Privacy Policy
Last updated: July 21, 2025
1. Introduction
At Taxo, we are committed to protecting your privacy and safeguarding your personal and financial data. This Privacy Policy explains how Taxo ("we", "us", or "our") collects, uses, and protects your information when you use our website (taxo.app), web dashboard, and WhatsApp-based bookkeeping services for Making Tax Digital (MTD) compliance in the UK.
2. Information We Collect
We collect the following types of information:
- Personal Information: Name, email address, phone number, and National Insurance Number (NINO) when you register or interact with our services.
- Financial Information: Transaction details, receipts, and tax-related data submitted via WhatsApp or our web dashboard to ensure MTD compliance.
- Usage Data: Information about how you use our website and services, such as IP address, browser type, and pages visited, collected via cookies (see our Cookie Policy).
- WhatsApp Data: Messages, images (e.g., receipts), and metadata from your interactions with our WhatsApp Business API.
3. How We Use Your Information
We use your information to:
- Provide and improve our bookkeeping and MTD compliance services.
- Process transactions and submit tax data to HMRC via APIs.
- Offer personalized tax insights using AI-driven analysis.
- Communicate with you, including responding to inquiries and sending service updates.
- Analyze usage to enhance our platform’s performance and user experience.
4. Legal Basis for Processing
We process your data under the following legal bases:
- Contract: To fulfill our services, such as processing financial data for MTD compliance.
- Legal Obligation: To comply with UK tax laws and HMRC requirements.
- Legitimate Interests: To improve our services and ensure platform security.
- Consent: For non-essential cookies and optional features, where applicable.
5. Sharing Your Information
We may share your information with:
- HMRC: To submit tax data as required by MTD regulations.
- Service Providers: Third parties (e.g., WhatsApp, cloud providers) that support our operations, bound by strict data protection agreements.
- Legal Authorities: If required by law or to protect our rights.
We do not sell your personal data.
6. Data Security
We use industry-standard encryption (e.g., TLS) and secure storage (e.g., PostgreSQL with encryption) to protect your data. However, no system is completely secure, and we encourage you to use strong passwords and secure devices.
7. Data Retention
We retain your data only as long as necessary to provide our services or comply with legal obligations (e.g., HMRC requires records for up to 6 years). You can request deletion of your data, subject to legal requirements.
8. Your Rights
Under GDPR and UK GDPR, you have the right to:
- Access, correct, or delete your personal data.
- Restrict or object to processing.
- Data portability.
- Withdraw consent for non-essential processing.
To exercise these rights, contact us at support@taxo.app.
9. International Data Transfers
As Taxo operates from Portugal and serves UK customers, data may be transferred between the EU and UK. We ensure compliance with GDPR and UK GDPR for such transfers.
10. Third-Party Services
Our services integrate with third parties like WhatsApp and Google Analytics, which have their own privacy policies. We recommend reviewing their policies for details.
11. Updates to This Policy
We may update this Privacy Policy to reflect changes in our practices or legal requirements. The latest version will be posted on this page with an updated effective date.
12. Contact Us
For questions or concerns about this Privacy Policy, please contact us at support@taxo.app.