Security at Iniciotax-AI
Protecting your personal and financial information is central to how we build. Here's what we do — described plainly, without overstatement.
Encryption in transit
Traffic to our website and services is served over HTTPS/TLS.
Least-privilege access
Staff access to operational data is limited to what a role requires, with an audit trail of actions.
Document handling
Documents you share are used to prepare your return; you review extracted details before they are used.
Secret management
Application secrets are kept out of the browser and configuration is separated per environment.
Our approach
We aim to collect only the information needed to prepare your ITR-1, to be clear about how it is used, and to give you visibility and control. Our practices are described here and in our Privacy Policy, Data Retention policy, and Trust Center.
Responsible disclosure
If you believe you have found a security vulnerability, please tell us before disclosing it publicly so we can investigate and address it. Email iniciospace@gmail.com with details and steps to reproduce. We appreciate reports made in good faith and will not pursue action against researchers who act responsibly and avoid privacy violations or service disruption.
What we do not claim
We do not claim certifications, audits, or government approvals we have not received. As our compliance program matures, we will publish verifiable details in our Trust Center. If a statement here ever seems to overstate our posture, tell us and we will correct it.