protection Act, 2023.
  4. 1.4Write to us at quickca@thequickca.com.

2.What this policy covers

  1. 2.1The QuickCA WhatsApp service, through which a client gives us their details, sends documents and buys a filing.
  2. 2.2thequickca.com, including the partner dashboard a CA or firm signs in to.
  3. 2.3It does not cover the Income Tax Department's portals, the GST portal, WhatsApp itself, or a partner's own systems and records.
  4. 2.4The QuickCA browser extension has its own notice at https://thequickca.com/privacy-policy.html, which supplements this one.

3.The two people this policy is about

  1. 3.1A client - a taxpayer who buys a filing through WhatsApp.
  2. 3.2A partner - a CA or firm who signs in to the dashboard to bid on cases and file them. Some partners also run their own WhatsApp number on QuickCA. Section 10.
  3. 3.3Sections 4 and 5 differ accordingly. Everything after them applies to both.

4.What we hold about a client

  1. 4.1Your WhatsApp number, the name you gave, and the language you chose to be spoken to in.
  2. 4.2Your PAN, and the tax profile you gave the bot: income type, income bracket, the regime you file under and whether you are GST-registered.
  3. 4.3The documents you upload - such as Form 16, PAN, Aadhaar, bank statements, AIS and investment proofs - and the fields our checks read out of them.
  4. 4.4Whether you told us you have a login for the income-tax or GST portal, and - only where you chose to give them - that user ID and password. Section 8.
  5. 4.5Your payment status for a case, and the acknowledgement number of a return filed for you.
  6. 4.6Your conversation with the bot, any file your CA sent you through it, and which reminders it has already sent you.
  7. 4.7That you accepted this policy: which version, and when.
  8. 4.8Whether you asked for a CA to call you, the exact sentence you agreed to when you did, and whether you later withdrew it. Section 9.

5.What we hold about a partner

  1. 5.1Your name, email address and phone number.
  2. 5.2Your ICAI membership number, or your firm's GSTIN, and the result of checking it against that registry.
  3. 5.3Your years of experience, the languages you work in, your specialisations and the fees you bid.
  4. 5.4Once you connect it, the ID of your Razorpay account and when you connected it. We do not see your bank details; Razorpay holds them.
  5. 5.5A record that you accepted the Partner Agreement: which version, when, and the IP address and browser it came from.
  6. 5.6A conduct record of decisions we take about your account.

6.Why we hold it

  1. 6.1To deliver what you bought or agreed to perform: matching a case to a partner, collecting the documents a return needs, filing it, and asking the client to pay for it.
  2. 6.2To keep the two sides apart until a client has chosen. Section 9.
  3. 6.3To meet obligations the law places on us, including tax and record-keeping.
  4. 6.4To answer a support request, and to investigate a complaint about a case.
  5. 6.5To remind you about a filing you started and did not finish. Section 7.
  6. 6.6To have a CA call you, where you asked for that. Section 9.
  7. 6.7We do not use it to advertise to you, and we do not profile you.

7.WhatsApp, and Meta

  1. 7.1The service runs on the WhatsApp Business Platform. Messages between you and the bot pass through Meta's systems and are subject to Meta's own terms as well as this policy.
  2. 7.2Meta knows which number messaged which business and when. We do not send Meta your documents or your tax profile.
  3. 7.3If you start a filing and go quiet, we remind you up to three times: after about 4 hours, 20 hours and 48 hours. Tap Not now, or reply STOP, and the reminders end. Writing to us again later starts a fresh filing conversation, with its own reminders if you go quiet again.
  4. 7.4Where we message you outside an open conversation, we use a message template Meta approved in advance.
  5. 7.5We will never ask you on WhatsApp for a card number, a bank password or a UPI PIN. Nobody from QuickCA will.

8.Your tax portal login

  1. 8.1It is always given through a secured link that expires - never typed into the chat. We may ask for it at the start, if you tell us you have one, so that your CA can take your documents from the portal instead of asking you for them.
  2. 8.2A login you give before choosing a CA is held, encrypted, and seen by nobody until you choose and pay one. If you do not file with QuickCA, we delete it within 30 days.
  3. 8.3The password is encrypted with AES-256-GCM before it is stored, and is never sent to a browser in a form that could be read.
  4. 8.4It is decrypted only when the partner assigned to your case asks for it. Every decryption is counted, timestamped, and recorded against the person who made it.
  5. 8.5We do not store your portal OTP. When one is needed, the bot asks you for it and relays that single code.
  6. 8.6You may decline to give the login. Some services cannot be completed without it.

9.Who else sees it

  1. 9.1Before you choose a CA, nobody sees who you are. A partner considering your case sees the service, the period, your income bracket, how many documents are in, a complexity score and your preferred language - not your name, PAN, phone number or documents.
  2. 9.2After you choose, the partner you chose and the staff of their firm they assign see the case, its documents and your mobile number - the tax portal sends its codes to that number, and they cannot register or file for you without it.
  3. 9.3If you ask for a call. Should you stop partway and tap Call me, we share your name, your phone number and where your filing stands with CAs and firms who hold a QuickCA Direct membership, so that one of them can call you. This happens only if you ask. Reply STOP to withdraw it: no member is shown your details after that, though one who has already noted your number may still have it. A request we have not heard back on is closed after 60 days.
  4. 9.4When you pay your CA, you pay them through their own Razorpay account, so Razorpay shows them the details it records for that payment, such as your name, email and UPI ID. Under clause 6 of the Partner Agreement they may use these only for their own accounts and tax records, never to contact you.
  5. 9.5Under clause 8 of the Partner Agreement, a partner may use your data only for your case, must keep it confidential, and must delete their own copies when the case closes.
  6. 9.6Our own staff reach it only to run the service or to resolve a complaint.
  7. 9.7Apart from a call you asked for, described above, we do not sell, rent or trade personal data, and we never share it for anyone's advertising.

10.A firm's own QuickCA number

  1. 10.1Some partner firms run their own WhatsApp number on QuickCA and advertise it themselves. If the number you messaged is one of these, you are that firm's client from your first message.
  2. 10.2That firm sees your name, your phone number and how far your filing has got, from the start - not only after you choose them. Your case goes to them directly; no other CA is shown it or bids on it.
  3. 10.3Everything else in this policy applies in the same way: QuickCA runs the service, holds the data and is responsible for it.

11.Who processes it for us

  1. 11.1Google, through Firebase - hosting, database, file storage and sign-in. Data is held on Google Cloud infrastructure.
  2. 11.2Meta, for the WhatsApp Business Platform, as in section 7.
  3. 11.3Razorpay, for payments. QuickCA's fee is paid to our Razorpay account and your CA's fee to theirs. Card and UPI details are entered on Razorpay's own page; we receive the outcome of a payment and its reference, never the instrument.
  4. 11.4Each acts on our instructions, and none is permitted to use the data for its own purposes.

12.How long we keep it

  1. 12.1While your account is open and your case is live.
  2. 12.2A portal login given before you chose a CA: 30 days at most, unless a filing follows. A request for a CA to call you: until you withdraw it, or 60 days.
  3. 12.3Afterwards, for as long as we need the record - a filing can be questioned after it is made, and the objection window on a case is 4 days but a tax record is not.
  4. 12.4Where the law requires us to retain something, we retain it for the period that law prescribes and for no other purpose.
  5. 12.5You can ask us to delete the rest at any time. What we delete, and what we cannot, is set out at https://thequickca.com/legal/data-deletion.

13.Security

  1. 13.1Portal passwords are encrypted at rest, as described in section 8.
  2. 13.2What each account can read is enforced by the database itself rather than by the screen, so hiding something is not the same as protecting it here.
  3. 13.3Documents are served through short-lived links rather than public addresses.
  4. 13.4No system is immune. Where a breach affects your personal data, we will notify you and the Data Protection Board of India as the law requires.

14.What we do not do

  1. 14.1We carry no analytics, no advertising code and no third-party trackers on any QuickCA page.
  2. 14.2We do not buy personal data, and we do not sell, rent or trade it. The one time your contact details reach a CA you have not chosen is when you ask us for a call. Section 9.
  3. 14.3We do not message you about anything other than your case and the service.
  4. 14.4We do not read your documents for any purpose other than preparing and filing the return they belong to.

15.Your rights

  1. 15.1To ask what personal data we hold about you and what we have done with it.
  2. 15.2To have it corrected, completed or updated where it is wrong.
  3. 15.3To have it erased, subject to section 12 and the deletion page.
  4. 15.4To withdraw a consent you gave - reply STOP on WhatsApp, or write to us. Withdrawing does not undo what was done while the consent stood.
  5. 15.5To nominate another person to exercise these rights for you in the event of death or incapacity.
  6. 15.6To raise a grievance. Section 16.
  7. 15.7To exercise any of these, write to quickca@thequickca.com from the email address or phone number registered on your account. We will respond within the period the applicable rules prescribe.

16.Grievance redressal

  1. 16.1If you are dissatisfied with how your personal data has been handled, write to The Grievance Officer, AI Methods, at quickca@thequickca.com.
  2. 16.2We acknowledge within 72 hours and resolve within 30 days.
  3. 16.3If it is not resolved to your satisfaction, you may escalate to the Data Protection Board of India under the Digital Personal Data Protection Act, 2023 and the rules made under it.

17.Children

  1. 17.1QuickCA is not directed at children and we do not knowingly collect personal data from one.
  2. 17.2Where a return necessarily includes details of a family member, those details are given to us by the taxpayer filing it.
  3. 17.3We do not track, behaviourally monitor or advertise to children.

18.Accepting this policy, and changes to it

  1. 18.1You are asked to accept this policy in your first message to QuickCA on WhatsApp, before anything is collected. We keep the version you accepted and when.
  2. 18.2We may update this policy. The effective date at the end changes with it.
  3. 18.3Where a change materially affects how we handle your data, we will tell you through the service before it takes effect.
  4. 18.4Continuing to use QuickCA after a change takes effect means you accept it.

19.Contact and governing law

  1. 19.1Questions about this policy, or about data we hold: quickca@thequickca.com. For anything else: quickca@thequickca.com.
  2. 19.2This policy is governed by the laws of India.
  3. 19.3The courts at Rajasthan, India have exclusive jurisdiction over any dispute arising from it.

Effective 20 October 2026.