Privacy policy

• Account details: your name, email address and mobile number, as entered by you or by your accounting firm.
• Business records: GSTIN, business name and address, the bills, invoices, spreadsheets and photos you or your firm upload, and the returns prepared from them.
• App details: a push notification token for your phone, the app version and the device name, so we can send you notifications.
• Security and usage logs: sign-ins, IP address, browser or app version, and the actions taken on records (an audit trail).
• Messages you send us through the contact form.

• To read your bills, prepare returns, and let your firm check, approve and file them.
• To sign you in (codes by email or SMS) and keep your account secure.
• To send you reminders, questions from your firm and updates about your returns, by email and app notification.
• To keep records that GST law and audits require, and to investigate misuse.

We use service providers that process data only on our instructions:

• Cloud hosting, databases and file storage for the app.
• AI model providers that read the bills you upload so their details can be filled in. Bills are sent only to read them.
• Email and SMS providers that deliver sign-in codes and messages.
• Expo, Apple and Google, which deliver app notifications to your phone.
• A GST Suvidha Provider, when your firm connects to the GST portal with your consent (OTP) to fetch GSTR-2B or file returns.

We do not sell personal data and do not use it for advertising. The app has no advertising or tracking.

The GST RAJA Tally Bridge connects the GST RAJA web app in your browser to TallyPrime on the same computer. It works only on GST RAJA’s own web address and talks only to TallyPrime’s server on your computer (127.0.0.1 or localhost). It does not read other websites, your browsing history or anything else on your computer.

• It stores one setting in your browser: the port TallyPrime listens on.
• When you press Send to Tally, it passes the vouchers for your confirmed invoices to TallyPrime, and TallyPrime’s answers back to GST RAJA so it can show what was added.
• When you press Get from Tally, it reads the chosen month’s Day Book from TallyPrime, and GST RAJA uploads it like any file you upload.
• When you press Learn from my Tally, it reads up to 20 sales vouchers. GST RAJA keeps only the names of the fields Tally uses, not amounts or parties.
• Before reading or sending, it asks TallyPrime which companies are loaded, to check the right one is open. Only a company name you choose is saved, as your business’s Tally company.

The extension has no advertising, analytics or tracking, and sends nothing anywhere except between GST RAJA and TallyPrime on your computer.

Business records are kept while your accounting firm uses GST RAJA, and for as long as the law requires tax records to be kept (GST law requires accounts and records to be kept for 72 months after the due date of the annual return). Notification tokens are removed when you sign out or uninstall the app. Security logs are kept for a limited period.

• You can turn notifications off per type in the app (Settings), or for the whole app in your phone’s settings.
• You can delete your login from the app (Settings › Delete my login). This removes your name, email, mobile number, notifications and phones from your login. Your business’s records stay with your accounting firm, because the firm keeps them for GST law; ask your firm to remove them.
• You can ask us for a copy of your personal data, or to correct or erase it, through the contact page. We answer within 30 days. These rights include those under India’s Digital Personal Data Protection Act, 2023.

Data is encrypted in transit. Files are stored privately and shared only through short-lived links. Sign-in tokens on phones are kept in the phone’s secure storage. Access to each business is limited to the business and its accounting firm.

GST RAJA is for businesses and their accountants. It is not meant for children and we do not knowingly collect data about children.

We will post changes to this policy on this page and change the date above. For questions or requests, use the contact page.