Privacy Policy

1. Information We Collect

TaxDesk collects information necessary to provide our Canadian tax compliance services. This includes:

• Account information (name, email address, and authentication details)
• Business information you enter (company names, addresses, CRA business numbers)
• Tax records and documents you upload for compliance tracking
• Payment and billing information, processed by our payment provider
• Usage data and analytics, collected via cookies and similar technologies

2. How We Use Your Information

We use your information to:

• Provide the service: tracking entities, filing obligations, documents, and tax attributes
• Process documents you upload with AI-assisted classification and extraction
• Provide customer support, account management, and billing
• Send service and product emails
• Understand usage and improve our software and services

3. Data Protection & Security

TaxDesk implements industry-standard security measures:

• All data is encrypted in transit and at rest
• Multi-factor authentication available on all accounts
• Organization-level isolation and role-based access control

4. Service Providers

TaxDesk does not sell or rent your information. We rely on third-party service providers to operate the service, and they process data on our behalf:

• Hosting and document storage (Cloudflare)
• Database hosting (Neon)
• Authentication (Clerk)
• Payment processing (Stripe)
• Email delivery (Loops)
• Product analytics (PostHog, Google Analytics)
• AI document processing (Cloudflare AI, OpenRouter, Google AI)

These providers may store or process data outside Canada, including in the United States. We may also disclose information as required by Canadian law or legal process, or with your consent.

5. AI Features and Connected Assistants

When you use TaxDesk Intelligence, the content of documents you upload is sent to the AI processing providers listed above for classification and extraction. If you connect an external AI assistant to your workspace (for example, Claude via the TaxDesk MCP connector), that assistant accesses workspace data under your account and permissions, and its use of that data is governed by the assistant provider's own terms.

6. Data Retention

We retain your workspace data while your account is active. After cancellation, you can request an export of your data for a reasonable period, and you can request deletion of your information at any time, subject to legal record-keeping requirements.

7. Your Rights

Under Canadian privacy law, you have the right to:

• Access your personal information
• Request corrections to inaccurate information
• Request deletion of your information (subject to legal requirements)
• Withdraw consent where applicable
• File a complaint with the Privacy Commissioner of Canada

8. Contact Us

For privacy-related questions or to exercise your rights, contact us: