Privacy Policy
Last Updated: October 13, 2025
At Tax Flow, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy outlines how we collect, use, and safeguard your data.
Information We Collect
We collect information that you provide directly to us when you create an account, use our services, or contact our support team. This may include:
Personal Information:
- Name and email address
- Authentication data (magic links, Google OAuth tokens)
Business Information:
- Shop/business names and Tax Identification Numbers (TIN)
- Tax classifications and rates
- Invoice files (images and PDFs)
- Supplier information and invoice data
- Tax calculation records
Payment Information:
- Package purchase details and payment amounts
- Payment slip images for verification
- Credit balance and usage history
Usage Data:
- How you use our services
- Invoice processing history and status
- Technical data (IP address, browser type, device information)
How We Use Your Information
We use the information we collect to:
- Provide and improve our tax management services
- Process invoices using AI technology
- Manage your credit balance and purchases
- Verify payment slips and process transactions
- Generate MIRA-compliant quarterly tax reports
- Store and organize your tax documentation
- Communicate with you about your account and services
- Provide customer support
Third-Party Services
We use trusted third-party services to provide our platform:
- AI Services: To extract data from your invoice images and PDFs
- Cloud Storage: To securely store your files with encryption
- Email Services: To send authentication links and notifications
- Analytics: To understand how our service is used and improve it
Your invoice data is shared with AI processing services only for the purpose of data extraction. We do not sell your business data to third parties.
Data Security
We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, loss, or damage, including:
- Encryption for data in transit and at rest
- Secure authentication methods
- Regular security updates
- Access controls and monitoring
However, no system is 100% secure, and we cannot guarantee absolute security.
Data Retention
- Active Accounts: Data is retained while your account is active
- Tax Records: Invoice and tax data retained for compliance with MIRA requirements (minimum 5 years recommended)
- Payment Records: Retained for 7 years for financial compliance
- Deleted Accounts: Data deleted 90 days after account closure (unless legally required to retain)
Your Rights
You have the right to:
- Access and download your personal and business data
- Correct inaccurate information through your account settings
- Request deletion of your account and data (subject to legal retention requirements)
- Opt-out of promotional emails (transactional emails will continue)
If you have any questions or requests regarding your data, please contact us at [email protected].
Cookies
We use essential cookies for authentication and security. We may also use analytics cookies to understand service usage and improve our platform. You can control cookies through your browser settings.
Children's Privacy
Tax Flow is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children.
International Data Transfers
If you access Tax Flow from outside the Maldives, your data may be transferred to and processed in the Maldives. By using the service, you consent to this transfer.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through the Service. Continued use after changes means you accept the updated policy.
Contact Us
For privacy-related questions or requests:
Email: [email protected]