How we protect and use your data

Last updated: December 5, 2025

1. Information We Collect

Taxora AI collects information necessary to provide our tax compliance and automation services. This includes:

Business information (company name, VAT/TRN numbers, registration details)
Financial data (invoices, receipts, bank statements, transaction records)
User account information (name, email, contact details)
Integration data from connected services (see Google Services section below)
Usage data (features accessed, queries made, compliance activities)

2. Google Calendar & Gmail Integration

When you connect Google Calendar and Gmail to Taxora AI, we access and process the following data:

Google Calendar Data:

Calendar events and appointments for tax deadline tracking
Event titles, descriptions, dates, and times
Attendee information (when relevant to tax compliance)
Recurring event patterns for automated deadline reminders

Gmail Data:

Email messages containing tax-related documents (invoices, receipts, tax notices)
Email attachments (PDFs, images, spreadsheets) for document analysis
Email metadata (sender, subject, date) for organizing tax correspondence
Threaded conversations related to tax compliance matters

How We Use This Data:

Extract tax-relevant information from emails and attachments
Track tax deadlines and compliance dates from calendar events
Automate document categorization and filing workflows
Generate reminders and alerts for upcoming tax obligations
Cross-reference calendar events with tax filing requirements

Your Control:

You can revoke Google Calendar/Gmail access at any time through your account settings
We only access data necessary for tax compliance services
We do not read, store, or process personal emails unrelated to tax matters
All Google data is processed in accordance with Google's API Services User Data Policy
You can request deletion of Google-sourced data at any time

3. Data Security

We implement industry-standard security measures to protect your data:

Encryption: AES-256 encryption at rest, TLS 1.3 in transit
Data Residency: All data stored in UAE data centers
Access Controls: Zero-knowledge architecture with minimal personnel access
Audit Logs: Comprehensive logging and monitoring of all data access
Compliance: SOC 2 Type II controls, UAE PDPL, GDPR, and DPDP aligned

4. How We Use Your Information

We use your information to:

Provide tax compliance automation and filing services
Process and analyze tax documents (invoices, receipts, statements)
Generate tax calculations, returns, and reports
Send compliance reminders and deadline alerts
Improve our AI models and service quality
Respond to your inquiries and provide customer support
Comply with legal obligations and prevent fraud

5. Data Sharing and Disclosure

We do not sell your personal data. We may share information only in these circumstances:

Service Providers: Trusted third-party vendors who assist in delivering our services (under strict confidentiality agreements)
Legal Requirements: When required by UAE law, court orders, or regulatory authorities
Business Transfers: In connection with mergers, acquisitions, or asset sales (with prior notice)
With Your Consent: When you explicitly authorize sharing

6. Your Rights

You have the right to:

Access your personal data and request copies
Correct inaccurate or incomplete information
Request deletion of your data (subject to legal retention requirements)
Object to processing of your data
Request data portability
Withdraw consent for data processing (where applicable)
File a complaint with relevant data protection authorities

To exercise these rights, contact us at privacy@taxora.ai

7. Data Retention

We retain your data for as long as necessary to provide our services and comply with legal obligations. Tax-related data may be retained for up to 7 years in accordance with UAE tax law requirements. When you delete your account, we will delete or anonymize your data within 30 days, except where retention is required by law.

8. Children's Privacy

Taxora AI is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through our service. The "Last updated" date at the top indicates when this policy was last revised.

10. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

Email: privacy@taxora.ai
Data Protection Officer: dpo@taxora.ai