Privacy Policy

Aasaan Tax(“we”, “us”, or “our”) operates this tax filing portal for taxpayers in Pakistan. This Privacy Policy explains how we collect, use, disclose, store, and safeguard your personal information when you use our website and services to file income tax returns with the Federal Board of Revenue (FBR).

We are committed to handling your data lawfully, fairly, and transparently in line with applicable Pakistani law, including the Prevention of Electronic Crimes Act, 2016 (PECA), the principles set out in Pakistan’s Personal Data Protection Bill, and our confidentiality obligations as tax practitioners under the Income Tax Ordinance, 2001.

To provide tax filing and advisory services, we may collect:

• Identity data — full name, CNIC, date of birth, and National Tax Number (NTN).
• Contact data — email address, mobile number, city, and residential address.
• Financial & tax data — salary and income details, tax deducted, employer information, deductions, assets, and other information required to prepare your return.
• Account data — login credentials and authentication records. Passwords are never stored in plain text (see Data security).
• Technical data — limited session and device information needed to keep your account secure.

We collect this data directly from you when you sign up, complete the filing interview, or upload documents. If you choose Sign in with Google, we also receive limited account information from Google as described below.

You may create or access your Aasaan Taxaccount using Google Sign-In (OAuth). When you do, Google shares with us only the information needed to authenticate you and set up your account. Through Google’s openid, email, and profile scopes, we may receive:

• your Google account email address;
• your Google account display name (full name);
• a stable Google user identifier used solely to recognise your signed-in session.

We use this Google user data only to:

• verify your identity and sign you into the portal;
• create or link your Aasaan Tax account to that Google login;
• pre-fill your name and email where those fields are empty;
• keep your session secure and prevent unauthorised access.

We do not request access to your Gmail, Google Drive, Contacts, Calendar, or any other Google product data. We do not sell Google user data, use it for advertising, or share it with unrelated third parties for their own purposes. Google user data is not used to train AI or machine-learning models.

Our use of information received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements. You can revoke Aasaan Tax’s access to your Google account at any time from your Google Account permissions, and you may also delete your Aasaan Tax account from account settings.

We use your information only for legitimate purposes, including to:

• prepare, review, and submit your income tax return to the FBR IRIS system;
• verify your identity and maintain the security of your account;
• register or update your NTN and FBR profile on your instruction;
• respond to your queries and provide tax and advisory support;
• meet our legal, regulatory, and record-keeping obligations.

We do not sell your personal data, and we do not use it for advertising or unrelated marketing without your consent.

Your data is handled only by authorised personnel and is shared strictly on a need-to-know basis:

• Federal Board of Revenue (FBR) — to lawfully file your return and complete registrations you have requested.
• Service providers — vetted infrastructure providers (such as our authentication and database host) who process data on our behalf under confidentiality obligations.
• Legal authorities — where disclosure is required by law, court order, or a lawful regulatory request.

We never share your CNIC, salary, or financial details with unrelated third parties for their own purposes.

We apply technical and organisational measures to protect your information against unauthorised access, alteration, disclosure, or loss:

• data is transmitted over encrypted (HTTPS/TLS) connections;
• passwords are hashed using industry-standard one-way encryption (bcrypt) by our authentication provider and are never visible to us or stored in plain text;
• access to your records is restricted by role-based permissions and row-level security, so users can only access their own data;
• service credentials and keys are kept in secure server-side configuration only.

While no system can be guaranteed completely secure, we continuously review our safeguards to keep your data protected.

We retain your personal and tax data only for as long as necessary to provide our services and to comply with legal record-keeping obligations under the Income Tax Ordinance, 2001 and related regulations. Filed returns and supporting records may be retained for the period required by FBR. When data is no longer required, it is securely deleted or anonymised.

You have the right to:

• access the personal data we hold about you;
• request correction of inaccurate or incomplete information;
• delete your account — you can permanently remove your login, profile, and draft returns at any time from your account settings. Filed returns may be retained where required by law;
• withdraw consent or object to certain processing, subject to legal limits.

To exercise any of these rights, use the controls in your account settings or contact us using the details below.

We use only essential cookies and session storage required to keep you signed in and to protect your account. We do not use third-party advertising or tracking cookies. Your browser theme preference is stored locally on your device.

Our services are intended for taxpayers and are not directed at children. We do not knowingly collect personal data from anyone under the age of 18 without appropriate authorisation.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The “Last updated” date above indicates when this policy was last revised. Significant changes will be communicated through the portal where appropriate.

If you have questions about this Privacy Policy or how your data is handled, contact Aasaan Tax by phone at +92 321 2040253 or via WhatsApp.