1 Overview
GSTR1 JSON to Excel Converter ("the Tool", "we", "our") is a client-side web application that converts
GST return JSON files into Excel spreadsheets. We are committed to protecting your privacy and handling
your data responsibly.
Key Commitment: Your GSTR1 JSON files — containing GSTINs, invoice details, and
tax amounts — are processed entirely within your web browser. This data is never
uploaded to, transmitted through, or stored on our servers.
2 Data Processing
We distinguish between data that stays local on your device and data that is transmitted to our backend
services:
- Local Processing (Client-Side): All JSON file reading, parsing, Excel workbook
generation, and file downloads happen entirely within your browser using JavaScript (SheetJS
library). Your financial data never leaves your computer.
- Authentication Data: When you sign in via Google, we receive and store your email
address, display name, and profile picture URL in Google Firebase Firestore to manage your account.
- Usage Statistics: We track the count of files you convert (weekly, monthly, yearly,
and total) to enforce usage limits. We never track or store the contents of your
JSON files.
3 Third-Party Services
We rely on the following third-party services to operate the Tool:
- Google Firebase Authentication: Handles secure Google Sign-In. Firebase's own
privacy policy applies to authentication data processing.
- Google Cloud Firestore: Stores user account information, usage counters,
premium status, and notification content.
- Firebase Hosting: Serves the static website files (HTML, CSS, JavaScript).
- SheetJS (xlsx.js) via cdnjs: A JavaScript library loaded from a CDN that executes
entirely in your browser to create Excel files. No data is sent to SheetJS servers.
- Google Fonts: We load the Inter typeface from Google Fonts, which may log
your IP address as per Google's privacy policy.
4 Cookies & Local Storage
The Tool uses browser storage mechanisms for functionality. We do not use tracking cookies ourselves,
though third-party services (AdSense, Firebase) may set their own cookies.
| Storage Key |
Type |
Purpose |
gstr1-theme |
localStorage |
Remembers your preferred theme (dark / light / system) |
dismissedNotifications |
sessionStorage |
Tracks which notifications you've seen in the current session |
| Firebase Auth tokens |
IndexedDB |
Maintains your signed-in session securely |
You can clear all locally stored data at any time through your browser's settings.
5 Data Retention
- JSON file data: Never stored. Files exist only in your browser's memory during
the conversion session and are discarded when you close or refresh the page.
6 Data Security
We implement multiple layers of security to protect your data:
- Client-side architecture: The core conversion logic runs entirely in your
browser, ensuring sensitive financial data never traverses the internet.
- Firebase Security Rules: Firestore access is governed by strict security rules
that ensure users can only read and modify their own data.
- Input validation: All uploaded files are validated against the GSTR1 JSON schema
before processing. File size and count limits prevent abuse.
- XSS prevention: User-facing strings are HTML-escaped to prevent cross-site
scripting attacks.
7 Your Rights
You have the following rights regarding your personal data:
- Access: You can view your usage statistics and account information directly
within the Tool when logged in.
- Deletion: You may request complete deletion of your account data by contacting
us at the email address below. We will process deletion requests within 30 days.
- Portability: Your converted Excel files are downloaded directly to your device
and are always under your control.
- Opt-out: You can use the Tool without signing in for basic functionality. Sign-in
is required only for tracking usage limits.
8 Children's Privacy
The Tool is designed for business and tax professionals. It is not intended for use by individuals
under the age of 18. We do not knowingly collect personal information from children. If we become
aware that a child has provided us with personal data, we will promptly delete such information.
9 Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be reflected by updating the
"Last updated" date at the top of this page. For significant changes, we will notify users through
the in-app notification system. We encourage you to review this policy periodically.
10 Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal
data, please contact us:
