Privacy Policy

OkCA is a technology platform operated by OKCA (OPC) PRIVATE LIMITED. It is not a Chartered Accountant firm and does not itself provide tax, accounting or compliance services. Independent CA and tax-professional firms list and deliver those services using OkCA's software; OkCA processes the account and platform data described below to make that possible.

• Account details for anyone who signs in to OkCA directly — a firm's staff, or a client using a firm's portal — collected via email/password or Google sign-in: name, email address, and (for a firm) its registered business details captured at signup.
• Platform usage and security data: login timestamps, device/browser information, and the firm a session belongs to, needed to keep accounts secure and firm data correctly separated.
• Where a firm or client opts in, a WhatsApp number, for the deadline-reminder and marketing-consent features described on the account's own Privacy page.
• Marketplace activity: which firms and services a visitor views or starts an order for, so that order can be handed to the right firm.
• Support and grievance correspondence sent to OkCA directly, as opposed to a firm.

The tax, financial and compliance documents a client shares with their firm — PAN, GSTIN, filings, bank statements, and similar — are that firm's data, governed by that firm's own Privacy Policy and held under its own account, not OkCA's. OkCA's Google Drive migration feature only ever reads file and folder names to propose an organisation; it does not copy file contents, and never alters or removes anything in a firm's own Drive.

To operate your account and session; to route a marketplace order to the firm you chose; to keep the platform secure and separated by firm; to send the WhatsApp or email notifications you or your firm have opted into; and to meet OkCA's own legal and grievance-handling obligations as a platform operator under Indian law, including the Digital Personal Data Protection Act, 2023.

If you have an OkCA account (staff or client), you can view, export or request deletion of your own account data, and grant or withdraw marketing consent, from the Privacy page inside your account. To raise anything with OkCA directly rather than a firm, contact the Grievance Officer listed on About OkCA.

Account data is stored on Supabase's hosted infrastructure and may be processed outside India. We share data only where needed to run the platform — with the firm a client's account belongs to, with payment and messaging providers a firm has connected, and with authorities where required by law. OkCA does not sell personal data.