Privacy Policy

1. Controller

The controller of personal data under Article 4(7) GDPR is innvision s.r.o., with its registered office at Karpatské námestie 7770/10A, 831 06 Bratislava, Slovak Republic, Company ID (IČO): 54206341, Tax ID (DIČ): 2121604001, VAT ID (IČ DPH): SK2121604001, registered in the Commercial Register of the Municipal Court Bratislava III, section Sro, entry No. 156767/B, which operates the Taxify service (taxify.sk and app.taxify.sk).

Contact for data protection matters: info@taxify.sk or the contact form at taxify.sk/contact. The Operator has not appointed a data protection officer (DPO), as it is not required to do so by law.

2. What data we process

Account data: the email address, the first and last name (if you give them), the password only as a secure hash (bcrypt), the preferred language. If you sign in with Google, we receive your email address, your name and an account identifier from Google; in that case we store no password.

Financial data: trade statements you upload to the Service (trades, dividends, interest, fees, broker account identifiers) and the tax outputs calculated from them.

Data of the automatic import from Interactive Brokers (only if you enable it on a paid plan): the Flex Web Service token, the identifier of the Flex Query (Query ID), the expiry date of the token that you enter, and the data that the Service loads from Interactive Brokers on your instruction or, if you switch the automatic sync on, each morning – trades, dividends, interest, withholding tax, corporate actions and the broker account number, that is, the same scope as a statement that you upload by hand. We also keep the sync history (the time, the counts of the loaded records and the errors).

Technical data: IP address, browser type and basic logs necessary for the secure operation of the Service.

Contact form data: name, email and the content of the message you send us.

Billing data: the name and the address, or the company name, the registration number and the tax numbers that you give when you order a paid plan, together with the data of the order and of the invoice that we issue.

Taxpayer data: the name and the birth number or the tax ID that you give when you lock a calculation. The PDF document prints them.

Data of the clients of an accountant: if you enter the data of your clients on an accountant plan (the first and last name, the email address, the telephone number, the birth number or the tax ID, a note, the broker accounts and the trades), we process it on your behalf as a processor. You are the controller of this data; section 9 of the Terms of Service gives the conditions. If you mail a calculation to a client, we store the time of the mail.

Link for an accountant: if you give access to a calculation through a protected link, we store the data of the link – the tax year, the time of the creation, of the end of the validity and of a revocation, the password only as a secure hash, the number of wrong passwords, and the number and time of views. At each opening of the link we record the time and the IP address of the device that opened it. If you ask us to send the link by email, we process the email address of the recipient that you enter.

Support messages: the subject and the text of the message, the contact email address, the attachments and the technical context in which you wrote the message (the page address, the browser type, the language, the plan and the version of the application).

Waiting list: the email address and the language of the form.

Consent to news: whether and when you agreed to the emails with news and with reminders of the tax season.

Data about bulk emails: for each bulk email (news, tips, service notices) we store when we sent it, whether it was delivered and whether you clicked a link in it. We do not track the opening of an email.

3. Purposes and legal bases

Providing the Service (account management, statement import, tax calculation, document export) – legal basis: performance of a contract (Art. 6(1)(b) GDPR).

Automatic import of statements from Interactive Brokers – legal basis: performance of a contract (Art. 6(1)(b) GDPR). We use the token only to read the statements of the query whose Query ID you entered: when you start a sync, and, if you switch the automatic sync on in the settings of the account, also one time each morning without an action from you. The automatic sync is off by default, and you can switch it off at any time. We do not use the token for any other purpose.

Security and abuse prevention (logs, rate limiting) – legal basis: legitimate interest (Art. 6(1)(f) GDPR).

Processing an order and issuing an invoice — legal basis: the performance of the contract (Art. 6 (1) (b) GDPR) and a legal obligation for accounting and tax documents (Art. 6 (1) (c) GDPR).

Monitoring the errors of the application — legal basis: the legitimate interest in the stability and the security of the Service (Art. 6 (1) (f) GDPR). An error report holds technical data and an account identifier; we strip the body of the request, the headers and the email address from it automatically.

Website traffic measurement via Google Analytics – legal basis: your consent given via the cookie banner (Art. 6(1)(a) GDPR); you can withdraw consent at any time.

Responding to contact form messages – legal basis: legitimate interest or steps prior to entering into a contract.

Service emails about your account, your order and your plan (for example the payment details, the invoice, the notice of the end of a plan) – legal basis: performance of a contract (Art. 6(1)(b) GDPR). We always send these emails.

News, tips, offers and reminders of the tax season by email – legal basis: your consent (Art. 6(1)(a) GDPR), which you give at the registration or in the profile. We also send them without consent to customers who bought a plan, when they are about our similar services (§ 116 of Act 452/2021). In both cases you can unsubscribe at any time in the profile or through the link in each such email.

Service notices about the account and the tax (for example the deadline of the return or a change of the calculation rules) go to all users; they contain no offers. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).

Evaluation of clicks on links in bulk emails – legal basis: legitimate interest in better emails (Art. 6(1)(f) GDPR).

Waiting list – legal basis: your consent (Art. 6(1)(a) GDPR). We use the address only for the message about the launch of the Service. To leave the list, write to info@taxify.sk.

User support – legal basis: performance of a contract (Art. 6(1)(b) GDPR) and the legitimate interest in solving the errors of the Service (Art. 6(1)(f) GDPR).

Sending a calculation to a client of an accountant, and giving access to a calculation through a link – towards you this is the performance of the contract (Art. 6(1)(b) GDPR), and we do it only on your instruction. We process the data of the recipient of a link (the email address, if you entered it, and the time and IP address of each opening) on the basis of legitimate interest (Art. 6(1)(f) GDPR): our interest and the interest of the user is to deliver the documents to the person whom the user selected, and to protect the link against misuse. We process the data of the clients of an accountant as a processor under Art. 28 GDPR.

4. Retention period

We keep account data and financial data for as long as your account exists. When you delete your account, we erase them at once, together with the uploaded statements, the calculations and their PDFs, the clients and the support messages. We keep the orders and the invoices after the account deletion too, no longer linked to the account, as described below; we erase only the orders that were cancelled before a payment.

We keep the Flex Web Service token until you disconnect the sync or delete your account. In both cases we erase it at once, together with the sync history. When your paid plan ends, the token stays stored and the sync is paused, so that you do not need to set it up again when you renew the plan; you can disconnect it at any time. We keep the data that the sync loads in the same way as the other financial data.

Contact form messages are kept for a maximum of 12 months after resolution. Analytics data is retained for the periods configured in Google Analytics.

We keep the orders and the invoices for the period that the accounting and value-added-tax rules require (as a rule 10 years), together with the billing data and the record of the consent to the terms at the order.

Support messages are kept for a maximum of 12 months after resolution. We keep the addresses of the waiting list until we send the message about the launch of the Service, for 12 months at the longest, or until you leave the list.

We keep the record of the consent to news until you withdraw the consent or delete your account. We keep the data about bulk emails for 24 months after the send, at most until you delete your account.

We keep the data of a link for an accountant until you delete the link with the calculation, the client or the account; an expired or revoked link does not work. We keep the records of the openings of a link (time and IP address) for 12 months from their creation, at most until you delete your account. We keep the record of a sent email with a link or a calculation (the recipient address, the time and the result) for 12 months after the send.

We keep the encrypted database backups for 30 days (daily backups) and 12 months (monthly backups). Erased data stays in them until that period ends at the latest. We use the backups only to recover from a failure; if we restore a backup, we erase the deleted data from it again.

5. Recipients and processors

For the operation of the Service we use vetted processors: the hosting of the application on a virtual server in the EU (netcup), the hosting and the delivery of the website taxify.sk (Vercel), the database and the file storage (Neon — servers in the EU), the storage of the encrypted database backups (Backblaze), email services for the system messages, the sending of bulk emails (Mailgun, Sinch – EU region), the monitoring of the application errors (Sentry), the invoice software Fakturovo (fakturovo.sk) for the invoice, and the web analytics (Google Analytics, only with your consent).

For the automatic import, the Service connects to Interactive Brokers on your instruction, or each morning when the automatic sync is on, and gives it only the token and the Query ID, so that it can issue the requested statement. Interactive Brokers is not our processor: it is a separate controller of the data of your broker account, and its own policy governs its processing. The servers of Interactive Brokers can be outside the EU/EEA.

On your instruction we also give data to persons that you select: we mail the PDF of a calculation to a client of an accountant (without the birth number), and an accountant to whom you give a link with a password sees your calculation and downloads the documents. Only you decide to whom you give the link and the password. Each person who knows the link and the password sees the result of the calculation and the list of the closed trades and can download the documents; the PDF of a locked calculation contains your name and birth number. Keep the password confidential, and revoke the link when you no longer need it. These persons are not our processors.

If you sign in with Google, Google processes the sign-in data as a separate controller under its own policy.

We never sell your financial data or provide it to third parties for marketing purposes.

6. Transfers to third countries

The database, the file storage, the backups, the error reports and the sending of bulk emails (Neon, Backblaze, Sentry, Mailgun) are in EU regions. Some providers (e.g. Vercel, Google) may process data outside the EU/EEA. In such cases the transfer is safeguarded by EU standard contractual clauses or an adequacy decision (EU-US Data Privacy Framework).

7. Your rights

Under GDPR you have the right to access your data, rectify it, erase it, restrict processing, data portability, and the right to object to processing based on legitimate interest. Consent (e.g. to analytics) can be withdrawn at any time.

You can exercise your rights by emailing info@taxify.sk. If you believe we process your data unlawfully, you have the right to lodge a complaint with the Office for Personal Data Protection of the Slovak Republic (dataprotection.gov.sk).

The account data is necessary to enter into the contract and to perform it; without it we cannot provide the Service. We make no automated decisions with legal effects and do no profiling.

8. Information for the recipient of a link to a calculation

If a Taxify user gave you a link to their calculation, the controller of the personal data that we process about you is the company named in section 1. We process the time and the IP address of each opening of the link, and your email address if the user entered it to send you the link; the source of the address is that user.

The purpose is the delivery of the link and its protection against misuse, for example the limit of password attempts. The legal basis is legitimate interest (Art. 6(1)(f) GDPR). We keep the data as section 4 states. We show the user only the number of openings and the time of the last one, not your IP address.

We do not use your address for marketing and do not add it to any list. You have the rights of section 7, including the right to object.

9. Cookies and analytics

The website uses essential technical cookies (e.g. the language preference) and stores the state of your consent in the storage of the browser. It uses the Google Analytics cookies for traffic measurement only with your consent. You can change or withdraw the consent at any time through the "Cookie settings" link in the footer of the website.

10. Security

Data is transferred exclusively over encrypted connections (TLS) and stored in an encrypted database on servers in the EU. Passwords are stored only as secure hashes (bcrypt). Access to production data is limited to the minimum necessary circle of people.

We store the Flex Web Service token encrypted (AES-256-GCM) with a key that is kept apart from the database. The token is never shown or sent to the browser (in the app you see only its last four characters), it is not in the logs or in the error reports, and we use it only for the encrypted connection to Interactive Brokers. The token only reads statements; it does not allow trading, handling funds or changing the account settings. You can stop the access at any time: disconnect the sync in Taxify, or generate a new token at Interactive Brokers.

11. Changes to this policy

We may update this policy, in particular when legislation or the scope of the Service changes. The current version is always published on this page together with the date of the last update.