Privacy Policy

Last updated 20 October 2026 · under legal review

This policy explains what Cloud Bhutan Pvt Ltd collects when you use EasyGST, why, and what you can ask us to do with it.

What we collect

  • Account details: your name, email address and password (stored only as a hash).
  • Business details: business name, TPN, address, phone, bank account details you add for invoices.
  • Business records: invoices, customers and suppliers (including their TPNs and contact details), products, payments, expenses and the GST figures prepared from them.
  • Technical data: sign-in times, IP address and error reports, used to keep the service secure and working.

Why we use it

To run EasyGST for you: to store your records, produce invoices and reports, send the emails and messages you ask us to send, secure your account, and support you when you contact us. We do not sell your data or use your business records for advertising.

Who processes it for us

We use these service providers, who handle data only to provide their service to us:

  • Vercel: application hosting
  • Neon: database hosting and backups
  • Resend: sending email (invoices, sign-in links)
  • Twilio: sending SMS and WhatsApp messages you choose to send
  • Sentry: error monitoring
  • S3-compatible object storage: file attachments and logos

Your records are stored outside Bhutan, in Singapore (AWS ap-southeast-1). See Your data for hosting, backups and retention.

Your customers' and suppliers' details

When you record a customer or supplier, you decide what to enter and we process it on your behalf. Only your team's signed-in users can see it.

Access, correction and deletion

You can see and correct your records in the app and export them at any time from Settings → Data Export. To ask for a copy of what we hold about you, or for deletion, email hello@easygst.bt. Some records must be kept for the period the GST law requires even after you ask us to delete your account.

Retention

We keep business records for at least 5 years, as GST record-keeping requires, and delete them after that unless the law requires longer.

Changes

We will tell you about material changes to this policy by email or in the app.