Privacy Policy
Last updated: September 3, 2026
Vadavision Private Limited (operating as "GoLegally", "we", "us", or "our") operates the GoLegally platform including the website at golegally.com and all related services. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.
1. Information We Collect
Personal Information You Provide
When you use our services, we may collect:
- Name, email address, phone number, and postal address
- PAN, Aadhaar, DIN, and other government-issued identification numbers required for filings
- Company details: CIN, registered address, directors, shareholders
- Financial information: invoices, ledger data, tax returns (processed via Accounting Engine)
- Documents uploaded for registration or compliance filings
- Payment information (processed by our payment gateway partner, we do not store card details)
Information Collected Automatically
- Device and browser information, IP address, and operating system
- Usage data: pages visited, features used, session duration
- Advertising click identifiers when advertising consent is given
- Your privacy choices and browser privacy signals
- Cookies and similar technologies described in Section 6
2. How We Use Your Information
- To provide and maintain our services: company registration, compliance filings, invoicing, and tax computation
- To process government filings on your behalf (MCA, GST, trademark applications)
- To generate invoices, maintain accounting records, and compute taxes via our Accounting Engine
- To communicate with you about your filings, account, and service updates
- To improve our products, fix bugs, and develop new features
- To comply with legal obligations and respond to lawful requests
3. Data Sharing
We share your personal data only when necessary:
- Government Authorities: When filing on your behalf with MCA, GST Network, the Trademark Registry, or other regulatory bodies. This is the core purpose of our service.
- Service Providers: Payment gateways, cloud hosting, email delivery, and communication services that help us operate the platform.
- Professional Partners: If you engage a CA/CS through our platform, we share relevant case information with them to perform the service.
- Legal Requirements: When required by law, regulation, or legal process.
We do not sell personal data for money. Some privacy laws may define personalized advertising as a "sale" or "sharing". Where applicable, advertising consent can be refused or withdrawn through the privacy and cookie settings supplied on the site.
4. Data Storage & Security
Your data is stored on secure servers located in India and globally via our cloud infrastructure. We use industry-standard security measures including:
- Encryption in transit (TLS 1.3) and at rest
- Role-based access control and multi-tenant data isolation
- Regular security audits and vulnerability scanning
- Presigned URLs for document access (time-limited, per-user)
5. Your Rights (DPDP Act, 2023)
Where the Digital Personal Data Protection Act, 2023 and its relevant provisions apply, your rights include:
- Access: Request a summary of your personal data and how it's being processed.
- Correction: Request correction of inaccurate or incomplete data.
- Erasure: Request deletion of your personal data, subject to legal retention requirements.
- Grievance Redressal: File a complaint about our data processing practices.
- Nomination: Nominate another person to exercise your rights in case of death or incapacity.
To exercise these rights, email legal@golegally.com or use our data erasure request page.
6. Cookies
Essential storage supports security, requested features, account sessions, and service delivery. For visitors in the EEA, the UK, and Switzerland, Google's certified consent platform asks for a choice before enabling optional analytics or advertising storage and personalised advertising. Google Tag Manager may load with storage denied and send limited cookieless consent and measurement pings before a choice is made. In other regions, these technologies may operate by default where permitted by applicable law.
Refusing optional technologies does not prevent use of the site. Where consent is required, it can be withdrawn through the privacy and cookie settings link shown to applicable visitors. We also honour supported browser privacy signals for advertising storage and personalisation.
Technology register
| Technology | Purpose | Storage / duration |
|---|---|---|
| Account and securityVadavision Private Limited | essentialSigns users in, protects forms, prevents abuse, and keeps the service secure. | Session and security cookiesSession or as stated when an account is created |
| Cloudflare TurnstileCloudflare, Inc. | essentialSilently verifies data-search requests to deter automated extraction without blocking ordinary page browsing or search-engine crawling. | Security signals and a short-lived, single-use verification tokenTurnstile tokens expire after 5 minutes; Cloudflare retains security data under its applicable terms |
| Requested tool and chat stateVadavision Private Limited | essentialKeeps calculator inputs or an unfinished service flow on the same device when the user asks the feature to remember progress. | First-party browser storageUntil the user clears it |
| Google Analytics through Google Tag ManagerGoogle LLC | analyticsGoogle Tag Manager uses regional Consent Mode defaults. In the EEA, UK, and Switzerland, analytics storage remains denied until the visitor consents through Google's certified CMP. | Google analytics cookies and identifiersUp to 24 months, subject to the configured Google retention period |
| Vercel Web Analytics and Speed InsightsVercel Inc. | analyticsMeasures anonymous aggregate usage and real-user performance without cookies, so it runs regardless of optional cookie choices. | Request and performance data; no GoLegally advertising profileDaily visitor hashes expire after 24 hours; aggregate retention follows the configured Vercel plan |
| Microsoft ClarityMicrosoft Corporation | analyticsMicrosoft Clarity honours Google Consent Mode. In regulated European regions, cross-page session analytics start only after analytics consent. | Clarity analytics cookies and per-page measurement identifiersUp to 12 months for first-party cookies, subject to the configured Clarity settings |
| Google AdSense and Google AdsGoogle LLC and disclosed advertising partners | advertisingThe publisher loader also delivers Google's regional consent message. Advertising storage and personalisation remain denied until consent where the EEA, UK, or Swiss requirements apply. | Advertising cookies, device identifiers, and click identifiersVaries by advertising partner |
| Personalized advertisingGoogle LLC and disclosed advertising partners | personalizationSelects ads using interests or activity only when both advertising and personalization are allowed. | Advertising cookies and interest signalsVaries by advertising partner |
| YouTube privacy-enhanced embedsGoogle LLC | external MediaIn regulated European regions, embedded video loads after the relevant choice or after the visitor expressly chooses to load that video. | YouTube requests and storage after a video is loadedVaries by YouTube |
For more detail about Google's processing, see the Google Business Data Responsibility site. Google's advertising partner list may change as its auction partners change. Vercel's processing is described in its privacy notice. Cloudflare Turnstile is governed by Cloudflare's Turnstile Privacy Addendum.
7. Data Retention
We retain your personal data for as long as your account is active or as needed to provide services. For compliance filings, we retain records for the period required by law (typically 8 years for financial records under the Companies Act, 2013). You can request earlier deletion of non-mandatory data.
8. Children's Privacy
Our services are not directed to individuals under 18. We do not knowingly collect personal data from minors. If we become aware of such collection, we will delete it promptly.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or a prominent notice on our platform. If a change requires fresh consent, optional technologies will remain off until you choose again.
10. Contact Us
For privacy-related questions or to exercise your rights:
- Email: legal@golegally.com
- Data Protection Officer: dpo@golegally.com
- Address: Vadavision Private Limited, Plot No 337, Phase 2, Industrial Area, Chandigarh 160002, India