Privacy Policy

1. Introduction

Taxlog Technologies Limited ("we," "our," or "Taxlog") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use our transaction tracking and categorization platform.

Company Details:

• Name: Taxlog Technologies Limited
• Registration Number: RC 1234567
• Address: 45 Allen Avenue, Ikeja, Lagos, Nigeria
• Email: [email protected]
• Phone: +234 801 234 5678

2. Information We Collect

2.1 Personal Information

We collect the following personal information:

• Account Information: Name, email address, phone number, date of birth
• Business Information: Entity type, estimated transaction volume
• Address Information: Street address, city, state, postal code
• Authentication Data: Password (encrypted), login credentials

2.2 Identity Verification Data

2.3 Financial Transaction Data

We collect and process:

• Email Alerts: Forwarded bank alert emails containing transaction data
• Transaction Details: Date, amount, description, merchant/recipient, reference numbers
• Bank Information: Bank names extracted from emails (we do NOT store account numbers or passwords)
• Transaction Categories: AI-generated categories and user-modified categorizations

2.4 Automatically Collected Data

• Usage Data: Pages visited, features used, time spent on platform
• Device Information: Browser type, operating system, IP address
• Cookies: Session cookies, preference cookies, analytics cookies

3. How We Use Your Information

We use your data for the following purposes:

• Service Provision: Extract, categorize, and organize your transactions
• AI Processing: Train and improve our transaction categorization algorithms
• Tax Insights: Flag potentially tax-relevant transactions
• Reconciliation: Match transactions with uploaded bank statements
• Accountant Services: Share transaction data with assigned accountants (if opted in)
• Account Management: Maintain your account, process payments, provide support
• Communications: Send service updates, notifications, and marketing (opt-out available)
• Analytics: Analyze usage patterns to improve our service
• Compliance: Meet legal and regulatory obligations

4. Data Storage & Security

4.1 Where We Store Data

Your data is stored on secure cloud servers located in:

• Primary: Amazon Web Services (AWS) - EU region
• Backup: Google Cloud Platform - EU region

4.2 How Long We Keep Data

• Transaction Data: Retained for 7 years (Nigerian tax retention requirement)
• Account Information: Retained while account is active + 2 years after deletion
• Identity Documents: NOT stored (deleted immediately after verification)
• Email Alerts: Retained for 30 days, then deleted (only extracted data retained)
• Backup Data: Retained for 90 days in encrypted backups

4.3 Security Measures

We implement industry-standard security measures:

• Encryption: All data encrypted in transit (TLS 1.3) and at rest (AES-256)
• Access Controls: Role-based access, multi-factor authentication for staff
• Regular Audits: Quarterly security audits and penetration testing
• Monitoring: 24/7 intrusion detection and monitoring
• Data Minimization: We only collect data necessary for service provision

5. How We Share Your Information

We do NOT sell your personal data. We may share data with:

5.1 Service Providers

• Identity Verification: Third-party KYC/verification services
• Cloud Hosting: AWS, Google Cloud (infrastructure providers)
• Email Processing: Gmail API and email parsing services
• Payment Processing: Stripe (for subscription payments)
• Analytics: Google Analytics, PostHog (anonymized data only)

5.2 Accountants (Optional)

If you opt for accountant review services, we share your transaction data with your assigned accountant. Accountants are bound by confidentiality agreements and professional ethics codes.

5.3 Legal Requirements

We may disclose data when required by law, including:

• Court orders or legal processes
• Nigerian tax authority (FIRS) requests
• Law enforcement investigations
• Prevention of fraud or illegal activity

6. Your Rights

Under Nigerian data protection law (NDPR), you have the right to:

• Access: Request a copy of all personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your data (subject to legal retention requirements)
• Portability: Request your data in a machine-readable format
• Objection: Object to processing of your data for marketing purposes
• Withdrawal: Withdraw consent for data processing (may limit service availability)
• Complaint: Lodge a complaint with the Nigeria Data Protection Commission (NDPC)

To exercise these rights, contact us at [email protected]

7. Cookies & Tracking

We use the following types of cookies:

• Essential Cookies: Required for authentication and basic functionality (cannot be disabled)
• Preference Cookies: Remember your settings (e.g., theme, language)
• Analytics Cookies: Track usage patterns (Google Analytics, PostHog)
• Marketing Cookies: Track ad performance (opt-out available)

You can manage cookie preferences in your browser settings or through our cookie banner.

8. Third-Party Services

Our platform may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. Please review their privacy policies before providing any information.

9. Children's Privacy

Taxlog is not intended for use by individuals under 18 years of age. We do not knowingly collect data from children. If we become aware of such collection, we will promptly delete the data.

10. International Data Transfers

While we primarily serve Nigerian users, your data may be transferred to and processed in countries outside Nigeria (e.g., EU data centers). We ensure adequate safeguards are in place through:

• Standard Contractual Clauses (SCCs) with service providers
• Compliance with EU GDPR standards
• Encryption during transfer and storage

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be:

• Posted on this page with an updated "Last Updated" date
• Notified to users via email for material changes
• Effective 30 days after posting (unless otherwise stated)

12. Data Breach Notification

In the event of a data breach that may compromise your personal data, we will:

• Notify affected users within 72 hours of discovery
• Report to the Nigeria Data Protection Commission (NDPC)
• Provide details of the breach and mitigation steps
• Offer assistance and guidance to affected users

13. Contact Us

For questions, concerns, or requests regarding this Privacy Policy or your personal data:

14. Regulatory Authority

If you have concerns about our data protection practices, you may contact: