Last updated: 30 December 2025
1. Information We Collect
Account Information
When you create an account, we collect:
- Email address
- Password (encrypted)
- Organization name
- GSTIN (if provided)
Uploaded Data
When you use our Service, we process:
- Marketplace sales CSV/XLSX files you upload
- Transaction data extracted from these files
- Generated GSTR-1 outputs
2. How We Use Your Information
We use your information to:
- Provide and improve our GSTR-1 generation service
- Process and store your transaction data securely
- Send important service notifications
- Process payments and manage subscriptions
- Respond to support requests
3. Data Security
We implement industry-standard security measures:
- Encryption: All data is encrypted at rest and in transit (TLS 1.3)
- Access Control: Row-level security ensures you only access your own data
- Secure Storage: Files are stored in encrypted cloud storage (Cloudflare R2)
- Password Protection: Passwords are hashed using bcrypt
- Rate Limiting: Protection against brute-force attacks
4. Data Retention
We retain your data as follows:
- Account Data: Retained while your account is active
- Uploaded Files: Retained for 90 days, then automatically deleted
- Generated Outputs: Available for download for 30 days
- Transaction Records: Retained for GST compliance (7 years)
5. Third-Party Services
We use the following third-party services:
- Stripe: Payment processing (subject to Stripe's privacy policy)
- Cloudflare: CDN and file storage
- Sentry: Error tracking and monitoring
6. Your Rights
You have the right to:
- Access your personal data
- Request correction of inaccurate data
- Request deletion of your account and data
- Export your data in a portable format
- Withdraw consent for marketing communications
7. Cookies
We use essential cookies for:
- Authentication (session management)
- Security (CSRF protection)
We do not use tracking or advertising cookies.
8. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through the Service.