Privacy Policy

When a CA firm uses Tagada to message its clients, the firm is the Data Fiduciary — it decides who to contact and why. Tagada is the Data Processor, handling data on the firm's instructions. Tagada never messages anyone on its own behalf and never sells or shares data.

Only what's needed to chase documents for tax compliance:

• Client contact info: name, WhatsApp number, preferred language, GSTIN (if provided).
• Documents clients send — PDFs and photos — stored privately, never public.
• Message history: reminders sent and replies received, so the firm has a record.
• Consent records: when and how a client opted in or out.

It does not track browsing behaviour, does not sell or share data with third parties, and collects nothing beyond the above.

A client's first message is always an opt-in ask — it says who is messaging and why, and lets them reply YES to continue or STOP to opt out. STOP (and its Hindi equivalents) is honoured instantly, on every path, and nothing is sent to that client again unless they are deliberately re-invited.

To be exact about the other half: reminders Tagadasends on a firm's behalf go only to clients who have opted in. A CA can also message their own client by hand from their own WhatsApp — and a client who has simply not been asked yet can be reached that way, which is how the first ask happens at all. A client who has said STOP cannot.

Every record is scoped to the firm that owns it, enforced by the database itself (row-level security) — one firm can never see another firm's clients, documents, or messages. Data is hosted in India (Mumbai region) for data-residency comfort under the DPDP Act.

Under the DPDP Act you can ask the CA firm that holds your data to show what it has, correct it, or erase it, and you can withdraw consent at any time (reply STOP on WhatsApp). If a firm using Tagada can't resolve your request, contact us and we'll help the firm act on it.

To stop being contacted: reply STOPon WhatsApp (or the Hindi equivalent). Consent is withdrawn immediately — no further reminders are sent. A firm cannot quietly undo it: the ordinary “record consent” action refuses an opted-out client, and a stray reply cannot lift it either. It can only be restarted by a deliberate re-invitation that the firm has to confirm, and that restart is recorded.

To have your records erased: ask the CA firm that holds them. Staff with the right permission can delete a client from the Tagada dashboard, which removes the client record, message history and consent record, and permanently deletes the document files themselves from storage — not merely from view.

If the firm doesn't act: email hello@tagada.in. Tagada is the Data Processor, so we act on the firm's instructions, but we will help the firm carry out a valid erasure request.

One honest caveat: your CA firm may be legally or professionally required to retain certain records for a period, independently of Tagada. Where that applies, the firm remains responsible for telling you what it must keep and why.

If you have a complaint about how Tagada handles your data, write to our Grievance Officer, named here as the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 require.

Anita Sulaniya, Proprietor, TAGADA
Email: hello@tagada.in
Dwarka, South West Delhi, Delhi 110077

We will resolve a grievance within one month of receiving it.

Questions about this policy or your data? Email hello@tagada.in, or write to TAGADA, Dwarka, South West Delhi, Delhi 110077.