Privacy Policy
Last updated: May 26, 2026
1. Introduction
This Privacy Policy explains how TaxAI (“we”, “our”, or “us”) collects, uses, discloses, and safeguards your personal information when you use our website, software, and services (collectively, the “Service”).
We are committed to protecting your privacy and handling your data in a transparent and secure manner. This policy covers data collected through:
Our website and web application
Our API services
Customer support communications
Payment processing (handled by Paddle.com as our Merchant of Record)
By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy.
2. Information We Collect
2.1 Information You Provide Directly
Account Information: Name, email address, password (hashed), and billing address when you create an account
Payment Information: Credit card details, PayPal information, and billing data. Note: We do not store your full payment card information. All payment processing is handled securely by Paddle.com, our Merchant of Record
Profile Information: Company name, job title, country of residence, investment preferences (optional)
Communications: Any information you provide when contacting our support team
User Content: Investment portfolios, tax calculations, reports, and data you upload or generate within the Service
2.2 Information Collected Automatically
Usage Data: Pages visited, features used, time spent on the Service, click patterns
Device Information: IP address, browser type, operating system, device identifiers
Cookies and Tracking Technologies: We use cookies and similar technologies to improve your experience (see Section 5)
2.3 Information from Third Parties
Payment confirmation data from Paddle (transaction status, masked card details, country)
Analytics data from our service providers (e.g., website analytics)
3. How We Use Your Information
We use your information for the following purposes:
We do not sell your personal information to third parties.
4. Data Sharing and Disclosure
We may share your information with the following categories of third parties:
4.1 Service Providers
Paddle.com — Payment processing, fraud detection, tax compliance (see: Paddle Privacy Policy)
Cloud hosting providers — For infrastructure and data storage
Analytics providers — For product usage and performance analysis
All service providers are contractually bound to protect your data and use it only for the purposes we specify.
4.2 Legal Requirements
We may disclose your information if required to do so by law or in response to valid legal requests (e.g., court orders, subpoenas, government investigations).
4.3 Business Transfers
In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you via email or a prominent notice on the Service of any change in ownership or use of your data.
5. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to enhance your experience. You can control cookie preferences through your browser settings.
6. Data Retention
We retain your personal information for as long as your account is active or as needed to provide you the Service. After account closure, we will retain:
Your data for 90 days (grace period for account reactivation)
Anonymized/aggregated data indefinitely (no personal identifiers)
Financial records as required by law (typically 5-7 years per local tax regulations)
Data necessary for legal compliance, dispute resolution, and enforcement of agreements
7. Data Security
We implement appropriate technical and organizational security measures to protect your data, including:
Encryption at rest and in transit (TLS 1.2+ for data in transit; AES-256 for data at rest)
Access controls — Role-based access to production data, with least-privilege principles
Regular security audits and vulnerability assessments
Secure development practices — Code reviews, dependency scanning, and penetration testing
While we strive to protect your data, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.
8. Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal data:
To exercise any of these rights, contact us at privacy@taxessight.com. We will respond within 30 days.
8.1 GDPR (EU/EEA Users)
If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR). Our legal basis for processing is primarily Article 6(1)(b) (contract performance) and 6(1)(f) (legitimate interests).
You also have the right to lodge a complaint with your local data protection supervisory authority.
8.2 California Residents (CCPA)
If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with rights regarding your personal information, including the right to know what personal information is collected, the right to request deletion, and the right to opt out of the sale of personal information. We do not sell your personal information.
9. International Data Transfers
As a global service, your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for international transfers:
Standard Contractual Clauses (SCCs) for transfers from the EEA to non-adequate countries
Data processing agreements with all service providers
Compliance with local data protection laws in all jurisdictions where we operate
10. Children’s Privacy
The Service is not intended for individuals under the age of 18 (or the age of majority in your jurisdiction). We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal data, we will take steps to delete it.
11. Third-Party Links
The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by:
Posting the updated policy on this page
Sending an email notification to the address associated with your account
Displaying a notice within the Service
Your continued use of the Service after the effective date of the changes constitutes your acceptance of the updated policy.
13. Contact Information
Data Controller: Individual Developer
Email: privacy@taxessight.com
Support: support@taxessight.com
Address: Room 101-0069, 1st Floor, Building 26, Yard No. 6, Hengye Eighth Street, Tongzhou District, Beijing, People's Republic of China