Privacy Policy — GST Officers Chrome Extension

Last Updated: September 2026

1. Overview

This Privacy Policy describes how the "GST Officers" Chrome Extension ("the Extension") collects, uses, stores, and shares data. The Extension is designed exclusively for government officials (GST officers) to assist with official duties such as scrutiny, analysis, notice generation, and case management.

Before the Extension collects, accesses, or transmits information described in this policy, you are provided with the applicable notice and, where required, asked to provide consent through the Extension or Chrome. You may decline optional data collection or processing where the Extension provides that choice. By continuing to use features that require data access, you consent to the practices described in this policy.

2. Data We Collect

A. Account & Authentication Data

When you register or log in, we collect:

Email address
Password (transmitted securely over HTTPS)
Name
Phone number

This data is sent to and stored on our servers at taxhindi.com for authentication and subscription management purposes only.

B. GST Portal Data (Stored Locally on Your Device)

This data is fetched by you from the GST portal using your own authenticated session and is stored only in your browser's local database (IndexedDB). We do not have access to this data.

The Extension fetches and stores the following data locally on your device from the GST portal:

Taxpayer Profiles: Legal name, trade name, email, mobile, address, GPS coordinates, registration date, status, jurisdiction details
GSTR-1: Monthly outward supply summaries
GSTR-3B: Monthly return data (supplies, ITC, tax payable, tax paid)
GSTR-9: Annual return data
GSTR-9C: Reconciliation statements
GSTR-2A / GSTR-2B: Supplier-wise B2B invoices, amendments, credit/debit notes, import goods, ISD, TDS data
GSTR-4 / GSTR-4A: Composition taxpayer returns and ITC
Cash & ITC Ledger: Balances and transaction histories
Liability & Demands: Demand IDs, amounts, recovery details
Recovery Cases: Case lifecycle data, DRC-13 bank attachment details
Scrutiny & Adjudication: Case details, folder contents, recommendations
Notice History: Notices issued per GSTIN
DCR: Demand Collection Register records

C. Geocoding Data

To display taxpayer locations on the map, the Extension sends taxpayer addresses to a third-party geocoding service (see Section 4). The geocoded coordinates (latitude/longitude) are stored locally on your device.

D. Local Preferences

The Extension stores the following preferences locally in your browser:

Currently selected GSTIN and financial year
UI theme preference
Office details (officer name, designation, office address)
Saved map areas

E. Chrome Browser & Active Tab Data

The Extension requests and uses Chrome's activeTab permission. This permission allows the Extension to access information from the currently active browser tab when the user invokes an Extension feature that requires such access.

The Extension uses active-tab access only for its stated GST-related functionality, including interacting with GST portal pages and supporting return scrutiny, analysis, notice generation, and case management. The Extension does not use this permission to maintain a general browsing history, track users across unrelated websites, build browsing profiles, serve personalized advertisements, or sell browsing activity to third parties.

The Extension does not request Chrome's history permission and does not intentionally collect a user's general browsing history.

F. Host Permissions

The Extension requests access to specific websites through Chrome host permissions. These permissions are used only to provide the Extension's stated functionality and to communicate with the services required for that functionality.

GST Portal: boweb.internal.gst.gov.in and boreturns2.internal.gst.gov.in — used to access GST return data, taxpayer profiles, and case records through your authenticated GST portal session.
OpenStreetMap: *.tile.openstreetmap.org and nominatim.openstreetmap.org — used for map tiles and address geocoding.
Postal Pincode API: api.postalpincode.in — used to look up district and state information from Indian pincodes.
taxhindi.com: www.taxhindi.com — used for Extension services such as authentication and subscription management.

The Extension does not use host permissions to collect unrelated browsing activity, create browsing profiles, serve personalized advertising, or sell browsing data.

3. How We Use Your Data

Data Type	How It Is Used	Where It Is Stored
Account data (email, name, phone)	Authentication, subscription verification, account management	Our servers (taxhindi.com)
GST portal data	GST return scrutiny, analysis, notice generation, case management	Your browser only (IndexedDB)
Geocoding data (addresses → coordinates)	Displaying taxpayer locations on the map	Your browser only (IndexedDB)
Local preferences	Remembering your settings across sessions	Your browser only (chrome.storage.local)

4. Data Sharing & Third Parties

We share data with the following parties for the purposes described below:

Third Party	Data Shared	Purpose
taxhindi.com (Our servers)	Email, password, name, phone number	User authentication and subscription management
Government GST Portal `boweb.internal.gst.gov.in` `boreturns2.internal.gst.gov.in`	GSTIN numbers, search queries	Fetching return data, taxpayer profiles, and case records using your authenticated session
OpenStreetMap Nominatim `nominatim.openstreetmap.org`	Taxpayer addresses (street, city, district, state, pincode)	Converting addresses to GPS coordinates for map display
OpenStreetMap Tiles `*.tile.openstreetmap.org`	Map tile requests	Displaying map tiles
Postal Pincode API `api.postalpincode.in`	Indian postal codes (pincodes)	Looking up district and state from pincode

We do NOT:

Sell your data to any third party
Use analytics or tracking services (no Google Analytics, Facebook Pixel, etc.)
Use advertising or remarketing services
Share your GST portal data with any external server
Collect data for purposes other than those described in this policy

5. Google API & Chrome Web Store Limited Use Disclosure

The use of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements.

For information received from Google APIs or Chrome browser permissions, we certify the following:

Allowed Use: We use user data only to provide or improve the Extension's user-facing features and for the purposes disclosed in this Privacy Policy. We do not use the data for unrelated purposes.
Allowed Transfer: We do not transfer user data to third parties except where necessary to provide a user-facing feature, to comply with applicable law, or as otherwise permitted by the Chrome Web Store User Data Policy. Any permitted transfer is limited to the purpose for which the data was collected.
No Advertising: We do not use user data for serving personalized advertisements, behavioral advertising, remarketing, or other advertising purposes.
No Human Reading: We do not allow humans to read user data except where necessary to provide or improve a user-facing feature, to comply with applicable law, or where required for security purposes, and only subject to appropriate confidentiality and access controls.

We request only the permissions and data access necessary for the Extension's stated functionality. Data obtained through Chrome permissions is handled consistently with the disclosures elsewhere in this policy.

6. Data Storage & Security

Account Data

Stored securely on our servers at taxhindi.com
Passwords are transmitted over HTTPS
Authentication uses JWT (JSON Web Token) tokens
Token integrity is verified using HMAC-SHA256 signatures

GST Portal Data

Stored entirely in your browser's local IndexedDB database
Never transmitted to our servers or any third-party server
Protected by your browser's built-in security model
Accessible only to you on your device

Data Transmission

All communication with the GST portal uses your existing authenticated browser session
The Extension does not store or transmit GST portal login credentials
All external API calls use HTTPS encryption

7. Data Retention

Account data: Retained on our servers as long as your account is active
GST portal data: Stored in your browser until you clear your browser data or uninstall the Extension
No automatic deletion: GST portal data is not automatically deleted; you control its retention

Access Restriction:

The Extension is intended exclusively for authorized government GST officers and is designed to operate within the government office intranet environment. It is not intended for general public use.

8. Your Rights

Clear Local Data: You can clear all locally stored GST data at any time via Chrome Settings → Privacy and Security → Clear Browsing Data, or by uninstalling the Extension
Delete Account: You may request account deletion by contacting us at taxhindi.com
Update Account: You may update your name and phone number through the Extension's Setup page

9. Children's Privacy

The Extension is not directed at children under the age of 18. Given its intended use by government officers, it is not expected to be used by minors.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be reflected on this page with an updated "Last Updated" date. Continued use of the Extension after changes constitutes acceptance of the revised policy.

11. Contact

If you have any questions or concerns about this Privacy Policy, please contact us at taxhindi.com. contact mail rajesh4advocate@gmail.com