TaxAgentPortal provides software infrastructure. The firm using the platform remains responsible for how it collects, uses, manages, and handles client information within its own professional relationship.
1. Information we collect
- Account info: name, email, phone, firm details, role.
- Client info entered by firms: contact details, entity info, identifiers used for tax workflows.
- Tax documents: files uploaded by firms or their clients (receipts, statements, returns, BAS records).
- Usage data: log data, device/browser info, IP, feature usage analytics.
- Payment data: processed by Stripe; we do not store card numbers.
2. How we use information
- To provide and operate the platform.
- To authenticate users and protect accounts.
- To process subscription payments.
- To communicate operationally about the service.
- To improve product quality and security.
3. Where data is stored
Tax Agent Portal uses third-party cloud infrastructure to provide its services. The current production database, authentication data, file storage and backups are hosted in Singapore. Some service providers may also process data in other locations where they operate. Where personal information is processed outside Australia, Tax Agent Portal applies appropriate security and contractual safeguards.
4. Third-party services
Third-party service providers may process or access customer data as needed to provide their services to Tax Agent Portal. These include Supabase / Lovable Cloud (database, authentication and file storage), Lovable (application hosting and deployment), Stripe (payment processing), Calendly (appointment scheduling and calendar integration services, where connected by a firm), and Lovable Emails (managed delivery of app emails, including invitations, notifications and password resets). See Subprocessors for the current list.
5. Security
See our Data Security Statement for technical safeguards. No system is 100% secure; you must keep your password and devices secure.
6. Access control
Row-level security restricts records to the firm and roles permitted to view them. Clients can only see their own records. Staff see only their own firm.
7. Data retention
We retain data for as long as your account is active or as needed to provide the service. Firms may request export or deletion subject to legal retention obligations that apply to them.
8. Your rights
You may request access, correction, or deletion of your personal information by contacting us. Where firms control client data, requests from clients should be directed to the firm first.
9. Breach notification
If we become aware of a personal information breach that is likely to result in serious harm, we will notify affected users and act in accordance with applicable notification laws.
10. International / global users
The platform may be accessed globally. Users outside Australia are responsible for ensuring use complies with their local privacy laws (e.g. GDPR, CCPA).
11. Contact
Privacy enquiries: legal@taxagentportal.com.au