Privacy Policy

1. Who We Are

GST Notice Support Pvt. Ltd. ("we", "us", "our") is a company incorporated under the Companies Act, 2013, with its registered office at 3, Roopkunj, Hathital, Jabalpur, Madhya Pradesh 482001. We provide GST litigation services to individuals and businesses across India through this website and our online booking platform at gstnoticesupport.in.

This Privacy Policy explains how we collect, use, store, and protect information about you when you use our website or services. By using our website or creating an account, you consent to the practices described in this policy.

2. Information We Collect

2.1 Information You Provide

• Account information: Name, email address, mobile number, and GSTIN when you create an account or book a service.
• Documents: GST notices, returns, demand orders, invoices, reconciliation workings, and any other documents you upload for service delivery.
• Communications: Messages, questions, or information you submit via contact forms or email.
• Payment information: Payment details processed via Razorpay (we do not store card numbers — Razorpay is PCI-DSS compliant).

2.2 Information Collected Automatically

• Usage data: Pages visited, links clicked, time spent, and navigation patterns.
• Device data: Browser type, operating system, IP address, and device identifiers.
• Cookies: Session identifiers and authentication tokens stored in HTTP-only cookies. We do not use third-party advertising cookies.

3. How We Use Your Information

• To deliver the GST litigation service you have booked and communicate case progress.
• To authenticate your account and maintain session security.
• To process payments through our payment gateway (Razorpay).
• To send transactional emails (booking confirmation, draft ready, filing acknowledgement).
• To respond to your queries and support requests.
• To comply with applicable Indian tax laws and regulatory requirements.
• To detect fraud and prevent unauthorised access.

We do not use your information for advertising or sell it to any third party.

4. Document Handling & Security

All documents you upload are stored on AWS S3 in private, encrypted buckets in the Mumbai region. Documents are never publicly accessible — access is granted only via time-limited pre-signed URLs generated on demand. Our professionals are bound by confidentiality obligations and access only documents relevant to their assigned cases.

We use HTTPS/TLS for all data in transit. Passwords are hashed using industry-standard algorithms (bcrypt). JWT session tokens are stored in HTTP-only cookies and are never exposed to client-side JavaScript.

5. Sharing of Information

We share your information only in the following limited circumstances:

• Service delivery: ICAI-registered CAs and Bar Council-enrolled Advocates assigned to your case access only the documents relevant to your matter.
• Service providers: AWS (document storage), Razorpay (payment processing), Resend (transactional email). Each is bound by data processing agreements.
• Legal obligation: We may disclose information when required by law, court order, or a competent regulatory authority.

We do not share your documents, GSTIN, or financial information with any other third party.

6. Data Retention

• Account information is retained while your account is active.
• Booking records and payment records are retained for a minimum of 8 years to comply with Indian tax law requirements.
• Uploaded documents are retained while your account is active. If you delete your account, documents are permanently deleted from our servers within 7 days.
• Server access logs are retained for 90 days.

7. Your Rights

You have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate information.
• Request deletion of your account and associated documents (subject to legal retention obligations on financial records).
• Withdraw consent for communications where consent was the legal basis.

To exercise these rights, email us at support@gstnoticesupport.in.

8. Cookies

We use essential cookies only: an HTTP-only session cookie for authentication and a preference cookie for language/region settings. We do not use tracking cookies, advertising cookies, or third-party analytics cookies. You may disable cookies in your browser settings, but this will prevent you from logging in to your account.

9. Children

Our services are intended for businesses and professionals. We do not knowingly collect information from individuals under 18 years of age. If we become aware of such collection, we will delete the information promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes by email. The effective date at the top of this page will reflect the latest revision. Continued use of our services after any change constitutes acceptance of the updated policy.

11. Contact & Grievance Officer

For any privacy-related queries or to file a grievance, contact:

Grievance Contact: Customer Support
Email: support@gstnoticesupport.in
Address: GST Notice Support Pvt. Ltd., 3, Roopkunj, Hathital,Jabalpur, Madhya Pradesh 482001
Response time: We acknowledge grievances within 48 hours and aim to resolve them within 30 days.