Privacy Policy
Plain English: Tax Expert stores your receipts, invoices, and tax draft so we can help you file your Malaysian taxes. We host that data in Singapore on AWS (`ap-southeast-1`), encrypt it at rest, and you can export or delete it at any time. We do not sell your data. This document is the formal version. Note: this is template language; we are commissioning a Malaysian-lawyer review before charging customers.
Effective Date: 1 January 2026
Operator: TechDevX
Contact Email: [email protected]
Domain: https://taxhacker.techdevx.com
Tax Expert (TechDevX) ("we", "our", "us") is committed to protecting your privacy and complies with the Malaysian Personal Data Protection Act 2010 (PDPA). This Privacy Policy describes how we collect, use, store, and protect your personal data when you use our services.
1. What data we collect
We collect the following types of data when you use Tax Expert:
- Account data: email address, display name. We do not store passwords; sign-in is via email OTP.
- Tax data: figures you enter into the calculator (employment income, EA values, reliefs), uploaded EA PDFs, receipts, invoices, and any line-item content extracted from them.
- Billing data: handled by Stripe — we receive a customer ID, subscription status, last-4 of card, and invoice metadata. We do not store full card numbers.
- Session metadata: IP address, browser type, and timestamps for session security.
- Service usage data: number of uploaded files, AI scan counts, app usage.
2. How we use your data
We use your data to:
- Create and manage your Tax Expert account
- Run AI extraction on the receipts and PDFs you upload
- Compute your Malaysia tax estimate and produce the filing summary PDF
- Send transactional emails (verification codes, billing receipts, expiring-card reminders)
- Send the optional newsletter you can unsubscribe from at any time
- Comply with legal obligations and PDPA requests
3. AI-powered processing
We use external AI services from OpenAI, Google Gemini, and Mistral to:
- Extract structured data from your receipts, invoices, and EA PDFs
- Suggest categories, reliefs, and line items based on the contents
By using Tax Expert, you consent to the transfer of relevant data to these third-party providers for processing. These providers may operate outside Malaysia, in compliance with Section 129 of the PDPA.
4. Cookies and tracking
Tax Expert uses only the cookies strictly necessary to keep you logged in. We do not use third-party advertising cookies. We do collect aggregate, non-identifying analytics about feature usage to improve the product.
5. Data storage and security
- Files are stored in AWS S3 in the Singapore (`ap-southeast-1`) region.
- Files are encrypted at rest by S3 and in transit via TLS 1.2+.
- Access to personal data is restricted to authorised personnel for support and audit purposes.
While we maintain reasonable safeguards, no system is completely secure. Use the platform at your own risk.
6. Your PDPA rights
As a user, you have the right to:
- Access and review the personal data we hold about you
- Correct or update inaccurate information via Settings → Profile
- Request a full export of your data (Settings → Backups, or by emailing [email protected])
- Permanently delete your account at Settings → Danger zone
- Object to certain forms of processing
- Lodge a complaint with the Malaysian Personal Data Protection Department (JPDP)
7. Data retention
- While your account is active.
- For up to 30 days after deletion, after which all personal data and uploaded files are purged.
- Stripe billing records are retained for 7 years for Malaysian tax-record compliance.
8. Children's privacy
Tax Expert is not intended for users under the age of 18. We do not knowingly collect data from minors.
9. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be announced via email and on this page with an updated effective date.