Privacy Policy

MyCAlive GST Portal Auto-Login — Chrome Extension

Effective date: 18 April 2026 · Last updated: 18 April 2026

1. Who we are

This extension is published by PUNE FINANCIAL SERVICES PRIVATE LIMITED, operator of MyCAlive (www.mycalive.com), a multi-tenant platform used by Chartered Accountants and GST professionals in India to manage returns, invoicing and client GSTIN operations.

2. What this extension does

The extension has a single purpose: when a MyCAlive user clicks "Open GST Portal" inside the MyCAlive web app, the extension receives the user's already-authenticated GST portal session cookies from the MyCAlive page (delivered by MyCAlive's server over HTTPS) and writes those cookies into a new gst.gov.in browser tab, so the user lands on the portal already logged in and does not have to re-enter the captcha.

3. What data the extension handles

The extension reads and writes ONLY the following, and only while fulfilling the flow above:

• GST portal session cookies (such as AuthToken) received from www.mycalive.com via window.postMessage. These are written into the .gst.gov.in cookie jar of the user's own browser and never sent to any other server.
• A one-time ready signal postMessage on www.mycalive.com pages so the web app knows the extension is installed.

We do NOT:

• Collect, store, sell or transfer any personal information.
• Track your browsing history or activity on any website.
• Run analytics, telemetry, ads, or third-party scripts.
• Send data to any server other than the two domains (mycalive.com and gst.gov.in) required to perform the login handoff.
• Access any website outside gst.gov.in and mycalive.com.

4. Permissions we request and why

• cookies — required to write the GST portal session cookie into the gst.gov.in tab.
• tabs — required to open/focus the GST Portal tab in which cookies are injected.
• scripting — required to set document.cookie inside the opened gst.gov.in tab.
• host_permissions for https://*.gst.gov.in/* — required for cookie injection into the GST Portal.
• host_permissions for https://*.mycalive.com/* — required to receive the cookie payload from the MyCAlive web app.

No other origins are granted any permission.

5. Who can trigger the extension

The extension only acts on postMessage requests whose sender.origin is https://www.mycalive.com or https://mycalive.com. Any message from any other origin is rejected.

6. Data retention

The extension does not retain any data. It has no local storage, no IndexedDB, no backend, and no cloud sync. Cookies written into the GST Portal tab are managed by Chrome's normal cookie store and expire per the portal's own policies — the extension neither reads them back nor persists them.

7. Third parties

The extension communicates with only two origins, both of which are operated or used directly by the end user:

• www.mycalive.com — your own MyCAlive account (the sender of the cookie payload).
• gst.gov.in — the Government of India GST Portal (the destination of the cookie payload).

No data is shared with any third party, advertiser, analytics vendor, or affiliate.

8. Security

All communication happens over HTTPS. The cookie payload never leaves the user's browser except in the normal Set-Cookie flow that the user's own browser would perform on gst.gov.in. The extension's background service worker explicitly verifies the sender's origin before acting on any message.

9. Children's privacy

The extension is intended for tax and accounting professionals. It is not directed at, and does not knowingly collect any data from, children under 13.

10. Changes to this policy

If we materially change the extension's behaviour, this page will be updated and the effective date at the top of this document will be revised. The extension version number will also be incremented.

11. The MyCAlive service itself

This page covers the Chrome extension only. The MyCAlive web and mobile application is a separate product with different data handling — it does store your records. See the MyCAlive Privacy Policy and Terms of Service for that.

12. Contact

Questions, concerns or data-removal requests:
PUNE FINANCIAL SERVICES PRIVATE LIMITED
Shop No. C3 304, 3rd Floor, Epic Co Op Hsg Society, Vagholi, Haveli, Pune 412207, Maharashtra, India
Email: support@mycalive.com · Phone: 8956977070

© 2026 PUNE FINANCIAL SERVICES PRIVATE LIMITED. Published alongside the MyCAlive GST Portal Auto-Login Chrome extension. See also our Privacy Policy, Terms and company details.