LegalPrivacy policy
What we collect, why, and the choices you have.
Last updated: 05 October 2026
1. Who is responsible
Gscore LLP, Kodambakkam, Chennai - 600024, operates MSMEChecker and is responsible for your personal data under the Digital Personal Data Protection Act, 2023 and other applicable Indian law.
2. What we collect
- Account details — name, e-mail, password (stored only as a secure hash) or your Google sign-in identifier and profile picture, mobile number, company name, GSTIN and address.
- Searches — the PANs you search or upload, the results returned, and the charges for each.
- Payments — amount, GST, receipt number and Razorpay payment reference. Card, UPI and bank details are handled by Razorpay; we never see or store them.
- Technical data — IP address, sign-in times and a session cookie that keeps you signed in. We do not use advertising cookies.
3. Why we use it
- To run your account, perform your searches and show your history and reports.
- To take payments, keep your wallet and issue receipts.
- To verify your e-mail and mobile, keep the account secure and prevent misuse.
- To send you service messages such as confirmation links, OTPs and password alerts.
- To meet legal, tax and accounting obligations.
4. Who we share it with
Only with service providers who help us run MSMEChecker, and only what they need: our authorised registry data provider (the PANs you search), Razorpay (payments), Zoho ZeptoMail (e-mail), Fast2SMS (OTP messages) and Google (if you sign in with Google). We do not sell your data. We may disclose information when required by law.
5. How long we keep it
- Your search history and consumption report are shown for the last 6 months; bulk result files can be downloaded for 3 days.
- Payment and receipt records are kept for as long as tax and accounting laws require (currently up to 8 years).
- Other account data is kept while your account is active and deleted or anonymised on a valid request, unless the law requires us to keep it.
6. Security
Connections use HTTPS, passwords are hashed, one-time links and OTPs expire quickly, and access to our systems is restricted and logged. No system is perfectly secure, but we work to protect your data and will inform you of any breach as the law requires.
7. Your rights
You can see and correct your details in Profile at any time. You may also ask us to give you a summary of your data, correct it, or erase it (subject to legal retention), and you may withdraw consent for optional uses. Write to the grievance officer below.
8. Grievance officer
Grievance Officer, Gscore LLP — info@msmechecker.com. We acknowledge within 3 working days and resolve within 30 days.
9. Changes
We will post any change to this policy on this page with a new date, and tell you by e-mail if the change is significant.