Skip to main content

Privacy Policy

Last updated: April 2026

1. Introduction

CredGST ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our GST compliance scoring service.

2. Information We Collect

2.1 Information You Provide

  • Account registration details (full name and email address)
  • GSTIN numbers you submit for scoring
  • Credit request information
  • Communication data when you contact support

2.2 Information from GST Portal

With your authorization (via OTP verification), we access your GST filing data from the Government GST Portal through authorized GSP APIs. This includes:

  • Filing history and status
  • Return data (GSTR-1, GSTR-3B, etc.)
  • Payment records
  • Business registration details

2.3 Automatically Collected Information

  • Device and browser information
  • IP address and location data
  • Usage patterns and interactions

3. How We Use Your Information

We use the collected information to:

  • Calculate your GST compliance score
  • Generate detailed compliance reports
  • Manage your credit balance and credit requests
  • Provide customer support
  • Send service-related communications
  • Improve our services and user experience
  • Comply with legal obligations

4. Data Sharing and Disclosure

We may share your information with:

  • Service Providers: GSP partners (for authorised GST data access) and cloud hosting providers
  • With Your Consent: When you authorise sharing your score with third parties
  • Legal Requirements: When required by law or to protect our rights

We never sell your personal data to third parties.

5. Data Security

We implement industry-standard security measures including:

  • End-to-end encryption for sensitive data
  • Secure, encrypted connections (HTTPS)
  • Regular security audits
  • Access controls and authentication
  • Secure data centers with compliance certifications

6. Data Retention

We retain your data for as long as your account is active or as needed to provide services. Score reports are retained for 60 days after generation. You may request deletion of your account and associated data at any time.

7. Your Rights

You have the right to:

  • Access your personal data
  • Correct inaccurate information
  • Request deletion of your data
  • Withdraw consent for data processing
  • Export your data in a portable format

8. Cookies

We use essential cookies for authentication and security. We may use analytics cookies to understand how users interact with our service. You can control cookie preferences through your browser settings.

9. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes via email or through our service. Continued use after changes constitutes acceptance of the updated policy.

10. Contact Us

For privacy-related questions or to exercise your rights, contact us at:

Email: privacy@credgst.in
Address: Bengaluru, Karnataka, India