Privacy Notice

• Account data — your name (if provided), email address and sign-in credentials, used to create and secure your account.
• Invoice and receipt data — the documents and details you upload or save (vendors, dates, line items, tax amounts, totals, client email addresses you enter), used to provide the scanning, tracking, budgeting and payment-link features.
• Usage and device data — IP address, device and browser type, and how you use the Service, used to keep the Service secure, prevent fraud, and improve the product.
• Support communications — messages you send us when asking for help, used to provide customer support.

Payment card details entered at checkout are collected and processed by Paddle.com as Merchant of Record; they are described in Paddle's own privacy policy and are not stored by us.

• Contract performance — to provide the Service: scanning invoices, extracting tax data, saving your records, and generating payment links.
• Legitimate interests — to secure the Service, prevent fraud and abuse, and improve features based on usage patterns.
• Consent — where we ask for it (for example, optional communications), and you may withdraw it at any time.
• Legal obligation — to keep records where law requires it and to respond to lawful requests from authorities.

We share personal data only with the following categories of recipients:

• Service providers (subprocessors) — hosting, database, authentication, AI text-extraction, analytics and support tooling providers that help us run the Service, bound by contract to process data only on our instructions.
• Paddle.com (Merchant of Record) — for the sale of the Service, subscription and payment management, tax compliance, and invoicing. Paddle handles payment processing and related customer service.
• Professional advisers — legal, accounting and insurance advisers, under confidentiality.
• Authorities — where disclosure is required by law or necessary to establish, exercise or defend legal claims.

We do not sell your personal data, and we do not share your data with your clients except through the payment links you choose to send them.

Your data may be processed outside of Canada and, for users in the UK or EEA, outside the UK/EEA. Where that happens, we rely on appropriate safeguards such as adequacy decisions or standard contractual clauses approved for transfers of personal data.

We keep account and invoice data for as long as your account is active, and thereafter only as long as needed for legitimate business purposes such as complying with tax and accounting record-keeping rules (commonly six to seven years for business records in Canada). When data is no longer needed, we delete it or anonymise it.

Depending on where you live, you have rights over your personal data, including the right to access it, correct it, delete it, restrict or object to its processing, request a portable copy, and withdraw consent. Users in the UK/EEA also have the right to complain to their supervisory authority. We respond to rights requests within one month. To make a request, email us at the address at the top of this notice.

We use appropriate technical and organisational measures to protect personal data, including encryption in transit and at rest, access controls, and separate access rules so your records are only visible to you.

TaxSnap uses only essential cookies and similar storage needed to keep you signed in and make the Service work. We do not use advertising or marketing cookies. You can manage or clear these through your browser settings, though clearing them will sign you out.

We may update this Privacy Notice from time to time. We will post the current version on this page with its last-updated date.