Privacy Policy

1. Commitment to Privacy

At GSTMunshi.com ("GSTMunshi", "We", "Us", or "Our"), accessible from https://gstmunshi.com, we are committed to safeguarding the confidentiality, security, and integrity of the business records and personal identifiers you share with us. This Privacy Policy details how we collect, store, process, protect, and disclose data when you use our cloud-based invoicing, billing, stock monitoring, accounting tools, financial calculators, and informational resources.

By visiting or using GSTMunshi.com, you consent to the data practices described in this Privacy Policy.

2. Information We Collect

To provide invoicing, bookkeeping, and business tools, we collect the following categories of information:

• Account Registration Data: Mobile phone number, secure login verification codes (OTPs), and administrative contact email.
• Business Particulars: Legal firm name, registered trade address, GSTIN (Goods and Services Tax Identification Number), state, business logo, and authorized signature uploads.
• Transaction & Accounting Records: Customer/vendor ledger entries, item inventories, unit rates, quantities, HSN/SAC codes, discount structures, CGST/SGST/IGST tax rates, payment status, outstanding udhari balances, and expense records.
• Technical & Device Information: Internet Protocol (IP) address, device type, browser model, operating system version, screen resolution, referral URLs, and application performance metrics.

3. How We Use Your Data

The information we collect is processed strictly to deliver, maintain, secure, and optimize our platform. Specifically, we use your data to:

• Generate and customize compliant GST tax invoices, delivery challans, and thermal receipts.
• Compile monthly and annual GSTR summary reports (such as GSTR-1 and GSTR-3B offline formats).
• Maintain party ledgers, track customer receivables, and automate ledger reminder calculations.
• Process subscription authentications, account renewals, and customer support inquiries.
• Diagnose technical bottlenecks, enhance server speed, and strengthen platform security.
• Publish educational financial guides, market calculators, and interactive business simulators.

4. Data Sharing & Zero Monetization Guarantee

GSTMunshi does not sell, trade, rent, lease, or monetize your business ledgers, customer records, or financial transaction data to any third-party marketing companies, advertisers, or data brokers under any circumstances.

Your business data is only accessed by or disclosed to:

• Essential Infrastructure Sub-processors: Secure cloud database and hosting providers (such as Supabase, Google Cloud, and Hostinger) required to keep our cloud platform operational. These partners are legally bound by strict data confidentiality agreements and row-level access controls.
• Payment Processors: RBI-authorized payment gateways (such as Razorpay, Cashfree, and Paytm) to verify subscription payments. We never store debit/credit card details, CVVs, or UPI PINs on our servers.
• Statutory & Legal Compliance: When strictly required by law, court order, or authorized government agencies pursuant to the legal framework of the Republic of India.

5. Data Security Methods

We apply bank-grade physical, electronic, and procedural safeguards to protect your business records:

• End-to-End Encryption: All communications between your web browser and our cloud servers are encrypted using modern Transport Layer Security (TLS 1.3 / SSL 256-bit encryption).
• Passwordless OTP Verification: User accounts authenticate through encrypted SMS OTP verification, eliminating common password compromise risks.
• Row-Level Tenant Isolation: Every business workspace uses strict database row-level security (RLS) policies, preventing unauthorized cross-tenant data access.
• Continuous Backups: Database instances are backed up continuously with multi-zone redundancy to safeguard against data loss.

6. Data Retention Policy

We retain your business records as long as your account remains active or as required to fulfill statutory accounting standards. If you choose to close your account and request data deletion, your transaction ledgers and customer records will be permanently removed or anonymized from our active production databases within 30 business days, subject to regulatory recordkeeping laws. Encrypted backup archives are rotated and overwritten in standard cycles.

7. Cookies & Local Storage

Like most modern web applications, GSTMunshi.com uses cookies and local browser storage to provide a seamless user experience. We use:

• Essential Session Cookies: Required to keep you securely signed in, remember your active company workspace, and maintain authentication tokens across page transitions.
• Preference Cookies: Used to remember your interface preferences, selected financial year, and day/night theme modes.
• Performance & Cache Storage: Used to temporarily store recent calculation states and offline invoice drafts on your local device.

You can configure your browser to decline cookies or alert you when cookies are being sent. Note that disabling essential cookies may impact certain software functionality, such as keeping you logged in.

8. Google AdSense & Third-Party Advertising Disclosures

GSTMunshi.com displays advertisements served by Google AdSense and third-party advertising partners across public informational sections, calculators, and blog guides to support the ongoing availability of free financial tools and educational resources.

Third-party ad servers or networks may also use cookies, JavaScript, or Web Beacons in their respective advertisements and links that appear on GSTMunshi.com, which are sent directly to users' browsers. When this occurs, they automatically receive your IP address. These technologies are used by third-party ad networks to measure the effectiveness of their advertising campaigns and to personalize the advertising content you see on websites that you visit.

Please note that GST Munshi has no access to or control over these cookies used by third-party advertisers. We encourage you to consult the respective Privacy Policies of these third-party ad servers for more detailed information and instructions on how to opt-out of certain practices.

Strict Zero Accounting Data Leakage Guarantee:

Your confidential business invoices, accounting entries, customer ledgers, GSTIN records, and banking transactions are strictly segregated and NEVER shared with Google AdSense, ad servers, or advertising brokers. Advertising cookies operate exclusively in the client's public browser environment and have zero access to your encrypted financial data.

9. Log Files & Server Analytics

GSTMunshi.com follows standard web industry procedures for utilizing log files. These files log visitors when they access our websites. The information collected by log files includes:

• Internet Protocol (IP) addresses
• Browser brand, engine, and version
• Internet Service Provider (ISP) network metadata
• Date and timestamp of visits
• Referring pages, exit pages, and HTTP response codes
• Aggregate click counts and navigation flows

These log files are not linked to any personally identifiable information. The purpose of this technical telemetry is to monitor server health, analyze trends, prevent distributed denial-of-service (DDoS) attacks, ensure 99.9% uptime, and optimize overall platform responsiveness.

10. User Rights & Statutory Protections (DPDP, GDPR & CCPA)

Depending on your geographic jurisdiction, you hold statutory rights regarding your personal information:

To exercise any of these statutory rights, please submit a written request to support@gstmunshi.com. We respond to all verified requests within 30 calendar days.

11. Children's Privacy Protection (COPPA)

Protecting the privacy of children using the internet is of utmost importance. GSTMunshi.com is a commercial business accounting and professional financial information platform designed for business owners, accountants, tax consultants, and adult individuals.

We do not knowingly collect, request, or solicit any Personally Identifiable Information from children under the age of 13. If you believe that your child has provided personal information on our website, we strongly encourage you to contact us immediately, and we will make every effort to promptly purge such data from our records.

12. Contacting Our Privacy & Data Protection Officer

If you have questions, feedback, or concerns regarding this Privacy Policy or our security protocols, please contact our dedicated Privacy & Grievance Redressal Officer at: