Loading...
Loading...
Trust & security
Taficon works with the most sensitive data you have — your income, your statements, your taxes. Here is exactly how we handle it, in plain terms.
The GST-2B, AIS, 26AS and capital-gains reconciliation tools and all 14 calculators run entirely on your device. Your statements and figures are processed locally — for these tools nothing is uploaded to a server. Re-run the same file and you get the same answer.
When you do save data — uploading a statement for CA filing, connecting Gmail, or importing a CDSL CAS — it is encrypted in transit and at rest, and every record is tied to your account. No other user, and no unauthenticated request, can read it.
Sign-in is handled by Firebase Authentication. Your identity is resolved on the server from that verified session — we never trust a user id, email, or UID sent from the browser.
Card and UPI payments are processed by Razorpay (PCI-DSS compliant). We never see or store your card details, and every charge amount is verified server-side.
We do not sell your data, and we do not train AI models on your financial information. Bank-statement PDFs are parsed into transactions and are not retained afterwards.
We collect only what a feature needs and keep conversational history on a rolling window. You can request a copy or deletion of your data at any time, in line with India's Digital Personal Data Protection Act.
In 2026 we ran a full multi-tenant security audit of our backend and fixed every cross-account access issue it surfaced — then added automated tests so those specific fixes can never regress. Security is a standing part of how we ship, not a one-time exercise.
To be straight with you: we don't hold SOC 2 or ISO certifications yet — we're an early, focused team. What we do have is a simple, defensible architecture (most work never leaves your browser; what's stored is encrypted and isolated) and the discipline to keep it that way.
Found something, or have a question about how your data is handled? Write to security@taficon.app. See also our Privacy Policy and Terms.