Privacy Policy

Last updated: 28 June 2026

This Privacy Policy explains how The Vintage Artefacts (“we”, “us”, “gstsecure.in”) collects, uses, stores and protects your information when you use the gstsecure.in website and service. By using the service you agree to this Policy.

1. Information we collect

Account information — your mobile phone number, used to create your account and log in via one-time password (OTP).
Business data you upload — your GSTIN and the marketplace sales/return reports you provide (for example Amazon MTR, Flipkart Sales Report, Meesho tax reports), and the GSTR-1 files we generate from them.
Payment information — payments are processed by our payment partner (Razorpay). We receive only a confirmation and a transaction reference. We do not collect or store your card, UPI PIN, or bank credentials.
Technical data — basic logs such as IP address, browser type and timestamps, used for security and to keep the service running.
Visit statistics — we count page views to understand how the site is used. Your IP address is sent to a location provider (see below) to work out an approximate city and state only. We do not store your IP address with these statistics, we do not use tracking cookies, and the visitor identifier we count with is a one-way hash that changes every midnight, so visits cannot be linked to you or followed across days.

2. How we use your information

To generate your GSTR-1 return files from the reports you upload.
To create and secure your account, track your credits, and show your past returns.
To process payments and confirm credits.
To provide customer support and respond to your requests.
To meet legal, tax and regulatory obligations.

3. How we store and protect your data

Your data is stored on secured cloud servers with access restricted to authorised personnel. We retain your account data and generated returns for as long as your account is active and as required by applicable tax and accounting laws. You may request deletion of your account and data at any time by emailing us (subject to records we are legally required to keep).

4. How we share your information

We do not sell your data, and we never share your sales data with third parties for advertising. We share information only with:

Payment partner — Razorpay, to process your payment.
SMS provider — to deliver your login OTP.
YouTube — the walkthrough video on our home page does not load until you press play. Nothing is requested from YouTube before that: the still image you see first is served from our own site. When you do press play we use youtube-nocookie.com, YouTube’s no-cookie player.
Location provider — ipwho.is, which receives only your IP address in order to return an approximate city and state. It is sent nothing else about you — no name, phone number, GSTIN or sales data.
Hosting provider — to run the service securely.
Authorities — when required by law, court order, or to prevent fraud.

5. Cookies

We use a single essential session cookie to keep you logged in after you enter your OTP. We do not use third-party advertising or tracking cookies. You can clear cookies anytime in your browser settings; doing so will log you out.

6. Your rights

You may request access to, correction of, or deletion of your personal data by contacting us at the email below. We will respond within a reasonable time.

7. Children

The service is intended for registered businesses and is not directed at anyone under 18.

8. Changes to this Policy

We may update this Policy from time to time. The latest version will always be available on this page with a revised “Last updated” date.

9. Contact us

The Vintage Artefacts · Email: thevintageartefacts@gmail.com · Phone: +91 98113 01903
Address: [Street, City], Uttar Pradesh, India · GSTIN: 09BYVPA1960K1ZY