Last updated: 27 September 2026
This policy explains what information GSTRisk (gstrisk.com) collects, why, and the choices you have. GSTRisk is operated from Kolkata, West Bengal, India.
1. Information you give us
When you use our contact form we collect your name, email address and message. We use this only to reply to you and, if you ask for it, to give you access to features such as the supplier watchlist. We keep these messages for up to 24 months, or less if you ask us to delete them.
2. GSTINs you check
The GSTIN format checker and the bulk validator run entirely in your web browser. The GSTINs you type or paste there are not sent to us.
If you press Check live GST status, that single GSTIN is sent to our server, which fetches its public GST registration and return-filing details from third-party GST data providers. We reuse the result for up to 7 days so that repeat checks are instant, and delete stored results after 45 days. These are public business registration records; we do not link a lookup to your name or email.
To prevent abuse, we count live checks per day using a one-way code derived from your IP address. We do not store the IP address itself, and these daily counts are deleted after 90 days.
3. Supplier watchlist trial
If you join the supplier watchlist, we store your name, email address, optional company name and phone number, the supplier GSTINs you add, and the latest public registration and return-filing details we find for them. We use this only to run the watchlist: to email your report, status-change and filing alerts, and a few short tips during the trial. We never contact your suppliers or share your list. Every email has an unsubscribe link; unsubscribing stops all checks and emails immediately. To have your details deleted, email support@gstrisk.com and we will do so within 7 days.
3A. GSTRisk Pro purchases
When you buy GSTRisk Pro we keep your name, email, company, phone and GSTIN (if you give them), the plan, the amount and the UPI transaction reference (UTR) you enter. We use them to confirm your payment against our bank record, activate your plan, email your receipt and renewal reminders, and keep our accounts. You pay inside your own UPI app, so we never see or store your bank account, card or UPI PIN. Your personal Pro link works like a password for higher daily limits on this site; keep it private.
4. Information collected automatically
Like most websites, our hosting provider records basic technical information such as IP address, browser type and the pages requested, for security and to keep the site running. We use Google Search Console and may use Google Analytics to understand, in aggregate, how people find and use the site.
5. Cookies and advertising
We show ads through Google AdSense. Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this website or other websites. Google’s use of advertising cookies enables it and its partners to serve ads to you based on your visits to this and other sites on the internet.
You can opt out of personalised advertising by visiting Google Ads Settings, or opt out of some third-party vendors’ use of cookies at aboutads.info. You can also block or delete cookies in your browser settings. For more, see how Google uses information from sites that use its services.
6. Who we share information with
We do not sell your personal data. We share it only with service providers that help us run the site (such as our web host, email provider and Google), under their own privacy terms, or where the law requires it.
7. Your rights
Under India’s Digital Personal Data Protection Act, 2023 you can ask us to access, correct or erase the personal data we hold about you, withdraw consent you have given, and raise a grievance. Email support@gstrisk.com or use our contact form, and we will respond as soon as we can.
8. Security
The site is served over HTTPS. We limit access to stored messages to the people who need it to respond to you. No method of storage or transmission is completely secure, but we take reasonable steps to protect your information.
9. Children
GSTRisk is a business tool and is not intended for anyone under 18. We do not knowingly collect data from children.
10. Changes to this policy
We will update this page when our practices change, and change the date at the top.