Privacy policy
This policy explains how Taxy handles information used to prepare and complete client-authorised tax filing work.
Effective: 2 August 2026 · Version 2.01. Public planning tools
The public assessment and filing-plan selection run in the browser. A selected plan may be retained in that browser long enough to carry it through sign-in, but it is not a filed return and does not give Taxy access to iTax.
2. Account and filing information
When you create an account or a filing job, Taxy may process your name, email, phone number, KRA PIN, encrypted iTax password, selected tax types, answers, uploaded records, order status and communications needed to provide the requested service.
3. Sensitive credentials
KRA PINs and iTax passwords are encrypted at rest. They are made available only to authorised staff after you place a filing order. Incomplete drafts are not available in the administrator work queue. Access to submitted sensitive details and documents is logged.
4. Documents and purpose
Documents are collected through specific filing requirements and used to prepare, review, submit and evidence the filing service you requested. Do not upload unrelated records. Taxy does not sell personal information.
5. Authentication and hosting
Firebase provides account authentication. Taxy’s private API, database and upload storage are hosted on Taxy-controlled VPS infrastructure. Service providers process information only for the functions they supply.
6. Retention and security
Information is retained only for active work, service records, legal obligations and legitimate dispute handling. Transport encryption, encrypted sensitive fields, restricted submitted-job access and private file storage reduce risk, but no online system is risk-free.
7. Your choices and rights
You may keep a job as a private draft, remove draft files, or choose not to place the order. You may request access, correction, deletion where applicable, or raise a privacy concern at [email protected]. Identity verification may be required.
Contact
Questions about this policy can be sent to [email protected].