Privacy Policy

1. Information We Collect

Account information: When you create an account, we collect your name, email address, and password. If you sign in with Google, we receive your name and email from Google.

Financial data: When you upload bank statements (PDF, Excel, CSV), we extract transaction data including dates, amounts, narrations, and counterparty names. This data is used solely to classify your income and calculate your tax position under the Nigeria Tax Act 2025.

Tax profile: Your answers to tax-related questions (employment status, deductions, exemptions) are stored to compute your personal income tax return.

Device and usage data: We collect standard analytics data such as device type, operating system, IP address, browser type, pages visited, and session duration. This data is used to improve the Service and is not linked to your financial data.

Bank account details: If you register bank accounts for self-transfer detection, we store the bank name and last 4 digits of the account number. We never store full account numbers, PINs, passwords, or banking credentials.

2. How We Use Your Information

We use your information to provide the core features of Taxidy, which include classifying your income from bank statements, identifying eligible deductions and exemptions, computing your estimated tax liability under the Nigeria Tax Act 2025, and generating downloadable tax return documents.

We also use your information to communicate with you about your account, respond to support requests, send service-related notices, and improve the accuracy and reliability of our classification and calculation systems.

We do not sell your personal or financial data to third parties. We do not use your data for advertising or marketing purposes beyond Taxidy's own service communications.

3. Data Storage and Security

Your uploaded bank statements are stored in encrypted cloud storage (Cloudflare R2). Transaction data extracted from your statements is stored in a secured PostgreSQL database. All data is transmitted over HTTPS (TLS 1.2+).

We implement industry-standard security measures including encrypted storage, access controls, and secure authentication (JWT tokens with automatic expiration). However, no method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security.

Uploaded statement files are retained for processing purposes and may be deleted after extraction is complete. Your extracted transaction data and tax calculations are retained as long as your account is active.

4. Data Sharing

We do not share your personal or financial data with third parties except in the following limited circumstances.

Service providers: We use third-party infrastructure providers (Cloudflare, Railway, Vercel, Neon) to host and operate the Service. These providers process data on our behalf and are bound by their own privacy and security policies.

Legal requirements: We may disclose your information if required by law, regulation, legal process, or governmental request, including to comply with the Nigeria Data Protection Act 2023 (NDPA) or requests from the Federal Inland Revenue Service (FIRS).

With your consent: We may share your information with third parties when you have given us explicit consent to do so.

5. Your Rights Under the NDPA 2023

Under the Nigeria Data Protection Act 2023 and applicable data protection laws, you have the following rights.

Access: You may request a copy of the personal data we hold about you.

Correction: You may request that we correct any inaccurate or incomplete personal data.

Deletion: You may request that we delete your account and all associated data. You can initiate account deletion from the Settings page or by contacting us directly.

Data portability: You may request your data in a structured, machine-readable format.

Withdrawal of consent: You may withdraw your consent to data processing at any time by deleting your account.

To exercise any of these rights, contact us at privacy@taxidy.net.

6. Cookies and Tracking

Taxidy uses essential cookies for authentication (storing your session token). We do not use advertising cookies, third-party tracking pixels, or behavioural profiling technologies. We may use basic analytics to understand how users interact with the Service.

7. Children's Privacy

Taxidy is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child under 18, we will delete that information promptly.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of the Service after changes are posted constitutes your acceptance of the revised policy.

9. Contact Us

If you have questions about this Privacy Policy or your personal data, contact us at:

Taxidy
Email: privacy@taxidy.net
Website: taxidy.net