Privacy and your data
Updated 16 October 2026
Account information
We store your name, email, account identifiers, linked GSTINs, trial dates and plan history to provide account access and enforce one trial per account and GSTIN. Sign-in uses a password. Signup does not require email or mobile verification; password-reset codes are sent to your account email.
Files and saved drafts
Uploaded files are processed in your browser. Choosing Save draft sends reviewed rows, source details and settings to private AWS storage in Mumbai. Original uploaded files are not stored by this feature. Saved report summaries and payment references are stored separately. You can delete saved drafts from Saved drafts.
Support requests
The contact form stores your name, reply email, topic and message in the private administrator support inbox. Replies are sent manually by email. Do not include passwords, reset codes, card details or business records. Contact support to request a review of account data or support-message removal.
Payments
Razorpay handles payment details in its checkout. Our server stores order and payment identifiers, amounts, status and access dates. It does not store your card number, CVV or UPI PIN. Razorpay privacy policy.
Cookies and visit measurement
Secure session cookies keep you signed in. Temporary cookies protect login and password-reset steps. First-party visit measurement uses a random browser identifier that expires after 90 days. The server stores daily counts and hashed identifiers to avoid counting repeated events. It does not store your IP address, email or browsing query strings in these visit records. Hashed counting records expire after 90 days and daily totals after 400 days. Do Not Track and the choice below stop future visit measurement.
You can turn off future visit measurement in this browser.
Third-party services and advertising
Fonts are served by this website. This version does not load Google AdSense or third-party analytics; the labelled advertising area is reserved space. Advertising and consent settings will be described here before ads are enabled.
Retention and security
Drafts remain in your account until deleted. Ownership and trial records remain linked when you archive a GSTIN. Payment, account and support records are retained for service operation and review. AWS provides encrypted storage and HTTPS. Administrator access is required to review support requests and ownership changes.
Contact
For privacy questions or data requests, contact support or email info@gstnook.in.