Privacy Policy

Effective: August 20, 2026 · Version 1.0

1. Information We Collect

When you use TAX AI, we collect: • Account Information: When you sign up via Google OAuth or email, we receive your name, email address, and profile picture from your Google account. • Usage Data: We may collect information about how you interact with the service, including prompts, chat history, file uploads (if any), and feature usage patterns. • Device Information: Basic device and browser information for service optimization. We do not collect sensitive personal data such as national identification numbers, financial account details, or health information unless voluntarily provided by you in your conversations.

2. Google Account Information

TAX AI uses Google OAuth for authentication. When you sign in with Google, we receive and store: • Your Google email address • Your name as shown on your Google account • Your profile picture (if available) We use this information solely to create and manage your TAX AI account. We do not access your Google Drive, Gmail, or other Google services beyond what is needed for authentication. Google's use of your information is governed by Google's Privacy Policy. We encourage you to review it.

3. Authentication Information

We use Supabase for authentication services. Your authentication data (email, password hash if applicable, OAuth tokens) is stored securely by Supabase and protected using industry-standard security measures. We do not store your OAuth tokens in plain text. Session management is handled by Supabase's authentication system.

4. How We Use Your Information

We use your information to: • Provide and maintain the TAX AI service • Authenticate your account and manage your session • Store your chat history and preferences • Improve and optimize the service • Respond to your inquiries and support requests • Send service-related notifications (with your consent where required) • Detect and prevent abuse or unauthorized access We do not sell, trade, or rent your personal information to third parties.

5. Data Storage

Your data is stored securely using Supabase (PostgreSQL) with Row Level Security (RLS) policies that ensure you can only access your own data. Chat messages, conversation history, and user preferences are stored in our database. AI responses are generated by third-party AI providers (such as DeepSeek or Anthropic) and are not permanently stored by TAX AI beyond your conversation history. All data is encrypted in transit (TLS/SSL) and at rest where supported by our infrastructure providers.

6. Third-Party Services

TAX AI uses the following third-party services: • Supabase: Authentication and database • DeepSeek: AI model for generating responses • Anthropic / BluePack / Olagon: Alternative AI model providers • Vercel: Hosting and serverless infrastructure • Tavily: Web search capabilities (when enabled) Each third-party service has its own privacy policy. We encourage you to review the privacy policies of these providers. We are not responsible for the data practices of third-party services once your data leaves our systems.

7. Cookies and Local Storage

TAX AI uses cookies and local storage for: • Authentication sessions: To keep you logged in • User preferences: To remember your settings • Functional purposes: To enable service features We do not use cookies for advertising or tracking purposes. You can manage or delete cookies through your browser settings, though this may affect service functionality.

8. Data Security

We take data security seriously and implement appropriate measures to protect your information, including: • Encryption in transit (TLS 1.2+) • Row Level Security (RLS) in our database • Secure authentication via Supabase • Regular security reviews and updates No system is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. You are responsible for keeping your account credentials safe.

9. Data Retention

We retain your data for as long as your account is active or as needed to provide services. • Chat history: Retained while your account is active. You may request deletion of specific conversations. • Account data: Retained until you delete your account or request deletion. • Consent records: Retained indefinitely for legal and compliance purposes. When you delete your account, we will remove your personal information within a reasonable timeframe, except where retention is required by law.

10. Your Rights

You have the right to: • Access your personal data • Correct inaccurate data • Delete your account and associated data • Export your chat history (via the application) • Withdraw consent where applicable • Object to certain processing activities To exercise these rights, use the account settings within TAX AI or contact us through the application. We will respond to your request within a reasonable timeframe.

11. Children's Privacy

TAX AI is not intended for users under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When significant changes are made, we will update the version number and effective date. We encourage you to review this policy periodically. Your continued use of TAX AI after changes constitutes acceptance of the updated policy.

13. Contact

If you have questions, concerns, or requests regarding this Privacy Policy, please contact us through the TAX AI application or at the support channels provided within the service.