GST Compliance Copilot AI ("we", "us", or "our") is committed to protecting the privacy and security of your data. This Privacy Policy describes how we collect, use, and safeguard the information you provide while using our Service.

1. Information We Collect

We collect information necessary to perform automated GST reconciliations and manage your account:

Account Credentials: Name, email address, password hashes, and company/firm information.
Reconciliation Data: Uploaded invoice registers, GSTR-2B datasets, and taxpayer matching inputs.
Usage Analytics: System metrics, performance indicators, and transaction feedback ratings.

2. Data Security & Tenant Isolation

Security is core to our architecture. We implement strict tenant isolation, ensuring that database records, invoices, and matching reports belonging to one Chartered Accountant (CA) firm or SME cannot be viewed or accessed by any other organization. All data transfers are encrypted via TLS/SSL, and stored data is encrypted at rest.

3. Data Retention & Purging Policies

Reconciliation files and invoice registers uploaded to the platform are stored temporarily in isolated cloud storage buckets and are processed within our secure runtime memory. We offer explicit data purging mechanisms, allowing you to delete uploaded runs, working papers, and reports directly from your dashboard at any time.

4. Privacy Advisory and Sanitized Data

Advisory: We advise users to only upload standard reconciliation reports and sanitized data. Please avoid including highly sensitive confidential personal records beyond standard business invoice logs (GSTIN, vendor name, invoice number, tax amounts).

5. Payment and Gateway Data

All payment details, card information, and billing cycles are processed securely via our partner payment gateway, Razorpay. We do not store credit card credentials or sensitive payment details directly on our servers.

6. Third-Party Integrations

We use Sentry for error tracking and telemetry to ensure high platform uptime. The Sentry integrations are configured to automatically mask credentials, authorization cookies, and redact Indian GSTIN sequences from logging targets.

7. Updates to this Policy

We may update this Privacy Policy from time to time to reflect operational or regulatory changes. We encourage you to review this page periodically for updates.

8. Support Contacts

For data erasure requests or security audits, contact our Privacy Officer at privacy@aiwillsolveit.com.