1. Commitment to Privacy

At GSTMunshi.com ("GSTMunshi", "We", "Us", or "Our"), we are dedicated to protecting the confidentiality, security, and integrity of the business databases and personal identifiers you share with us. This Privacy Policy details how we collect, store, process, and safeguard your data when using our billing, inventory, and accounting software.

2. Information We Collect

To provide invoicing and bookkeeping services, we collect:

Account Registration Data: Mobile phone number, secure login verification codes (OTPs), and contact email.
Business Particulars: Legal firm name, address, GSTIN (Goods and Services Tax Identification Number), signature uploads, and brand logos.
Transaction Records: Customer details, item inventories, unit rates, quantities, HSN codes, discount structures, CGST/SGST/IGST calculations, outstanding udhari balances, and expense logs.
Device Metrics: IP address, device type, browser settings, operating system version, and system usage analytics logs.

3. How We Use Your Data

The gathered data is processed to deliver, maintain, and optimize our cloud billing platform. Explicitly, we use your data to:

Generate and customize professional GST tax invoices.
Compile monthly and annual GSTR summary reports (such as GSTR-1 formats).
Manage party outstanding logs and generate automated ledger reminders.
Validate account renewals, process transaction fee status, and provide support.
Improve platform features and resolve performance bottlenecks.

4. Data Sharing & Disclosure

GSTMunshi does not sell, trade, rent, or lease your business data, customer ledgers, or invoice details to any third-party marketing companies.

Your data is only disclosed to:

Trusted Infrastructure Providers: Core database hosting (such as Supabase, Google Cloud, and Vercel) required to keep our cloud platform operational. These sub-processors are legally bound to absolute confidentiality.
Payment Gateways: Safe integration partners (like Razorpay, Paytm) to check subscription payment validations.
Legal Requirements: If mandated by official government orders, tax tribunals, or judicial warrants in compliance with the laws of India.

5. Data Security Methods

We use industry-standard physical, electronic, and administrative protective measures:

Encryption: Data transmitted between your device and our cloud servers is secured using SSL/TLS 256-bit encryption protocol.
OTP Login: Accounts are secured via SMS OTP login code verification, eliminating weak password exploits.
Automated Backups: Database instances are backed up continuously to ensure you do not lose data in case of device failure.

6. Data Retention Policy

We store your business entries as long as your account is active. If you choose to terminate your subscription and request account deletion, we will delete or anonymize your transaction records from our active servers within 30 business days, subject to regulatory compliance. Backup archives are deleted in cycles.

7. Cookies & Tracking Technologies

We utilize cookies to maintain your login session active, remember your active company workspace, preferred financial year settings, and theme preferences (light/dark mode). You can block cookies in browser settings, but it will require you to log in repeatedly during use.

8. User Choice and Rights

You retain full rights to edit, update, or purge any entries inside your parties list, item master list, and invoices. You can export all your company ledgers, transactions, and sales logs in Excel/PDF at any time from the Reports dashboard.

9. Contacting Our Privacy Officer

If you have queries, concerns, or requests regarding this Privacy Policy, please write to our dedicated support desk at:

Email: support@gstmunshi.com