At OkayGST, we strictly treat your marketplace sales data and tax documents as strictly confidential. We do not sell, rent, monetize, or trade your tax records, financial numbers, or customer orders to any third-party advertisers. Your financial files are used solely to generate GSTR-1 returns, calculate TCS Section 52 credits, and provide compliance reports.
01 Introduction & Data Controller
This Privacy Policy describes how OkayGST (“we”, “us”, or “our”), registered in Maharashtra, India (GSTIN: 27BGOPJ9762R1Z5), collects, uses, protects, and discloses personal and business information gathered through our web application at https://okaygst.com and associated application portals.
By accessing OkayGST, uploading sales spreadsheets, registering an account, or subscribing to our software tools, you acknowledge that you have read, understood, and consented to the collection and processing of your information in accordance with this Privacy Policy.
02 Statutory Compliance Framework
This Privacy Policy is compiled in strict compliance with the legal provisions of:
- The Information Technology Act, 2000 (IT Act) and applicable amendments.
- The Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (the “SPDI Rules”).
- The Consumer Protection (E-Commerce) Rules, 2020 framed under the Consumer Protection Act, 2019.
- Prevailing Indian digital data privacy and cybersecurity guidelines prescribed by CERT-In and relevant authorities.
03 Information We Collect
To deliver automated GST filing and reconciliation services, we collect the following categories of information:
Account & Business Profile Information
When registering or creating a GST profile, you provide your legal business name, trade name, Goods and Services Tax Identification Number (GSTIN), registered office address, primary contact name, email address, mobile phone number, and state code.
E-Commerce Sales Reports & Financial Sheets
When you ingest sales files (e.g. Amazon Merchant Tax Reports / MTR, Flipkart GSTR Sales Reports, Meesho Sales & Return Reports, Myntra files), our parsers process order identifiers, invoice numbers, invoice dates, HSN/SAC codes, taxable amounts, IGST, CGST, SGST breakdown, customer destination states, shipping fees, and marketplace commission deduction entries.
Billing & Payment Transaction Records
When purchasing a subscription or one-time pass, payments are routed through PCI-DSS certified payment gateways (Cashfree and Razorpay). OkayGST collects and stores payment identifiers, order reference numbers, amount paid, and invoice timestamps. OkayGST does not store your raw credit/debit card numbers, CVVs, or Net Banking credentials.
Technical Telemetry & System Logs
IP address, device type, operating system, browser user-agent, session identifiers, timestamps of upload batches, quarantine resolution events, and diagnostic logs for troubleshooting parsing discrepancies.
04 How We Use Your Information
We process your data exclusively for lawful business and statutory purposes:
- Automated GSTR-1 Generation: Transforming marketplace sales, B2B credit notes, B2C small transactions, and HSN summaries into official GSTN portal-compatible JSON payloads.
- Section 52 TCS Reconciliation: Cross-verifying marketplace TCS reported by e-commerce operators against portal credits to prevent tax leakages.
- Quarantine Error Resolution: Flagging erroneous HSN codes, negative tax liabilities, or state code mismatches before government submission.
- Authentication & Security: Sending Dual OTPs (Email and WhatsApp) to verify mobile numbers and prevent unauthorized access.
- Statutory Invoicing: Generating official GST-compliant tax invoices for software licenses purchased by your entity.
- Customer Support: Responding to support desk tickets, portal parsing queries, and GST filing notices.
05 Data Sharing with Authorized Sub-Processors
We do not share your confidential sales or accounting data with any third parties except the following essential sub-processors under strict non-disclosure safeguards:
| Partner / Provider | Category | Purpose & Security Compliance |
|---|---|---|
| Cashfree Payments India Pvt. Ltd. | Payment Gateway | Processing UPI, Net Banking, and Card subscriptions under RBI & PCI-DSS Level 1 regulations. |
| Razorpay Software Pvt. Ltd. | Payment Gateway | Card processing, recurring billing subscriptions, and UPI intents under RBI guidelines. |
| Meta (WhatsApp Cloud API) | Transactional Communications | Delivering 2FA authentication OTPs and subscription billing notices to verified mobile numbers. |
| Hostinger SMTP | Transactional Email | Dispatching password recovery links, system notifications, and tax invoices over TLS encryption. |
Law Enforcement: We disclose customer information only when strictly mandated by a valid judicial court order, statutory subpoena, or government authority operating within the jurisdiction of Indian law.
06 Security Architecture & Data Safeguards
We implement comprehensive technical and administrative security measures:
- Encryption in Transit: All HTTP traffic is enforced over TLS 1.3 / SSL with strong cipher suites.
- Encryption at Rest: Database storage and sensitive authentication credentials are encrypted using industry-standard hashing algorithms (Bcrypt).
- Isolation of Tenant Data: Client files and GSTIN profiles are segregated to guarantee that one taxpayer cannot access another seller’s return data.
- Automated Batch Cleanup: Temporary raw CSV and Excel work files uploaded during batch execution can be cleared upon transaction ledger generation.
07 Data Retention & User Rights
Under Indian statutory norms and our data governance principles, you retain full rights over your data:
- Right to Review & Edit: You may edit your GSTIN profiles, trade names, and contact details via your account dashboard.
- Right to Erasure & Account Deletion: You may request permanent deletion of your account and related filing logs by visiting Account Settings or emailing support@okaygst.com. Account deletion requests are processed within 14 business days, subject to statutory retention requirements under Indian Tax and Accounting regulations.
- Data Portability: You can export generated JSON returns, CSV reports, and tax liabilities at any time without fees.
08 Grievance Officer & Regulatory Redressal
In accordance with the Information Technology Act 2000, the SPDI Rules 2011, and the Consumer Protection (E-Commerce) Rules 2020, the designated Grievance Officer details for OkayGST are as follows:
Officer Name: Grievance & Compliance Officer
Designation: Data Protection & Regulatory Head
Entity: OkayGST
Physical Address: Shop No. 01, Gopal Nagar, Ring Road, Latur 413531, Maharashtra, India
Email Address: support@okaygst.com
Helpline: +91 76663 31549
Response Guarantee: Acknowledgement within 48 hours; resolution within 30 days of receiving valid grievance documentation.
