Privacy Policy

We collect the following categories of information when you use GSTFile.in:

Account Information

• Full name, email address, and mobile number (provided during registration)
• Business name and GSTIN (GST Identification Number)
• State, city, and business address for GST compliance purposes

GST & Financial Data

• Monthly sales reports and settlement data shared by you from marketplaces
• Purchase invoices and vendor data you provide for 2A/2B reconciliation
• Filed GST return data, acknowledgements, and ARN numbers
• TCS certificates and related tax documents

Technical Information

• IP address and browser type (for security and fraud prevention)
• Session data and login timestamps
• Device information for account security purposes

We use the information collected solely for the following purposes:

• Preparing, auditing, and filing your GSTR1 and GSTR3B returns on the GST portal
• Processing and claiming your TCS refunds
• Performing 2A/2B reconciliation and generating query reports
• Sending monthly filing reminders, deadline alerts, and service communications
• Responding to your support queries and resolving issues
• Maintaining security of your account and preventing fraud
• Complying with legal and regulatory obligations

We do not use your data for marketing profiling, advertising targeting, or any purpose not directly related to delivering our GST filing service.

The only exceptions to data sharing are strictly limited to:

• The official GST portal (gstin.gov.in) for the purpose of filing your returns
• Our qualified CA team members who review your returns before filing
• Law enforcement or regulatory authorities when required by valid legal process

We implement appropriate technical and organisational measures to protect your data from unauthorised access, loss, or misuse. These include:

• Encrypted data storage and secure transmission (HTTPS/TLS)
• Access controls — only authorised team members can view client data
• Regular security reviews and vulnerability assessments
• Secure password hashing and session management

Your data is stored on servers located in India. We do not transfer your data outside India.

Our website uses cookies to improve your experience. We use:

• Essential cookies: Required for account sessions and platform functionality
• Analytics cookies: Anonymous usage data to help us improve the platform
• Live chat cookies: Used by our Tawk.to support widget for session continuity

We do not use advertising or third-party tracking cookies. You can disable cookies via your browser settings, though this may affect platform functionality.

We use a limited number of trusted third-party tools to operate our platform:

• Tawk.to — live customer support chat (subject to Tawk.to's own privacy policy)
• Google Fonts — for website typography (fonts loaded from Google servers)
• GST Portal (gstin.gov.in) — for submitting your returns on your behalf

None of these third parties have access to your GST data, sales figures, or financial information.

We retain your data for the following periods:

• Account & profile data: For the duration of your active subscription plus 2 years
• GST return records & acknowledgements: 7 years as required by GST law
• Sales data and reports: 3 years from the filing date
• Support communications: 2 years from the date of interaction

After the applicable retention period, your data is securely deleted. You may also request deletion of your data at any time (subject to legal retention requirements) by emailing us.

You have the following rights with respect to your personal data held by us:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or outdated data
• Deletion: Request deletion of your data (subject to legal retention requirements)
• Portability: Request your data in a structured, machine-readable format
• Objection: Object to processing of your data for purposes beyond service delivery

To exercise any of these rights, email us at info@gstfile.in. We will respond within 30 days.

GSTFile.in is a professional B2B service intended for business owners and GST-registered entities. We do not knowingly collect data from individuals under the age of 18. If you believe we have inadvertently collected data from a minor, please contact us immediately.

We may update this Privacy Policy periodically. When we make material changes, we will notify you via email to your registered address and update the "Last Updated" date at the top of this page. We encourage you to review this policy periodically to stay informed.

For any privacy-related questions, data access requests, or concerns, please contact our team directly.