Privacy Policy
Last Updated & Effective: 01 July 2026
This Privacy Policy (Policy) governs the collection, use, storage, processing, and disclosure of personal data by WhiteBarn Capital ('we', 'us', 'our') operating the WBC DTAX platform at https://dtax.whitebarncapital.in ('Platform'). By accessing or using the Platform you, as the Data Principal, consent to the practices described herein.
1. Identity & Contact Details of Data Fiduciary
WhiteBarn Capital is the Data Fiduciary as defined under the Digital Personal Data Protection Act, 2023 ('DPDP Act').
- Registered Office: Delhi, India.
- Grievance / DPO Contact: grievance@whitebarncapital.in.
2. Categories of Personal Data Collected
- Identity & Contact Data: Full legal name, PAN, Aadhaar number (masked), email address, mobile number.
- Financial & Tax Data: Form 16/16A, Salary slips, Form 26AS, AIS/TIS, Bank statements, capital gains statements, GST returns, etc.
- Payment Data: Transaction reference numbers. (We DO NOT store card numbers, CVVs, or UPI PINs. Handled by Cashfree).
3. Legal Basis & Purposes
Processing is carried out for verifying user identity, computing tax liability, filing returns, and statutory record-keeping based on Consent, Contractual Necessity, and Legal Obligation under the Income Tax Act.
4. Data Retention
| Data Category | Retention Period |
|---|---|
| ITR & financial documents | 8 years from date of filing |
| KYC Data (PAN, Aadhaar) | 8 years |
5. Rights of Data Principals (Users)
Under the DPDP Act, 2023, you have the right to Access, Correction, Erasure, and to Withdraw Consent. Email grievance@whitebarncapital.in to exercise these rights.