Privacy Policy

Last updated: May 17, 2026

1. Introduction

TaxBox ("we", "our", "us") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you use our web application at thetaxbox.ai.

2. Data We Collect

We collect the following types of data:

  • •Account information — name, email address, organization name
  • •Financial documents — receipts, invoices, and their extracted data (amounts, vendors, dates)
  • •Usage data — pages visited, features used, timestamps
  • •Payment data — processed securely via Stripe; we never store card numbers

3. How We Use Your Data

  • •To provide and operate our expense tracking service
  • •To extract data from documents using AI (Claude by Anthropic)
  • •To generate reports and analytics for your business
  • •To send transactional emails and important notifications
  • •To improve our product based on aggregated, anonymized usage patterns

4. Data Storage & Security

Your data is stored on servers located in the EU (Supabase infrastructure). All data is encrypted in transit (TLS 1.3) and at rest. Document files are stored in secure, private Supabase Storage buckets with row-level security policies.

5. Third-Party Services

We use the following sub-processors:

  • •Supabase — database, authentication, file storage (EU region)
  • •Vercel — hosting and serverless functions
  • •Stripe — payment processing
  • •Anthropic (Claude) — AI document extraction (data sent is not used for training)

6. Your Rights

Under applicable privacy laws, you have the right to:

  • •Access all personal data we hold about you
  • •Request correction of inaccurate data
  • •Request deletion of your data and account
  • •Export your data in a machine-readable format
  • •Withdraw consent for data processing at any time

7. Data Retention

We retain your data for as long as your account is active. Upon account deletion, all personal data and uploaded documents are permanently removed within 30 days. Anonymized, aggregated analytics may be retained indefinitely.

8. Cookies

TaxBox uses only essential cookies required for authentication and session management. We do not use advertising or tracking cookies.

9. Contact

For any privacy-related questions, please contact us at privacy@thetaxbox.ai