Privacy Policy

1. Information We Collect

When you register for MakeGSTBill, we collect your name, email address, password hash, and company business profile (company name, GSTIN, business address, and banking details). During usage, we store invoice records, customer ledger entries, item names, HSN codes, and payment receipt logs solely to provide the invoicing service.

2. How Your Data Is Isolated & Protected

Your business data is guarded by double-layer isolation: NestJS application-level user scoping combined with PostgreSQL Row Level Security (RLS) policies. No user or tenant can query or view records belonging to another company. All data in transit is encrypted using TLS 1.3 with 256-bit SSL encryption.

3. Zero Data Monetization

We believe your commercial finances are strictly confidential. MakeGSTBill will never sell, lease, or distribute your customer list, pricing models, or invoice transaction history to advertisers, credit brokers, or third-party marketing companies.

4. Use of Cookies

We use essential session authentication cookies to keep you securely logged into your dashboard. We do not employ third-party tracking cookies across external websites.

5. Data Retention & Deletion Rights

Under India's Digital Personal Data Protection (DPDP) Act 2023, you have the right to access, correct, export, or permanently delete your account and all associated transaction records. Account deletion requests can be initiated at any time through our contact portal.

6. Contact the Data Protection Officer & Corporate Entity

MakeGSTBill is owned and operated by XSPACEWEB PRIVATE LIMITED (CIN: U62012JH2024PTC022737), Registered address: C/O- Khepa Kamar, Plot no. 766 & 767, New Colony Muraidih, Dhanbad, Jharkhand 828306, India. If you have questions regarding data security, encryption, or our privacy practices, contact our Data Protection desk at [email protected] or via our Contact Support page.