Privacy Policy
This policy explains what information is involved when you use GSTVibe, why it is needed and the choices available to you.
1. Who we are
GSTVibe is presented by GSTVibe. References to “we”, “us” or “our” in this policy refer to the website operator. This policy covers the GSTVibe interface and does not replace the policies of independent websites or data providers.
2. Information used for GSTIN searches
When you submit a GST number, our server checks a shared database of saved business records. Where a retrieval or refresh is needed and provider access is enabled, the GSTIN is sent to a third-party GST data provider. The response can include legal and trade names, business addresses, PAN, names associated with the registration, filing records and other taxpayer details.
We keep the latest successful response for reuse across searches, business pages, bulk lookups and invoice autofill. The displayed retrieval date identifies when we obtained the data; saved records are not live compliance verification. The search feature does not require an account or build a personal search-history account. A business record may include information relating to individuals; please use it responsibly.
3. Information you provide in enquiries
The contact form asks for a name, email address, topic and message. Company name, phone number and the relevant GSTIN are optional. These fields help identify the nature of an enquiry and provide context for a response.
Message delivery is currently disabled in this local version. Form entries remain in the current browser page and are not submitted to a support service or saved by this form. The page tells you whether a message has been delivered. Never include passwords, OTPs, payment credentials or identity documents in an enquiry.
4. Technical information and logs
Servers, the browser and external providers may process technical information needed to handle requests, diagnose errors and operate their services. This can include IP addresses, request times, browser information and requested URLs. A lookup URL can contain the GSTIN being searched.
Cache monitoring records operational counts and timings, not complete business responses. Where trusted-proxy client limiting is configured, short-lived hashed client identifiers help limit excessive requests. Provider and hosting logs have their own retention arrangements. The shared business-record database is separate from a personal search-history feature.
5. Purposes of processing
The current lookup flow uses the GSTIN to retrieve and display a record. Technical processing supports delivery of the site and identification of service errors. If contact-message delivery is enabled, enquiry details should be used to respond to the request and manage related correspondence.
Adding a different purpose, such as marketing communications, requires a clear explanation and any choices or permissions required by applicable law. Submitting an enquiry should not be treated as an automatic request for marketing messages.
6. Cookies and browser storage
The application does not currently include advertising trackers, site analytics or a saved-search feature. The contact form does not persist its fields in local storage. Browser settings, development tools and the hosting environment may use their own technical storage.
You can manage cookies and stored data through your browser. Blocking certain technical features may affect how some websites operate. If additional tracking tools are introduced, this policy and any relevant notice should reflect that change.
7. Third-party access
GSTIN requests requiring an enabled provider retrieval are passed to the third-party data provider because that provider supplies the lookup data. Requests served from saved records do not require a new provider call. This is separate from sending a contact message. Providers may process information on infrastructure outside your immediate location, subject to their service arrangements and applicable requirements.
Links to independent websites do not place those websites under our control. Read their privacy information before sharing personal details with them.
8. Retention and security
Saved business responses are reused for 30 days after retrieval. After that, the next lookup requests a fresh record from the source. If the source is unavailable, the saved record may still be shown with an older-snapshot warning. Only successful source responses are saved; no-record responses are not kept. Visits do not extend this period. Historical backups follow the operator’s separate backup retention schedule.
This local contact form stores no submitted messages. Technical logs and API-provider records have separate retention practices. No internet service can guarantee absolute security. Use a trusted device and avoid entering sensitive information that is unnecessary for a lookup or enquiry.
9. Your enquiries and choices
You may raise a concern about the use of your information, request clarification or ask about correction or deletion where applicable. We may need enough information to understand the request and verify authority to act, without asking for unnecessary sensitive details.
Corrections to official taxpayer records must be handled through the relevant authority or source. GSTVibe cannot change a government record simply by changing what appears on this site.
10. Children’s information
The site is designed for business and professional use and is not directed at children. Do not submit personal information about children through the contact form. If you believe such information has been provided, raise the issue through the privacy contact channel.
11. Policy updates and privacy contact
Changes to the service may require this policy to be updated. The date above identifies the current version. Check this page when new features or services are introduced.
Privacy contact: GSTVibe. Email: privacy@gstvibe.com. Correspondence address: Mumbai, Maharashtra, India. You can also visit Contact Us.
Business and contact details are fictional placeholders. Finalise this policy against actual operating practices before publication.