Privacy Policy

1. Who operates TaxCerta

TaxCerta is currently operated by Ayomikun Kayode, an individual based in Alberta, Canada ("TaxCerta", "we", "us", or "our"). This Privacy Policy explains how information is collected, used, disclosed, protected, and retained when you use TaxCerta or connect an accounting provider.

2. Information we may collect

Depending on the features you use, TaxCerta may collect or process:

• contact or support information you choose to provide;
• business profile and accounting-company information received from a connected provider;
• chart-of-accounts data, financial reports, balances, and related accounting metadata;
• OAuth authorization information and tokens needed to maintain a provider connection;
• technical information such as request logs, timestamps, error information, and security events; and
• other information you intentionally provide as TaxCerta develops additional workflows.

3. Where information comes from

We may receive information directly from you, from an accounting service you authorize such as QuickBooks Online, and from infrastructure providers that help operate and secure TaxCerta. We do not access a connected accounting company unless an authorized user completes the provider's authorization flow.

4. How we use information

We use information for reasonable purposes connected with operating and developing TaxCerta, including to:

• connect to and retrieve authorized accounting information;
• normalize accounting data into TaxCerta's provider-neutral model;
• produce reports, reconciliations, review workflows, and tax-preparation outputs;
• maintain connection state and refresh provider authorization securely;
• diagnose errors, protect the service, and prevent unauthorized access or misuse;
• improve reliability and supported workflows; and
• comply with applicable legal or regulatory obligations.

5. QuickBooks and other connected services

If you connect QuickBooks Online, TaxCerta receives only the access authorized through Intuit's OAuth process and approved scopes. The initial TaxCerta QuickBooks integration is designed to be read-only. Intuit independently processes information under its own terms and privacy practices. Revoking TaxCerta's QuickBooks authorization stops future access once the revocation takes effect, but does not automatically delete information already imported into TaxCerta.

6. OAuth credentials and security

TaxCerta treats accounting credentials and financial information as sensitive. OAuth access and refresh tokens are encrypted before database storage, credentials are restricted to server-side access, and production traffic is sent over HTTPS. TaxCerta also uses access controls and database security rules intended to reduce unauthorized access. No system can guarantee absolute security, but safeguards are selected with the sensitivity of the data in mind.

7. Service providers and disclosures

We may disclose information to service providers only as reasonably necessary to operate, secure, or support TaxCerta. These may include accounting/API providers, cloud hosting providers, database infrastructure providers, and security or monitoring services. We may also disclose information where required or permitted by law, to protect rights or security, or as part of a future business reorganization or transfer subject to applicable law.

TaxCerta does not sell connected accounting data or personal information.

8. Processing outside Canada

TaxCerta is designed with its primary accounting database hosted in Canada. Some third-party infrastructure, authentication, API, or support providers may process or make information accessible from the United States or other jurisdictions. Information processed outside Canada may be subject to the laws of those jurisdictions. TaxCerta limits service-provider access to purposes reasonably connected with providing or securing the service.

9. Retention and deletion

We retain information only as long as reasonably needed for the purposes for which it was collected, including service operation, accounting provenance and audit history, security, development testing, and legal obligations. TaxCerta intentionally preserves source report snapshots and reconciliation history so imported accounting results can be traced and reviewed. A deletion request may therefore require us to distinguish between information that can be removed and information that must reasonably be retained for security, legal, or audit purposes.

10. Access and correction

Subject to applicable law, you may request access to personal information TaxCerta holds about you and ask that inaccurate personal information be corrected. We may need to verify identity and authority before responding to a request involving business or accounting information.

11. Cookies and similar technologies

TaxCerta currently uses limited cookies necessary for functions such as secure development access and OAuth state validation. TaxCerta does not currently use advertising cookies or sell information for targeted advertising.

12. Children's information

TaxCerta is intended for business and professional use and is not directed to children. We do not knowingly seek personal information from children through TaxCerta's accounting workflows.

13. Changes to this Policy

We may update this Privacy Policy as TaxCerta's features, providers, or legal obligations change. The effective date above will be updated when a revised version is published.

14. Privacy contact

Privacy questions, access requests, correction requests, or concerns may be directed to the TaxCerta Privacy Contact, Ayomikun Kayode, Edmonton, Alberta, Canada, through the support contact made available by TaxCerta.