Privacy Policy
Last updated: October 6, 2026
Vadavision Private Limited (operating as "GoLegally", "we", "us", or "our") operates the GoLegally platform including the website at golegally.com and all related services. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.
1. Information We Collect
Personal Information You Provide
When you use our services, we may collect:
- Name, email address, phone number, and postal address
- PAN, Aadhaar, DIN, and other government-issued identification numbers required for filings
- Company details: CIN, registered address, directors, shareholders
- Financial information: invoices, ledger data, tax returns (processed via Accounting Engine)
- Documents uploaded for registration or compliance filings
- Payment information (processed by our payment gateway partner, we do not store card details)
Information Collected Automatically
- Device and browser information, IP address, and operating system
- Usage data: pages visited, features used, session duration
- Advertising click identifiers when advertising consent is given
- Your privacy choices and browser privacy signals
- Cookies and similar technologies described in Section 6
2. How We Use Your Information
- To provide and maintain our services: company registration, compliance filings, invoicing, and tax computation
- To process government filings on your behalf (MCA, GST, trademark applications)
- To generate invoices, maintain accounting records, and compute taxes via our Accounting Engine
- To communicate with you about your filings, account, and service updates
- To improve our products, fix bugs, and develop new features
- To comply with legal obligations and respond to lawful requests
3. Data Sharing
We share your personal data only when necessary:
- Government Authorities: When filing on your behalf with MCA, GST Network, the Trademark Registry, or other regulatory bodies. This is the core purpose of our service.
- Service Providers: Payment gateways, cloud hosting, email delivery, and communication services that help us operate the platform.
- Professional Partners: If you engage a CA/CS through our platform, we share relevant case information with them to perform the service.
- Legal Requirements: When required by law, regulation, or legal process.
We do not sell personal data for money. The site shows no ads. Where applicable, consent to ad campaign measurement can be refused or withdrawn through the privacy and cookie settings supplied on the site.
4. Data Storage & Security
Your data is stored on secure servers located in India and globally via our cloud infrastructure. We use industry-standard security measures including:
- Encryption in transit (TLS 1.3) and at rest
- Role-based access control and multi-tenant data isolation
- Regular security audits and vulnerability scanning
- Presigned URLs for document access (time-limited, per-user)
5. Your Rights (DPDP Act, 2023)
Where the Digital Personal Data Protection Act, 2023 and its relevant provisions apply, your rights include:
- Access: Request a summary of your personal data and how it's being processed.
- Correction: Request correction of inaccurate or incomplete data.
- Erasure: Request deletion of your personal data, subject to legal retention requirements.
- Grievance Redressal: File a complaint about our data processing practices.
- Nomination: Nominate another person to exercise your rights in case of death or incapacity.
To exercise these rights, email legal@golegally.com or use our data erasure request page.
6. Cookies
Essential storage supports security, requested features, account sessions, and service delivery. For visitors in the EEA, the UK, and Switzerland, a certified consent platform asks for one choice per category before enabling optional analytics or ad campaign measurement. Analytics may load with storage denied and send limited cookieless consent and measurement signals before a choice is made. In other regions, these categories may operate by default where permitted by applicable law.
Refusing optional technologies does not prevent use of the site. Where consent is required, it can be withdrawn through the privacy and cookie settings link shown to applicable visitors. We also honour supported browser privacy signals for ad campaign measurement.
What we store and measure
| Category | Purpose | Storage / duration |
|---|---|---|
| Account and security | essentialSigns users in, protects forms, prevents abuse, and keeps the service secure. | Session and security cookiesSession or as stated when an account is created |
| Bot and abuse protection | essentialSilently verifies data-search requests to deter automated extraction without blocking ordinary page browsing or search-engine crawling. | Security signals and a short-lived, single-use verification tokenVerification tokens expire after 5 minutes; security data is kept only as long as the protection needs it |
| Requested tool and chat state | essentialKeeps calculator inputs or an unfinished service flow on the same device when the user asks the feature to remember progress. | First-party browser storageUntil the user clears it |
| Usage analytics | analyticsCounts visits and how pages are used. In the EEA, the UK, and Switzerland, analytics storage stays off until the visitor consents. | Analytics cookies and identifiersUp to 24 months |
| Aggregate visit and speed measurement | analyticsMeasures anonymous, aggregate visits and page speed without cookies or personal data, so it runs regardless of optional cookie choices. | Request and performance data; no cookies and no advertising profileDaily visitor hashes expire after 24 hours; aggregate figures are kept longer |
| Performance and error monitoring | analyticsShows how fast pages load and which errors visitors meet, so they can be fixed. Runs only when analytics is allowed. | Page load times, web vitals and errors, with a per-tab session id in session storage; no cookies, no personal data, no query strings and no session replayThe session id ends when the tab closes; monitoring data is kept for a limited period |
| Interaction analytics | analyticsShows how visitors scroll and click, including recordings of page sessions. In the EEA, the UK, and Switzerland, it starts only after analytics consent. | Analytics cookies and per-page measurement identifiersUp to 12 months |
| Ad campaign measurement | advertisingTells us which of our own ads brought a visitor and whether they went on to enquire. The site shows no ads. Off until consent where the EEA, UK, or Swiss requirements apply. | Ad click identifiers and conversion signalsUp to 90 days |
| Embedded video | external MediaIn regulated European regions, embedded video loads after the relevant choice or after the visitor expressly chooses to load that video. | Requests and storage by the video service after a video is loadedVaries by video service |
Service providers process data in these categories only on our instructions and under contract. Advertising partners may change as ad auctions change.
7. Data Retention
We retain your personal data for as long as your account is active or as needed to provide services. For compliance filings, we retain records for the period required by law (typically 8 years for financial records under the Companies Act, 2013). You can request earlier deletion of non-mandatory data.
8. Children's Privacy
Our services are not directed to individuals under 18. We do not knowingly collect personal data from minors. If we become aware of such collection, we will delete it promptly.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or a prominent notice on our platform. If a change requires fresh consent, optional technologies will remain off until you choose again.
10. Contact Us
For privacy-related questions or to exercise your rights:
- Email: legal@golegally.com
- Data Protection Officer: dpo@golegally.com
- Address: Vadavision Private Limited, Plot No 337, Phase 2, Industrial Area, Chandigarh 160002, India