Privacy Policy
1. Who We Are
TaxFin is operated by FinSmart Holdings (Pty) Ltd (Reg. 2026/469983/07), Republic of South Africa. For the purposes of the Protection of Personal Information Act 4 of 2013 (POPIA), FinSmart Holdings (Pty) Ltd is the responsible party for the personal information described below, as set out in our Terms of Use.
2. What We Collect
| Category | What it includes |
|---|---|
| Account details | Your name and email address |
| Receipts | Vendor, amount, date, deduction category, and an optional photo you attach |
| Mileage logbook | Date, purpose, distance and whether each trip is business or private, plus the starting odometer reading and date you enter |
| Early-access sign-ups | The email address you give us on our website if you ask for access |
| Technical data | Session identifiers that keep you signed in, and basic request logs kept by our hosting provider for security and reliability |
3. How We Use It
- To provide TaxFin — storing your records, working out your readiness score and running odometer, and producing your tax pack export;
- To sign you in securely using a one-time code sent to your email address;
- To operate and secure the Platform, including limiting repeated failed sign-in attempts;
- To contact people who asked for early access, about access.
We do not use your data for advertising, and we do not sell it.
4. Who We Share It With
- Nobody, by default. TaxFin has no accountant or practitioner portal. Your records only leave TaxFin when you download or share your tax pack, and what happens to that file afterwards is up to you and whoever you send it to.
- Cloudflare — our hosting provider. Your database records and receipt photos are stored on Cloudflare's infrastructure.
- Resend — delivers sign-in codes by email.
- Google Fonts — serves the typefaces used on our pages, which means your browser requests them from Google.
- R&N Financial Planning — only if you choose to follow the "book a consult" link, at which point you are leaving TaxFin for their independent website, and anything you share with them is governed by their own privacy practices.
We do not otherwise share your personal information with third parties, except where required by law.
5. Receipt Photos
When you attach a photo to a receipt, it is resized and recompressed on your device before upload, so only a smaller version is sent to and stored on our servers. You can replace a photo at any time, and deleting a receipt permanently removes its photo from our storage.
6. Data Retention
We keep your data for as long as your account is active. You can delete individual receipts and trips yourself at any time. If you would like your whole account and everything in it deleted, contact us using the details below and we will action this within a reasonable time, save for anything we are required to keep by law. Early-access email addresses are kept until you ask us to remove them.
7. Security
We use one-time sign-in codes (with a lockout after repeated failed attempts), session tokens and HTTPS encryption in transit. No system is completely secure, and while we take reasonable measures to protect your data, we cannot guarantee absolute security.
8. Your Rights Under POPIA
You have the right to:
- Access the personal information we hold about you;
- Request correction of inaccurate information;
- Request deletion of your information, subject to any legal retention requirements;
- Object to processing of your information in certain circumstances;
- Lodge a complaint with the Information Regulator of South Africa if you believe your rights have been infringed.
To exercise any of these rights, contact us using the details below.
9. Cookies and Local Storage
TaxFin uses one strictly necessary session cookie to keep you signed in. Your browser's local storage is also used to remember small preferences, such as whether you have dismissed the "add to home screen" prompt. We do not use tracking or advertising cookies.
10. International Data Transfers
Cloudflare operates a global network. Where possible we configure our infrastructure to store data close to South Africa, but data may in some cases be processed on servers outside South Africa as part of Cloudflare's normal operation. Cloudflare maintains its own safeguards for cross-border data handling.
11. Children's Privacy
TaxFin is not intended for anyone under 18. We do not knowingly collect personal information from children.
12. Changes to This Policy
We may update this Privacy Policy from time to time, particularly during private testing. We will update the effective date above when we do.
13. Contact
FinSmart Holdings (Pty) Ltd
Reg. 2026/469983/07 · Republic of South Africa
Email: lautonnikhel@gmail.com
Website: taxfin.app