Skip to main content

Trust centre

Data privacy at TaxOrch

TaxOrch data privacy comes down to three commitments: we process your tax data only to answer your questions and run your account, we never train models on it without your explicit opt-in, and you can export or delete it through a tracked, audit-logged process. This page summarises how; the privacy policy is the full text.

Last reviewed How we check this page

What does TaxOrch collect?

Data processed in the product and why
DataWhy it is processed
Tax documents and the figures extracted from themTo compute and cite an answer
Entity, filing and jurisdiction detailsTo select the right calculator and the right law
Questions and answers, with the versions behind eachSo an answer can be reproduced later
An audit trail of who did whatSecurity, accountability and your own review
Account and subscription recordsRunning your account and billing

Payments are handled by Paddle as merchant of record. No card number reaches TaxOrch; we receive which plan was bought, when, the amount, the tax country and whether payment succeeded. On this website, nothing that observes you runs until you consent, and analytics never include form field contents.

Is my data used to train AI models?

Personal identifiers are removed before any text is used beyond your own workspace.

Where is my data stored?

The hosting region is agreed before customer data is carried, and regions and sub-processors are recorded in the data processing agreement. Transfers out of the UK or EEA rely on an adequacy decision or Standard Contractual Clauses, with the UK Addendum where relevant.

How long is data kept, and how is it deleted?

  • Retention is configurable, with a seven-year default for tax documents, reflecting how long tax records typically have to be kept.
  • A retention-eligibility report lists what is due for removal, so deletion happens on a schedule.
  • Legal hold blocks deletion of records under dispute or audit, overriding the schedule.
  • Export: a per-tenant privacy export produces all of your tax data, and requests are tracked to completion.
  • Deletion follows an explicit path, and the deletion itself is written to the audit log.

What rights do I have over my data?

Depending on where you live, data protection law gives you rights to access, correct, export, restrict or delete your personal data, to object to some processing and to withdraw consent. That includes the EU GDPR, the UK GDPR, California's CCPA and India's Digital Personal Data Protection Act. The exact rights and their limits vary by law.

To use any of them, write to privacy@taxorch.com. You will get a reply within 30 days at no charge. We do not sell personal information and do not share it for cross-context behavioural advertising. In the UK or EEA you may also complain to your supervisory authority, such as the Information Commissioner's Office.

For business customers, your organisation is the controller of the tax data it puts into TaxOrch and TaxOrch acts as its processor, on the terms in the data processing agreement.

Frequently asked questions

Does TaxOrch sell my data?

No. TaxOrch does not sell personal information and does not share it for cross-context behavioural advertising.

Can I control how my data is used?

Your data is not used beyond your own work unless you explicitly opt in, and you can withdraw that consent at any time.

How do I delete my data?

Write to privacy@taxorch.com. Deletion follows an explicit, audit-logged path, except for records under a legal hold for a dispute or audit.

How long do you keep my tax documents?

Seven years by default, because tax records typically must be kept that long. The period is configurable.
Next step

Ask TaxOrch about your own situation.

Bring your own questions about Trust centre to a demo, or request a demo account and try them yourself. Every answer shows the official source it rests on, and firms can offer TaxOrch under their own brand.

Decision support, not tax advice. A professional reviews before anything is filed.