Privacy Policy

1. Introduction

TaxSaver AI (we, us, our, or Company) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, mobile application, and use our services, including our AI-powered tax optimization platform and WhatsApp-based receipt submission service.

Please read this Privacy Policy carefully. By accessing or using TaxSaver AI, you acknowledge that you have read, understood, and agree to be bound by all the terms of this Privacy Policy. If you do not agree with our policies and practices, please do not use our services.

2. Information We Collect

2.1 Information You Provide Directly

Account Registration: When you create an account, we collect your full name, email address, phone number, country code, password, date of birth, and income bracket information.

WhatsApp Communication: When you submit receipts or communicate with us via WhatsApp, we collect and store your WhatsApp phone number, messages, receipt images, transaction details, merchant information, and purchase amounts.

Financial Information: We collect receipt details including merchant name, transaction date, transaction amount, category classification, and claimable amounts for tax optimization purposes.

Payment Information: When you make payments through our Stripe integration, we do not store full credit card details. Stripe handles all payment processing securely. We store transaction records, subscription status, payment dates, and billing information.

Referral Program: If you participate in our referral program, we collect your referral code, referred user information, commission calculations, and payout records.

Customer Support: When you contact our support team, we collect your inquiries, correspondence, communication history, and any additional information you voluntarily provide.

2.2 Automatically Collected Information

Device Information: We automatically collect device type, operating system, unique device identifiers, mobile network information, and device settings.

Usage Data: We collect information about your interactions with our service, including pages viewed, features used, receipt upload frequency, tax optimization activities, time spent on platform, and navigation patterns.

Location Data: We may collect approximate location information based on your IP address and country code for service optimization and compliance purposes.

Cookies and Similar Technologies: We use cookies, web beacons, and similar tracking technologies to enhance your experience and analyze usage patterns (see Section 9).

2.3 Information from Third Parties

WhatsApp Platform: WhatsApp provides us with message delivery confirmations and metadata necessary to provide our service.

Stripe Payment Processor: Stripe provides us with payment confirmation data and transaction status information.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Service Delivery: To provide, maintain, and improve our tax optimization platform and AI receipt analysis services
• Receipt Processing: To analyze receipt images, categorize expenses, and calculate tax deductions and relief eligibility
• Account Management: To create and manage your account, authenticate credentials, and maintain account security
• Tax Optimization: To provide personalized tax relief recommendations, calculate estimated tax savings, and optimize your tax position
• Communication: To send service updates, security alerts, policy changes, and support responses
• Referral Program: To track referrals, calculate commissions, process payouts, and manage the affiliate program
• Payment Processing: To process subscriptions, collect payments, and maintain billing records through Stripe
• Analytics and Improvements: To analyze usage patterns, identify trends, and improve service features and user experience
• Customer Support: To respond to inquiries, troubleshoot issues, and provide technical assistance
• Legal Compliance: To comply with Malaysian tax laws, financial regulations, and legal obligations
• Fraud Prevention: To detect, prevent, and address fraudulent activities, security breaches, and abuse
• Marketing Communications: To send promotional materials, newsletters, and service updates (only with your consent)

4. Legal Basis for Processing

We process your personal information based on the following legal grounds:

• Contractual Necessity: To fulfill our service agreement and provide tax optimization services
• Legitimate Interests: To improve our services, prevent fraud, and maintain platform security
• Consent: Where you have explicitly consented to data collection for specific purposes
• Legal Obligation: To comply with Malaysian tax laws, PDPA (Personal Data Protection Act), and financial regulations
• Performance of Public Task: To assist with tax optimization within Malaysian legal frameworks

5. Data Sharing and Disclosure

5.1 Third-Party Service Providers

We share your information with trusted third-party service providers who assist us in operating our website and conducting our business:

• Stripe: Payment processing and billing management
• WaSender API: WhatsApp message delivery and webhook management
• Cloudflare R2: Secure cloud storage for receipt images and documents
• Email Service Providers: For transactional and marketing communications
• Analytics Providers: To understand usage patterns and improve services

All service providers are contractually bound to use your information only as necessary to provide services and maintain strict confidentiality.

5.2 Legal Compliance

We may disclose your information when required by law or when we reasonably believe disclosure is necessary to:

• Comply with applicable laws, regulations, and court orders
• Enforce our Terms of Service and other agreements
• Protect the rights, privacy, safety, or property of TaxSaver AI, users, or the public
• Detect, prevent, or address fraud, security issues, or technical problems
• Respond to claims of illegal activity

5.3 Business Transfers

If TaxSaver AI is involved in a merger, acquisition, bankruptcy, dissolution, reorganization, or similar transaction, your information may be transferred as part of that transaction. We will provide notice before such transfer if it materially affects this Privacy Policy.

5.4 Non-Sale of Personal Information

We do not sell, trade, rent, or lease your personal information to third parties for their marketing purposes. We do not monetize your personal data through data brokers or similar arrangements.

6. Data Security

We implement comprehensive security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction:

• Encryption: SSL/TLS encryption for data in transit; AES-256 encryption for sensitive data at rest
• Access Controls: Role-based access restrictions limiting employee access to sensitive information
• Authentication: Password hashing, JWT tokens, and multi-factor authentication support
• Secure Cloud Storage: Cloudflare R2 with encryption for receipt images and documents
• Network Security: Firewalls, intrusion detection, and regular security audits
• Application Security: Regular code reviews, vulnerability assessments, and security testing
• Employee Training: Data protection and privacy training for all personnel with data access
• Incident Response: Documented procedures for security breach detection and notification

While we implement rigorous security measures, no system is completely secure. We cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your login credentials and account information.

7. Data Retention

We retain your personal information only for as long as necessary to provide our services and comply with legal obligations:

• Account Data: Retained during active account status. Deleted within 90 days of account deletion unless legally required otherwise
• Receipt Data: Retained for the tax year plus 7 years to comply with Malaysian tax authority record-keeping requirements
• Transaction Records: Retained for 7 years for tax and financial compliance purposes
• Support Communications: Retained for 2 years after last contact for service improvement and dispute resolution
• Marketing Data: Retained until you unsubscribe from marketing communications
• Usage Analytics: Aggregated analytics data retained indefinitely; personally identifiable data deleted after 12 months

When information is no longer needed, we securely delete or anonymize it. In some cases, we may retain information longer when required by law, regulation, or for legitimate business purposes.

8. Your Privacy Rights

Subject to applicable laws, you have the following rights regarding your personal information:

• Right to Access: Request a copy of the personal information we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete information
• Right to Erasure: Request deletion of your personal information (subject to legal obligations)
• Right to Restrict Processing: Request limitation of how we process your data
• Right to Data Portability: Request your data in a structured, commonly used, machine-readable format
• Right to Object: Object to certain types of processing including marketing communications
• Right to Withdraw Consent: Withdraw previously given consent at any time
• Right to Lodge Complaints: File complaints with Malaysian personal data protection authorities

To exercise any of these rights, contact us at hello@mytaxsaverai.com. We will respond to your request within 30 days (or as required by law). You may also manage some preferences through your account settings.

9. Cookies and Tracking Technologies

We use cookies, web beacons, pixels, and similar tracking technologies to:

• Maintain your session and login status
• Remember your preferences and settings
• Analyze usage patterns and service performance
• Prevent fraud and improve security
• Deliver personalized content and recommendations

Cookie Types:

• Essential Cookies: Required for platform functionality; cannot be disabled
• Functional Cookies: Remember preferences and settings
• Analytics Cookies: Track usage patterns for service improvement
• Marketing Cookies: Enable personalized advertising (only with consent)

You can control cookie preferences through your browser settings. Disabling certain cookies may affect platform functionality. We respect Do Not Track (DNT) signals where applicable.

10. International Data Transfers

While TaxSaver AI operates primarily in Malaysia, your information may be transferred to, stored in, and processed in countries other than your country of residence, including countries with different privacy laws. By using our service, you consent to the transfer of your information to countries outside Malaysia. We implement appropriate safeguards for international transfers, including standard contractual clauses and adequacy decisions where applicable.

11. Children's Privacy

TaxSaver AI does not knowingly collect personal information from children under 18 years of age. Our services are intended for adults responsible for managing their own taxes. If we discover that we have collected information from a child, we will promptly delete such information. If you are a parent or guardian and believe we have collected information about your child, please contact us immediately at hello@mytaxsaverai.com.

12. Malaysian Personal Data Protection Act (PDPA) Compliance

As a service operating in Malaysia, we comply with the Personal Data Protection Act 2010:

• We collect and process personal data fairly and lawfully
• We only use personal data for specified, explicit, and legitimate purposes
• We keep personal data adequate, relevant, and limited to stated purposes
• We maintain data accuracy and completeness
• We maintain security over collected personal data
• We retain data only as long as necessary under Malaysian law
• We provide access to individuals regarding their personal data
• We maintain accountability measures for data processing

13. Third-Party Links and Services

Our website and application may contain links to third-party websites and services, including WhatsApp, Stripe, and other platforms. This Privacy Policy applies only to TaxSaver AI. We are not responsible for the privacy practices of linked third-party services. Please review their privacy policies before sharing information with them.

14. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of significant changes by:

• Posting the updated policy on our website with an updated "Last Updated" date
• Sending email notification for material changes
• Requiring re-acceptance of the policy before continued service use (if required)

Your continued use of our service following the posting of changes constitutes your acceptance of those changes. We recommend reviewing this policy periodically for updates.

15. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

We will respond to privacy inquiries within 30 days. If you are not satisfied with our response, you may lodge a complaint with the Malaysian Ministry of Communications and Multimedia or relevant data protection authority.