Privacy Policy

Last updated: 28 June 2026

This Privacy Policy explains how The Vintage Artefacts (“we”, “us”, “gstsecure.in”) collects, uses, stores and protects your information when you use the gstsecure.in website and service. By using the service you agree to this Policy.

1. Information we collect

• Account information — your mobile phone number, used to create your account and log in via one-time password (OTP).
• Business data you upload — your GSTIN and the marketplace sales/return reports you provide (for example Amazon MTR, Flipkart Sales Report, Meesho tax reports), and the GSTR-1 files we generate from them.
• Payment information — payments are processed by our payment partner (PhonePe). We receive only a confirmation and a transaction reference. We do not collect or store your card, UPI PIN, or bank credentials.
• Technical data — basic logs such as IP address, browser type and timestamps, used for security and to keep the service running.

2. How we use your information

• To generate your GSTR-1 return files from the reports you upload.
• To create and secure your account, track your credits, and show your past returns.
• To process payments and confirm credits.
• To provide customer support and respond to your requests.
• To meet legal, tax and regulatory obligations.

3. How we store and protect your data

Your data is stored on secured cloud servers with access restricted to authorised personnel. We retain your account data and generated returns for as long as your account is active and as required by applicable tax and accounting laws. You may request deletion of your account and data at any time by emailing us (subject to records we are legally required to keep).

4. How we share your information

We do not sell your data, and we never share your sales data with third parties for advertising. We share information only with:

• Payment partner — PhonePe, to process your payment.
• SMS provider — to deliver your login OTP.
• Hosting provider — to run the service securely.
• Authorities — when required by law, court order, or to prevent fraud.

5. Cookies

We use a single essential session cookie to keep you logged in after you enter your OTP. We do not use third-party advertising or tracking cookies. You can clear cookies anytime in your browser settings; doing so will log you out.

6. Your rights

You may request access to, correction of, or deletion of your personal data by contacting us at the email below. We will respond within a reasonable time.

7. Children

The service is intended for registered businesses and is not directed at anyone under 18.

8. Changes to this Policy

We may update this Policy from time to time. The latest version will always be available on this page with a revised “Last updated” date.

9. Contact us

The Vintage Artefacts · Email: thevintageartefacts@gmail.com · Phone: [+91-XXXXXXXXXX]
Address: [Street, City], Uttar Pradesh, India · GSTIN: 09BYVPA1960K1ZY