Privacy Policy

Taxza ("we", "us") respects your privacy and complies with the Protection of Personal Information Act, 2013 (POPIA). This policy explains what personal information we collect when you use taxza.fyi, how we use it, who we share it with, and the rights you have over it. We are the responsible party for the personal information described below.

1. The calculators are anonymous

The free calculators (provisional tax, import duty & VAT, salary after tax) run entirely in your browser. The numbers you enter — income, salary, customs values, duty rates — are not transmitted to our servers and are not stored anywhere by us. You do not need an account to use them.

2. What we collect, and why

Contact form: name, email, subject, and message. Used solely to respond to your enquiry.
Deadline subscription: email address and reminder preferences (e.g. provisional tax dates). Used to send the reminders you requested and nothing else.
Account & Pro features: if you sign up for an account to use the SARS calendar, AI tax assistant, or document checklist, we store your email and the data you create (e.g. saved checklists, chat history). We do not store passwords in plain text — authentication is handled by our managed backend provider.
Analytics: we collect aggregated, non-identifying usage data (pages viewed, approximate region, device type) to understand which calculators are most useful. We do not use cross-site advertising trackers.
Server logs: our hosting provider keeps short-lived request logs (IP address, user agent, URL) for security and debugging. These are typically retained for up to 30 days.

3. Cookies

We use a small number of strictly necessary cookies to keep you signed in to authenticated features and to remember your theme preference. We do not set advertising or third-party tracking cookies on the calculator pages. If we ever introduce non-essential cookies, we will request your consent first.

4. Who we share data with

We do not sell your personal information and we do not share it with third parties for marketing. Limited operational processors handle data on our behalf, under contract:

Our managed backend provider (database, authentication, file storage).
Our transactional email provider, used to send reminders and receipts.
Our hosting / CDN provider, which serves the site.

Some of these providers may process data outside South Africa. We rely on standard contractual safeguards to ensure your data is protected to a level comparable with POPIA.

5. How long we keep data

Contact messages: up to 24 months, then deleted.
Subscription emails: until you unsubscribe (one click in any reminder), then removed within 30 days.
Account data: while your account is active, plus a short grace period after deletion.
Analytics: aggregated indefinitely; raw events typically rolled up within 14 months.

6. Your POPIA rights

You have the right to:

Access the personal information we hold about you.
Ask us to correct inaccurate information.
Ask us to delete your information, subject to lawful retention obligations.
Object to processing or withdraw consent (e.g. for reminder emails).
Lodge a complaint with the Information Regulator of South Africa.

To exercise any of these rights, email hello@taxza.fyi or use the contact page. We aim to respond within 30 days.

7. Security

We use HTTPS across the site, role-based access controls on our database, and row-level security so that user records are isolated. No system is perfectly secure; if a breach occurs that affects your information, we will notify you and the Information Regulator as required by POPIA.

8. Children

The Service is not directed at children under 18. We do not knowingly collect personal information from minors.

9. Changes

We may update this policy when our practices change. The "Last reviewed" date at the top of this page reflects the most recent revision. Material changes that affect how we use your data will be communicated by email to subscribers.