Privacy Policy

• Your email address (for sign-in) and business details (name, IRD/GST number, entity type, financial-year start).
• Bank transaction data you upload as CSV files, and any invoices/receipts you add.
• Billing information processed by Stripe (we do not store full card numbers).
• Your Telegram chat ID, only if you connect Telegram notifications.

We never ask for or access your bank login. You upload exported CSV files yourself — we only see what you choose to upload.

To categorise your transactions, calculate GST and income/provisional tax estimates, store your records, bill your subscription, and (if enabled) send you Telegram reminders. Categorisation uses the Anthropic (Claude) API; transaction descriptions and amounts are sent for classification and are not used to train their models.

We use these processors to run the service, each bound to protect your data:

• Supabase — database, authentication and file storage (hosted in Singapore).
• Stripe — payment processing.
• Anthropic — AI transaction categorisation.
• Netlify — website hosting.
• Resend — transactional email.
• Telegram — notifications you opt into.

Some processors are overseas — Supabase (Singapore) and Anthropic (United States) — so your data may be stored and processed outside New Zealand. Each is bound to protect it.

If you invite someone to your business (for example your accountant), they can view your records read-only until you revoke their access from Settings.

We do not sell your information. We only disclose it where required by law.

Your data is protected by row-level security (each business can only see its own records) and encrypted in transit. Because these are tax records, we retain them for at least seven years in line with IRD requirements, unless you ask us to delete your account sooner (subject to that legal retention).

Under the Privacy Act 2020 you can ask to access or correct your personal information, or request deletion. Email hello@saasytax.co.nz and we'll respond within 20 working days. You can also complain to the Office of the Privacy Commissioner (privacy.org.nz).

We may update this policy; material changes will be notified in-app or by email.