This policy explains what GST Search (gstsearch.net) collects, why, and the choices you have. It is written to be read, not skimmed past. Last updated: August 2026.
What we collect when you search
When you look up a GSTIN, PAN or business name, we process the query you typed in order to answer it. Queries and results relating to business registrations may be cached on our servers so that repeat searches are fast and inexpensive — this is registration data that is public by design under the GST system, sourced as described on our data sources page. We log lookup events with a truncated/hashed record of the requesting IP address for rate limiting and abuse prevention (for example, enforcing per-hour lookup limits). We do not build profiles of who searched for which business, and we do not sell search data to anyone.
What we collect about you
- Technical data: IP address, browser type and pages visited, used for security, rate limiting and aggregate analytics.
- Email: only if you write to us (for example at hello@gstsearch.net or for bulk verification early access). We use it to reply and, where you asked, to notify you — nothing else.
- Cookies: we use strictly necessary cookies for site function and, if analytics is enabled, a privacy-respecting analytics cookie to understand aggregate usage. We do not run advertising cookies or cross-site trackers.
Analytics
We measure page views and feature usage in aggregate (for example, how many calculator sessions happened) to improve the product. Analytics data is not used to identify individuals, and raw IP addresses are not retained in analytics records.
Your rights under the DPDP Act
We aim to operate consistently with India’s Digital Personal Data Protection Act, 2023. Where we process personal data — such as a proprietor’s name appearing within public GST registration records, or your contact email — you may request access, correction or erasure by writing to hello@gstsearch.net. For requests concerning cached GST registration data about your business, the dedicated process on our takedown page is the quickest route, including our timelines. If you are unsatisfied with our response, the Act provides for complaint to the Data Protection Board of India.
Retention and security
Cached registration records are retained per the refresh windows described on the data sources page; rate-limiting logs are kept only as long as needed for abuse prevention; correspondence is kept while relevant to the matter. Data is transmitted over HTTPS and access to systems is restricted to those who operate the service.
Third parties and changes
Lookup queries are forwarded to our authorised GST verification API providers solely to answer your search. We do not share your personal data with anyone else except where law requires. If this policy changes materially, we will update this page and the date above. Questions? See the contact page.