Privacy notice

Information we handle

We process your username and password hash, or the verified Google account identifier used to sign in; your session and security information; the personal, employment, income, property and other tax details you enter; and PDFs you deliberately add as attachments. A Google token is verified for sign-in; we do not request access to Gmail or Drive. Contact messages contain whatever you choose to send.

Why we use it

Account access, storage, document attachments, calculations and exports are processed to provide the service you request (contractual necessity). Sign-in protection, account isolation and fault investigation rely on legitimate interests in operating a secure service. Responding to legal obligations relies on the relevant legal obligation. We do not use tax records for advertising, sell them or make automated decisions about your eligibility for employment, credit or insurance.

Document reading and sensitive information

P60/P11D text extraction and OCR currently run on your device, using libraries served by TAXMAN. Original documents selected for reading are not sent to an external AI or OCR provider. Reviewed values are stored on the server when applied; PDFs added separately as attachments are uploaded. Avoid uploading medical details, diagnoses or other unnecessary sensitive information. A taxable benefits total normally does not require a diagnosis.

Who can access it

Your account’s records are separated from other users’ accounts. The service operator and authorised server administrators have operational access. Contabo supplies the hosting infrastructure. We may disclose information when legally required. No HMRC submission integration is connected and we do not send your return to HMRC.

Optional postcode checking

If you select Check postcode, TAXMAN sends only the entered postcode through its server to Postcodes.io to check and format it. We do not send your name, house number or tax figures with this request. This confirms the postcode, not your full postal address. Manual entry remains available. See Postcodes.io information.

Google sign-in

If you choose to load Google sign-in, your browser contacts Google and shares connection details such as your IP address and browser information. Google processes sign-in data under its own privacy policy, which may involve processing outside the UK. You can use a username and password instead. We store the verified Google subject identifier, not a copy of your Google password.

Storage, security and retention

The operator has identified Contabo as the hosting provider and stated that hosting is in the UK. The actual server location has not been independently verified. The server database stores active accounts, returns and attachments. We use HTTPS, hashed passwords, expiring sessions and account access controls. This is not end-to-end encryption: server administrators can access stored records. Active account information is kept while the account is in use, until deletion is requested and completed. Resetting a return clears its active tax data and attachments but does not delete the account. Contact us to request account deletion or a copy of your information. We verify identity before acting.

Daily backups are retained for up to 14 days. Copies removed from active storage may remain in those backups until rotation. If recovery is necessary, deletion requests must be reapplied. Contact correspondence is retained only for the purpose of resolving your enquiry and any applicable legal obligation; we review whether correspondence is still needed once an enquiry is resolved.

Your rights and choices

Depending on the circumstances, you can request access, correction, erasure, restriction and portability, and object to processing based on legitimate interests. These rights are not absolute. You can edit your return and export preparation records in the app, or contact info@taxman.live for a rights request. We normally respond within one month, subject to lawful extensions. No marketing consent is required to use the service.

You can complain to us at info@taxman.live and to the Information Commissioner’s Office. Contacting us first does not remove your right to complain to the ICO.

Changes to this notice

Material changes will be explained here. New uses of information or new non-essential tracking will require an updated notice and, where required, a valid choice before they start.