TaxTrack SA

Privacy Policy

Last updated: 17 January 2026

Your privacy is important to us. This policy explains how we collect, use, and protect your personal information in compliance with the Protection of Personal Information Act (POPIA).

1. Information Operator

TaxTrack SA is the responsible party for processing your personal information.

Company: TaxTrack SA (Pty) Ltd

Registration: 2024/123456/07

Email: privacy@taxtrack.co.za

Address: Johannesburg, South Africa

2. Information We Collect

We collect the following categories of personal information:

Account Information

Email address
Name
Profile picture (optional)
Authentication credentials (managed by Clerk)

Tax Documents & Financial Data

Uploaded tax documents (IRP5s, receipts, invoices)
Document metadata (dates, amounts, categories)
Income and expense information
Tax year information

Usage Information

Device and browser information
IP address
App usage patterns
Preferences (theme, settings)

3. Purpose of Processing

We process your personal information for the following purposes:

Service Delivery: To provide tax document management and analytics services
Account Management: To create and manage your user account
Communication: To send important service updates and notifications
Improvement: To improve our services based on usage patterns
Legal Compliance: To comply with applicable laws and regulations
Marketing: To send promotional communications (only with your consent)

4. Lawful Basis for Processing

Under POPIA, we process your information based on:

Consent: You provide explicit consent when creating an account and using our services
Contract: Processing is necessary to fulfill our service agreement with you
Legal Obligation: Processing may be required to comply with South African law
Legitimate Interest: Processing is necessary for improving our services and preventing fraud

5. Third-Party Sharing

We share your information with the following categories of third parties:

Service Providers

Clerk: Authentication and user management
Cloud Storage: Secure document storage
Payment Processors: Subscription billing (for Pro users)

Note: We do not sell your personal information to third parties. We only share data with service providers who are contractually bound to protect your information.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information:

Encryption of data in transit (TLS/SSL)
Encryption of stored documents
Regular security audits and updates
Access controls and authentication
Secure cloud infrastructure

7. Data Retention

We retain your personal information for the following periods:

Account Data: Until you delete your account
Tax Documents: Until you delete them, or 7 years after account deletion (for tax compliance)
Usage Data: 2 years from collection
Communication Records: 3 years from the last interaction

After these periods, your data will be securely deleted or anonymized.

8. Your Rights Under POPIA

As a data subject, you have the following rights:

Right to Access

Request a copy of your personal information

Right to Correction

Request correction of inaccurate information

Right to Erasure

Request deletion of your personal information

Right to Object

Object to processing for direct marketing

Right to Data Portability

Receive your data in a portable format

Right to Withdraw Consent

Withdraw consent at any time

To exercise these rights, visit your Settings page or contact us at privacy@taxtrack.co.za.

9. Contact Us

For any privacy-related queries or to exercise your rights, contact us:

Privacy Officer: privacy@taxtrack.co.za

General Enquiries: support@taxtrack.co.za

Response Time: Within 30 days (as required by POPIA)

If you are not satisfied with our response, you may lodge a complaint with the Information Regulator at inforegulator.org.za.

10. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes by:

Posting a notice on our website
Sending an email to registered users
Updating the "Last updated" date at the top of this policy