1.1 This Privacy Policy explains how Webtel Electrosoft (P) Ltd. (“Webtel”, “we”) collects, uses, shares and protects personal data when you use MITR – Master Income Tax Reckoner and related services.
1.2 Webtel acts as a “data fiduciary” under the DPDP Act in respect of personal data it processes, and is committed to protecting your privacy and enabling data principal rights.
2.1 This Policy applies to personal data collected electronically through MITR, Webtel websites and associated digital channels used for MITR onboarding, support and communication.
2.2 It applies to users (e.g., CAs, tax professionals, enterprises) as well as their authorized users whose personal data is processed while using MITR.
Depending on your use of MITR, Webtel may collect:
3.1 Identification and contact data: name, organization, address, email, phone, designation, and relevant identifiers such as GSTIN or PAN where applicable.
3.2 Account and usage data: login credentials, device identifiers, IP address, log data, pages visited, feature usage, error logs, and preferences.
3.3 Transaction and billing data: subscription details, invoices, payment status, and limited payment references as provided by payment gateways (Webtel does not store full card details).
3.4 Client/third‑party data: personal data of your clients or other data subjects that you choose to input into MITR (e.g., name, PAN, contact details, tax‑related data). You are responsible for lawful collection and consent from such individuals.
4.1 Webtel processes personal data only for lawful purposes connected with providing and improving MITR and related services, and based on a valid legal basis under the DPDP Act such as consent, performance of contract, or compliance with law.
4.2 Typical purposes include: account creation and management, service provisioning, billing, customer support, communications about service updates, security, analytics, and compliance with legal obligations.
5.1 Where required, Webtel will obtain your free, specific, informed, unconditional and unambiguous consent through clear affirmative action before processing your personal data for specified purposes, and will provide a prior notice describing categories of data, purposes, rights, and contact details for grievances.
5.2 You may withdraw your consent at any time through the channels notified; withdrawal will not affect past processing but may impact continued use of certain features or services.
6.1 Webtel may use cookies and similar technologies on the MITR website to improve user experience, understand usage patterns and enhance services; these are used in an aggregate or pseudonymous form.
6.2 You can control cookies through your browser settings; however, disabling certain cookies may affect functionality.
7.1 Webtel may share personal data:
7.1.1 With trusted service providers and partners (e.g., hosting providers, payment gateways, communication tools, analytics providers) bound by confidentiality and data protection obligations, solely for purposes of providing and improving MITR.
7.1.2 With group companies or affiliates involved in MITR’s operation or support, subject to equivalent data protection standards.
7.1.3 With governmental, regulatory or law enforcement authorities where required by law, legal process, or to protect Webtel’s rights, systems, or users.
7.1.4 In connection with a merger, acquisition or corporate reorganization, subject to the requirement to maintain the same level of data protection.
7.2 Webtel does not sell personal data.
8.1 Where personal data is transferred outside India, Webtel will ensure that the recipient entity or country provides a level of data protection comparable to that under Indian law, and will put in place appropriate safeguards as per the DPDP Act and any rules framed thereunder.
9.1 Personal data is retained only for as long as necessary to fulfill the purposes stated in this Policy, to comply with legal obligations, resolve disputes and enforce agreements, after which it is securely deleted or anonymized.
9.2 Logs related to transactions and system access may be retained for longer periods where required by regulation, standards or risk management practice.
10.1 Subject to applicable law, data principals have the right to:
10.1.1 Request access to information about what personal data is processed and for what purposes.
10.1.2 Request correction or updating of inaccurate or incomplete personal data and, where permitted, erasure of data that is no longer necessary for the stated purpose.
10.1.3 Withdraw consent for processing, where processing is based on consent, using an easy mechanism similar to that used to give consent.
10.1.4 Lodge grievances regarding the handling of personal data, and escalate to the Data Protection Board or other competent authority if unsatisfied.
10.2 Requests may be submitted through the contact details provided. Webtel may require reasonable information to verify your identity.
11.1 Webtel uses appropriate physical, technical and administrative safeguards such as access controls, encryption where appropriate, network security and logging to protect personal data against unauthorized access, alteration, disclosure or destruction.
11.2 In the event of a personal data breach likely to cause significant harm, Webtel will notify affected data principals and the competent authority as required by law.
12.1 MITR is intended for use by adults and business/professional users; it is not directed to children. Users under 18 should not use MITR without appropriate supervision and capacity under applicable law.
13.1 For any questions, requests or grievances relating to this Privacy Policy or personal data, you may contact the designated Grievance Officer / Data Protection contact at:
13.1.1 Email: contact@webtel.in (or such address as notified on the MITR website).
13.2 Grievances will be addressed within a reasonable time frame, consistent with applicable law.
14.1 Webtel may update this Privacy Policy to reflect changes in law, technology, or our services.
14.2 Material changes will be notified on the MITR website and, where required, through additional notices or consent.