GST365Request a working session
Back to GST365

Legal · Effective 1 July 2026

Privacy Policy

This Privacy Policy explains how IDT LAWS PRACTICE LLP ("GST365", "we") collects, uses, discloses and protects personal data when you use our website and software. We act as a data fiduciary under the Digital Personal Data Protection Act, 2023 (DPDP Act) and follow the IT Act, 2000 and the SPDI Rules, 2011.

1. Data we collect

We collect only what we need to provide the service:

  • Account and contact data, name, work email, phone, organisation and GSTIN(s).
  • Matter material you choose to share, notices, annexures and related documents submitted for a diagnostic or working session.
  • Usage and device data, log data, IP address, browser type and cookies used to run and secure the site.

2. How we use it

We use personal data to deliver, maintain and improve the service, to generate consultancy outputs and drafts you request, to provide support, to comply with law, and to secure the platform. We process data on the lawful bases available under the DPDP Act, including your consent and the performance of our contract with you.

3. AI processing

Some features use AI models to prepare diagnostics and draft working papers. We do not sell your data, and material you share is not used to train third-party foundation models. Outputs are working papers and must be reviewed by you (or a qualified professional) before you rely on them.

4. Sharing & sub-processors

We share data only with sub-processors that host and secure the platform, and where required by law or with your instruction (for example, to connect to the GST system or your accounting tool). We require sub-processors to protect data to standards consistent with this policy.

5. Retention & security

We retain personal data for as long as your account is active or as needed to meet legal obligations, then delete or anonymise it. We apply reasonable technical and organisational security measures appropriate to the sensitivity of the data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

6. Your rights

Subject to law, you may request access to, correction of, or erasure of your personal data, withdraw consent, and nominate a representative. To exercise these rights, or to raise a grievance, contact our Grievance Officer (see the Grievance Redressal page).

7. Cookies

We use essential cookies to run the site and may use analytics cookies to understand usage. You can control cookies through your browser settings.

8. Contact

Questions about this policy can be sent to hello@gst365.in. We may update this policy from time to time; the effective date above reflects the latest version.

This document is maintained by IDT LAWS PRACTICE LLP and is provided for transparency; it does not itself constitute legal advice. For questions, write to hello@gst365.in.