Privacy Policy

We collect the following categories of information to provide and improve our services:

1.1 Information You Provide

• Account Information: Full name, email address, phone number, and password when you create an account.
• Business Profile: Business name, address, city, state, and account type (personal or business).
• Financial Data: Income records, expense records, invoice details, tax payment information, VAT transactions, withholding tax details, and capital asset information you enter into the platform.
• Client Information: Names, email addresses, phone numbers, addresses, and tax identification numbers of your clients that you add for invoicing purposes.
• Support Requests: Information you provide when contacting customer support, including your name, email, phone, and message content.

1.2 Information Collected Automatically

• Usage Data: Pages visited, features used, time spent on the platform, and interaction patterns.
• Device Information: Browser type, device type, operating system, and screen resolution.
• Blog Analytics: Page views, referrer URLs, country of origin, and device type for blog content.
• Referral Tracking: Referral link clicks, visitor IP addresses (hashed), user agents, and conversion data.

1.3 Payment Information

Payment processing is handled by Flutterwave. We store only the last four digits of your card number and card expiry for display purposes. Full payment card details are never stored on our servers. Card tokens are securely isolated and accessible only through server-side functions.

• Tax Consultation: Provide independent automated tax consultation for personal income tax (PIT), company income tax (CIT), value-added tax (VAT), and withholding tax (WHT) based on official Nigerian tax regulations.
• Financial Management: Generate invoices, track income and expenses, manage capital assets, and provide financial insights.
• Account Management: Authenticate your identity, manage your subscription (including the 7-day free trial), and process payments.
• Communication: Send onboarding emails, subscription reminders, tax deadline notifications, and referral invitations.
• Service Improvement: Analyse usage patterns and blog analytics to improve our platform and content.
• Legal Compliance: Meet our obligations under Nigerian data protection regulations (NDPR) and applicable tax laws.

We implement multiple layers of security to protect your data:

• Client-Side Encryption: Sensitive user data is encrypted on your device before being transmitted and stored, ensuring that critical information remains unreadable even in the unlikely event of a database breach.
• Data Masking: Personally identifiable information (PII) such as email addresses, phone numbers, and tax identification numbers are masked in database views to prevent unauthorized enumeration.
• Row-Level Security (RLS): Every database table enforces row-level security policies, ensuring users can only access their own records. Anonymous access is explicitly denied.
• Payment Data Isolation: Payment tokens and card details are stored in a separate, restricted table accessible only by server-side functions — never exposed to the client application.
• Audit Logging: Critical actions are recorded in an audit log for accountability and incident investigation.
• HTTPS Encryption: All data transmitted between your browser and our servers is encrypted using TLS/SSL.

We do not sell, trade, or rent your personal information. We share data only in the following limited circumstances:

• Payment Processing: Flutterwave processes your payments. They receive only the information necessary to complete transactions and are bound by their own privacy policies.
• Legal Requirements: We may disclose your information if required by law, court order, or governmental regulation, particularly in relation to tax compliance obligations.
• Service Providers: We use cloud infrastructure providers to host and deliver our services. These providers process data on our behalf under strict contractual obligations.
• With Your Consent: We may share information with third parties when you explicitly authorise us to do so, such as when sending referral invitations on your behalf.

Under the Nigeria Data Protection Regulation (NDPR), you have the following rights:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete personal data via your account settings.
• Right to Erasure: Request deletion of your personal data, subject to legal retention requirements.
• Right to Data Portability: Request your data in a structured, commonly used format.
• Right to Object: Object to the processing of your personal data for specific purposes.
• Right to Withdraw Consent: Withdraw previously given consent at any time by contacting us.

To exercise any of these rights, please contact us at alphalinkprime@gmail.com.

• Account Data: Retained for as long as your account is active. Upon account deletion, personal data is removed within 30 days, except where retention is required by law.
• Financial Records: Tax-related financial records may be retained for up to 6 years in accordance with Nigerian tax law requirements under the Federal Inland Revenue Service (FIRS) regulations.
• Audit Logs: Security and audit logs are retained for 12 months for security and compliance purposes.
• Blog Analytics: Anonymised analytics data may be retained indefinitely for service improvement.
• Payment Records: Transaction references and payment histories are retained in line with financial regulatory requirements.

TAXKORA uses the following browser storage mechanisms:

• Authentication Tokens: Stored securely to maintain your logged-in session.
• PWA Data: Service worker caches enable offline access to the application.
• User Preferences: Theme settings and display preferences stored locally on your device.

We do not use third-party advertising or tracking cookies.

TAXKORA is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal data from a child without parental consent, we will take steps to delete that information promptly.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by posting the updated policy on this page with a revised "Last Updated" date. We encourage you to review this page periodically. Continued use of TAXKORA after changes constitutes acceptance of the updated policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: alphalinkprime@gmail.com
• Phone: +234 707 770 6706
• Address: Lagos, Nigeria

For complaints regarding your data protection rights, you may also contact the National Information Technology Development Agency (NITDA) at nitda.gov.ng.