Privacy policy
What we collect to file your GST, where it is kept, and who can see it. Last updated 17 October 2026.
This policy covers the website merc.in and the Merc GST filing service. Merc is run by Brightlane Solutions Private Limited, Jhunjhunu, Rajasthan 333001, India ("Merc", "we"). It is written to meet the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000.
What we collect
- From the call request form: your name, mobile number, firm name, city and any note you write.
- From clients: business name, GSTIN, owner name, mobile and email, and the bills, credit and debit notes, GSTR-2B and returns you or we upload each month.
- Automatically: your IP address and browser type in our security logs, used to stop abuse.
Why we use it
- To prepare and file your GST returns and work out the tax to pay.
- To send you reminders and filing updates on WhatsApp, SMS or email.
- To call you back when you ask for a call.
- To keep the service secure and meet our legal duties.
We do not sell your data, and we do not use it for advertising.
Where it is kept
On our hosting server, in a folder outside the public website. Bill files can be opened only by Merc staff after sign-in, and by you through your private link and PIN. Website traffic passes through Cloudflare for security.
Who it is shared with
- The GST portal, when we file returns for you.
- An AI service that reads bill photos and PDFs and turns them into data. It receives the bill image only, for that purpose.
- Our hosting, security and email providers, only as needed to run the service.
- Government authorities, when the law requires it.
How long we keep it
While you are a client, and afterwards for as long as GST law requires business records to be kept (generally 72 months from the due date of the annual return). Call requests that do not become clients are deleted within 12 months.
Your rights
You can ask for a copy of your data, ask us to correct it, or ask us to delete it once the legal retention period allows. You can withdraw consent for reminders at any time. Write to [email protected].
Cookies
One session cookie keeps you signed in and protects forms. We use no advertising or tracking cookies.
Grievance officer
Questions or complaints about your data: [email protected], or contact us. We reply within 7 days.