Privacy Policy

1. Information We Collect

We only collect corporate data necessary to perform GST validation, automated invoice reconciliation, and tax preparation services:

• User credentials and account info (names, work emails, phone numbers).
• Financial transaction vouchers and sales/purchase registers sync'ed from Tally, Zoho, SAP, or spreadsheets.
• GSTIN registry information fetched directly from the GSTN Portal APIs under authorization.

2. How We Use Information

Your data is processed strictly to automate your tax workflows. We use it to:

• Run reconciliation checks, match invoices with GSTR-2B datasets, and identify eligible credits.
• Deliver automated notices and filing reminders via secure WhatsApp/Email loops.
• Provide conversational feedback through the AI-powered Copilot engine.

3. Data Security Standards

DerootGST employs bank-grade security setups to keep records isolated and guarded:

• All datasets are encrypted at rest using AES-256 standard and in transit using TLS 1.3.
• Strict multi-tenant security layers prevent cross-company data leakage.
• Continuous monitoring and audits are executed in compliance with ISO 27001 and SOC-2 guidelines.

4. Sharing and Disclosure

We do **not** sell, lease, or trade your corporate financial logs or account information to any marketing third parties. Data is only communicated to the official GST Network (GSTN) portal when you explicitly trigger GSTR return uploads.

5. Contact Support

If you have questions regarding our compliance safety protocols, database retention limits, or data deletion requests, email us at connect@derootgst.com.