Who we are. GSTDesk is operated by Samsri Innovations, Hanamkonda, Telangana, India (the "Data Fiduciary" for account data; your firm is the fiduciary for its clients' data and we act as processor).
What we process. Account details (name, email, mobile), business and GST data you upload (GSTINs, invoices, returns, reconciliation data), and technical logs (IP address, device, audit trail of actions).
Why. To prepare, reconcile and track GST returns, send reminders and approvals, bill for the service, and keep the audit trail the law and good practice require.
Security. Passwords are hashed; PAN, portal usernames and gateway credentials are encrypted at rest; data is isolated per organisation; all return edits and filing actions are audit-logged.
Retention. Books and returns are retained for the period configured for your organisation (default 72 months from the annual return due date), after which you may request erasure.
Your rights. You may access, correct, export or request erasure of your data, withdraw consent, and nominate another person to exercise rights on your behalf. Write to the support address shown on your account page.
Version 2026-10. This is a working draft; have it reviewed by your counsel before public launch.
© 2026 Samsri Innovations