Security
What we do to protect your work. We list only what GSTArk actually does today.
1. Sign-in required
You must sign in to open the app, your cases and your drafts. The public pages need no sign-in.
2. Your work is readable only by you
Access rules in the database let each user read only their own cases, drafts and uploads. Uploaded files are kept in private storage, where each user can reach only their own folder.
3. Encrypted in transit and at rest
Data travels between your browser, our servers and our providers over encrypted connections (TLS). Data at rest is encrypted by our hosting provider, Supabase.
4. Secret keys stay on the server
The keys for our database administration and for the AI providers are used only on our servers. They are never sent to your browser.
5. No trackers
GSTArk has no analytics or advertising trackers. See the Cookie Policy.
6. Report a problem
If you find a security problem, write to founder@gstark.ai.
GSTArk®, India · Udyam Registration No. UDYAM-UP-03-0163589 · GSTIN 09HYSPS7750A1ZQ · founder@gstark.ai