Privacy Policy

Hepta Care Pty Ltd (ABN 73 666 661 338) | Last updated: 1 July 2025

Taxlyy respects your privacy. This Privacy Policy explains how we collect, use, and protect your personal information when you use Taxlyy Individual or Taxlyy Business. We comply with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth).

1. What information we collect

Taxlyy Individual (One‑off report)

  • No permanent storage of personal or tax data.
  • Session‑only data: income, deductions, employer details, name, email (used only to generate your report and send it to you).
  • Payment information is processed by Stripe; we do not receive or store your card details.

Taxlyy Business (Subscription)

  • Account information: name, email, business ABN/ACN (optional), address.
  • Business data: invoices, client details, expenses, depreciation schedules, BAS reports.
  • Usage data: logins, feature usage (to improve our service).

2. How we use your information

  • To provide the Taxlyy service (generate reports, send invoices, calculate BAS).
  • To communicate with you (support, billing, updates).
  • To improve and secure our platform.
  • To comply with legal obligations (e.g., tax record keeping for 5 years for Business subscribers).

3. Data storage & security

Taxlyy Individual does not permanently store your tax data – it exists only during your browser session and is deleted when you close the page. Taxlyy Business data is stored encrypted on secure Australian‑based servers (AWS Sydney region). We implement industry‑standard security measures, but no method is 100% secure. You are responsible for keeping your login credentials safe.

4. Sharing your information

We do not sell or rent your personal information. We may share data with:

  • Stripe – to process payments (your name, email, payment amount).
  • Legal authorities – if required by law or to enforce our terms.
  • Service providers – email delivery, hosting, analytics (anonymous, aggregated).

5. Cookies & tracking

Taxlyy Individual uses session storage only – no persistent cookies. Taxlyy Business uses essential cookies to maintain your logged‑in session and preferences. We do not use advertising or third‑party tracking cookies.

6. Your rights

You may access, correct, or request deletion of your data (except where we are required to keep records for tax purposes – e.g., invoice data for 5 years). For Taxlyy Business, you can export all your data from your account settings. To exercise your privacy rights, email privacy@taxlyy.com.au.

7. Data retention

  • Taxlyy Individual: No retained data after report generation (except transaction records for accounting – stored by Stripe).
  • Taxlyy Business: We retain your data while your subscription is active. After cancellation, you have 30 days to export. After 30 days, we may delete your data, except for invoices and financial records required by the ATO (kept for 5 years).

8. Children’s privacy

Taxlyy is not intended for persons under 18. We do not knowingly collect data from minors. If we become aware, we will delete it.

9. Changes to this policy

We may update this Privacy Policy. Continued use after changes constitutes acceptance. Material changes will be notified via email or through your account dashboard.


← Back to Taxlyy
© 2026 Hepta Care Pty Ltd. All rights reserved.