Privacy Policy

TaxNoop is a financial technology platform that provides AI-powered accounting, tax filing assistance, and expert accountant access to businesses and self-employed individuals. Our registered business address and company details are available upon request by contacting privacy@taxnoop.com. TaxNoop is the data controller responsible for your personal information collected through this platform.

We operate across multiple jurisdictions including Pakistan, China, Malaysia, Singapore, the United States, and Europe. This Privacy Policy applies to all users of our platform regardless of jurisdiction, with jurisdiction-specific rights and obligations described in Section 7 below.

Account Information: When you register, we collect your name, email address, business name, tax identification number or registration number (e.g., NTN/STRN, Unified Social Credit Code, SSM registration number, UEN, EIN, or VAT/company registration number), and contact details.

Financial Data: To provide our core services, we collect and process transaction records, invoices, expense receipts, bank statements you import or connect, payroll data, and any financial documents you upload to the platform. This data is used solely to generate your accounting records, prepare tax filings, and power AI CFO insights.

Usage Data: We automatically collect session information including IP address, browser type, device identifiers, pages visited, features used, and interaction timestamps. This helps us improve platform reliability and user experience.

Communications: Messages you exchange with expert accountants through the platform, your AI CFO chat history, and support correspondence are stored to enable continuity of service and to improve our AI models. You may request deletion of these records at any time.

We use your personal and financial data to deliver and operate the TaxNoop platform, including generating accounting records, preparing tax return drafts, producing invoices, and providing AI CFO analysis. Your data is processed to enable expert accountant review of your filings before submission to the relevant tax authority.

We may use anonymised and aggregated data to improve our AI models, train our CFO intelligence features, and enhance the accuracy of tax filing tools. This processing does not identify you personally. We will send you transactional communications (filing reminders, account alerts, expert messages), and where you have given consent, product updates and newsletters. You may unsubscribe from marketing communications at any time.

We do not sell your personal data to third parties. We do not use your financial data for advertising profiling. We do not share identifiable financial records with any tax authority except where you explicitly instruct us to file on your behalf or where we are legally compelled to do so.

Our processing is governed by Singapore's Personal Data Protection Act (PDPA) 2012, as amended in 2020 and 2021, which establishes obligations on organisations collecting, using, and disclosing personal data in Singapore. We comply with the MAS Technology Risk Management (TRM) Guidelines regarding the security of financial data and cyber risk management. TaxNoop maintains data protection policies and an appointed Data Protection Officer (DPO) accessible at privacy@taxnoop.com.

We collect, use, and disclose personal data only with your consent or where an exception under the PDPA applies, such as for business improvement purposes using anonymised data or to comply with legal requirements imposed by IRAS or other Singapore regulators. You have the right to withdraw consent at any time, subject to legal and contractual restrictions.

Expert Accountants: When you request an expert review, your financial documents and filing drafts are shared with verified chartered accountants, CPAs, or CA/ACCA professionals matched to your jurisdiction. These professionals are bound by professional confidentiality obligations and our data processing agreements.

Infrastructure Providers: We use Supabase (database and authentication), cloud hosting providers, and other infrastructure vendors to operate the platform. These providers process data on our behalf under data processing agreements that restrict their use of your data to service delivery only.

AI Processing: Your financial summaries and AI CFO chat messages are sent to third-party AI model providers to generate briefings and answer your questions: Anthropic (Claude models) for weekly CFO briefings, and OpenRouter, which routes interactive AI CFO chat requests to an underlying model provider, currently DeepSeek. We do not send full transaction-level detail or documents to these providers — only the aggregated financial summaries and chat messages needed to generate a response.

Payment Processors: Subscription payments are handled by third-party payment processors (such as Stripe). These processors are PCI-DSS compliant and receive only the data necessary to complete payment transactions. TaxNoop does not store full payment card details.

Legal Disclosures: We may disclose personal data to government authorities, tax bodies, or courts where required by applicable law, legal process, or to protect the rights and safety of TaxNoop, our users, or the public. We will notify you of such disclosures where legally permitted to do so.

We retain your account and financial data for as long as your subscription is active and for a period thereafter as required by applicable law. In most jurisdictions, tax records must be retained for a minimum of five to seven years (e.g., five years under PDPA/LHDN requirements in Malaysia, six years under HMRC rules in the UK, seven years under IRS guidance in the US, five years under PIPL-aligned best practice in China, and five years under FBR regulations in Pakistan).

If you close your account, we will delete or anonymise your personal data within 90 days, except where retention is required by applicable law or where we have a legitimate interest in retaining aggregated data for fraud prevention. AI CFO chat history is retained for 24 months by default; you may delete individual conversations at any time from within the platform.

Under Singapore's Personal Data Protection Act (PDPA) 2012 (amended 2020/2021), you have the right to: access the personal data we hold about you and information about how it has been used or disclosed in the past year; and request correction of personal data that is inaccurate, incomplete, misleading, or not up to date. Contact privacy@taxnoop.com to exercise these rights. You also have the right to lodge a complaint with the Personal Data Protection Commission (PDPC) of Singapore.

TaxNoop implements technical and organisational security measures designed to protect your personal and financial data against unauthorised access, loss, alteration, or disclosure. These measures include encryption of data in transit (TLS 1.2 or higher) and at rest (AES-256), role-based access controls, multi-factor authentication for platform access, regular penetration testing, and audit logging of access to sensitive financial records.

Expert accountants access your data through a permission-controlled environment and are prohibited from downloading or retaining your financial records outside the platform. While no system can guarantee absolute security, we are committed to industry-standard practices and will notify you of any data breach affecting your personal data in accordance with applicable legal requirements, including within 72 hours where required under the GDPR.

We use essential cookies to operate the platform, including session authentication cookies and security tokens. These cookies are strictly necessary and cannot be disabled without affecting functionality. We also use analytics cookies (with your consent where required) to understand how users navigate the platform, which pages are most visited, and where errors occur. We do not use advertising or cross-site tracking cookies.

You can manage your cookie preferences through the cookie settings panel available on the platform, or through your browser settings. Disabling essential cookies will prevent you from logging in. For users in the EEA and UK, we obtain consent for non-essential cookies in accordance with the ePrivacy Directive and applicable national law.

If you have questions, concerns, or requests relating to this Privacy Policy or our data practices, please contact our data protection team at privacy@taxnoop.com. We will respond within the timeframe required by the law applicable to your jurisdiction, and in any event within 30 days.

For users in the EEA or UK who believe we have not adequately addressed their data protection concerns, they have the right to lodge a complaint with their national data protection supervisory authority.