Taxpert GST Login

Purpose

Taxpert GST Login opens the official GST portal after an authorized Taxpert PMS member starts a GST login action. It fills the selected client's saved GST username and password. The member completes CAPTCHA, OTP, and submission.

Information handled

The extension temporarily handles:

• a short-lived, one-time handoff token created by Taxpert PMS;
• the Taxpert PMS service address;
• the GST portal login address; and
• the selected client's GST username and password.

The extension receives this information from Taxpert PMS only after an authorized member starts the login action.

Before the first credential handoff in a browser, Taxpert PMS explains which authentication information will be retrieved, where it will be entered, and that the extension does not store or submit it. The member must explicitly agree. Taxpert PMS stores only the consent version in that browser, not credentials.

How the information is used

The extension sends the one-time token to Taxpert PMS to retrieve the selected GST credentials. It then opens https://services.gst.gov.in and fills the username and password fields. It does not solve CAPTCHA, enter OTPs, submit the login form, or file returns.

Storage and retention

The extension does not save credentials, handoff tokens, or PMS sessions in browser storage. It keeps them in memory only while completing the requested action. Taxpert PMS stores saved credentials in encrypted form until an authorized firm member updates or removes them.

Taxpert PMS keeps a security record when a handoff is created or redeemed. That record contains account and client identifiers, timestamps, the extension version, and the outcome. It stores a hash of the one-time token, not the token or password in plain text.

Sharing and transfers

The extension communicates only with Taxpert PMS and the official GST portal for the action the member requested. It does not sell personal information, show advertising, use analytics, or transfer information for credit decisions or unrelated purposes.

Security

The published extension restricts network and page access to https://pms.taxpert.cloud and https://services.gst.gov.in. All executable code is included in the extension package. The extension does not download or run remote code.

Your choices

Authorized firm members can update or remove saved credentials in Taxpert PMS. A member can stop using the extension by disabling or uninstalling it in the browser.

Contact

Publisher: Tanmay Mody. For privacy questions or requests, email tanmay.mody@rpmodyco.com.