Your files stay in your browser
When you add an Excel, JSON, Meesho, Petpooja or GSTR-2B file to a tool, the file is read by JavaScript inside your own browser. It is not uploaded to our server. Bills, ledgers, JSON files and reports are also made inside your browser.
Payments
- Card, UPI and bank details go only to Razorpay.
- Prices are fixed on our server. After you pay, the server checks Razorpay's signature (HMAC-SHA256) and asks Razorpay to confirm the amount and status before the download starts.
- Payment keys are kept only on the server (Netlify environment variables), never in the page code.
Optional login and saved data
Login is by a one-time code sent to your email. If you save customers, items and bills to your account, they are locked in your browser with your own data password (PBKDF2 key, AES-256-GCM encryption) before they are stored. We cannot read them. Details are in the privacy policy.
Website security
- The whole website uses HTTPS.
- Payment and login endpoints are not indexed by search engines and accept only the requests our pages send.
- If website analytics are switched on, they record only page visits and tool events (for example “PDF downloaded”), never GSTINs, names, amounts or file contents.
Report a security problem
Email sjhalegalsansarandassociates@gmail.com. Please do not test on other people's data.
Last updated: 7 November 2026.