Privacy policy

1. Who we are

DTAX processes personal data as described here, in accordance with the EU General Data Protection Regulation (GDPR). Contact for privacy matters: the contact form on this site.

2. What we collect

Account data (name, email, language), company data you enter, financial documents and transactions you upload, usage and device data for security, and identity documents for expert verification.

3. Why we process it

To provide the contracted service, to comply with legal obligations (bookkeeping retention, anti-fraud), for the security of the platform (legitimate interest) and, with consent, for product communications.

4. AI processing

AI features process your bookkeeping data to produce analysis you request. Your data is not used to train third-party foundation models.

5. Sharing

Data is shared with processors needed to run the service (hosting, email, payments, identity verification) under data-processing agreements, with experts only when you grant project access, and with authorities where the law requires.

6. Retention

Accounting records: up to 10 years (legal requirement). Account data: for the life of the account plus a short grace period. Security logs: 12 months.

7. Your rights

Access, rectification, erasure (within legal retention limits), restriction, portability and objection. You can also complain to the CNPD (Luxembourg data-protection authority).

8. Security

Encryption in transit and at rest, two-factor authentication, role-based access, audit logging and EU hosting.