Privacy Policy

At TaxTask, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, applications, and services (the "Service"). We process personal data in line with the Nigeria Data Protection Regulation (NDPR) and the Nigeria Data Protection Act 2023 where applicable.

1. Information We Collect

We collect information you provide directly and information we obtain from your use of the Service.

• Account information: Name, email address, phone number, and business details when you register.
• Financial and transaction data: Data from connected bank accounts and POS systems, used for tax calculation and reporting.
• Documents: Invoices, receipts, and tax-related documents you upload.
• Usage data: How you interact with our platform (e.g. pages visited, features used) to improve the Service.
• Communications: Support requests and correspondence you send to us.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our tax compliance services
• Calculate VAT, WHT, and CIT obligations and generate FIRS-compliant e-invoices and returns
• Send notifications about tax deadlines and filing reminders
• Respond to your comments, questions, and support requests
• Send marketing communications where you have given consent (you may withdraw consent at any time)
• Analyze usage to improve user experience and security
• Comply with legal and regulatory obligations

3. Data Sharing

We do not sell your personal information. We may share your information only in these circumstances:

• With your consent: When you authorize us to share data (e.g. with your accountant).
• Service providers: With trusted third parties who assist us (e.g. hosting, analytics), under contracts that protect your data.
• Legal and regulatory: When required by law, including submission of e-invoices to the Federal Inland Revenue Service (FIRS).
• Business transfers: In connection with a merger, acquisition, or sale of assets, with notice where required.

4. Cookies and Similar Technologies

We use cookies and similar technologies to operate the Service, remember your preferences, and analyze usage. For full details, including cookie types and how to manage them, see our Cookie Policy.

Where required by law, we obtain your consent before placing non-essential cookies. You can change your cookie preferences at any time via our cookie settings or your browser.

5. Data Security

We implement measures to protect your data, including:

• Encryption in transit (TLS 1.2+) and at rest (AES-256)
• Secure authentication with optional multi-factor authentication (MFA)
• Row-level security so your data is isolated from other customers
• Regular security assessments and access controls

No method of transmission or storage is 100% secure. We will notify you and the relevant authority of a data breach where required by law.

6. Your Rights (NDPR)

Under the Nigeria Data Protection Regulation (NDPR) and Nigeria Data Protection Act 2023, you have the right to:

• Access your personal data
• Correct inaccurate or incomplete data
• Request deletion of your data (subject to legal retention requirements)
• Object to certain processing
• Data portability where applicable
• Withdraw consent at any time (where processing is based on consent)
• Lodge a complaint with the Nigeria Data Protection Commission (NDPC)

To exercise these rights, contact us at [email protected]. We will respond within the timeframes required by law.

7. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. Tax-related and compliance data may be retained for longer periods (e.g. up to 7 years) to comply with Nigerian tax and regulatory record-keeping requirements. After termination of your account, we typically delete or de-identify other personal data within 90 days unless a longer retention is required by law. We may retain anonymized or aggregated data and data we are legally required to keep.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page and update the "Last updated" date. For material changes, we will notify you by email or in-product notice where appropriate. We encourage you to review this policy periodically.

9. Contact Us

For questions about this Privacy Policy or to exercise your data rights, contact us at:

Email: [email protected]
Address: Lagos, Nigeria

For complaints under NDPR/NDPC, you may also contact the Nigeria Data Protection Commission.