Privacy Policy

1. Introduction

Taash Technologies Inc. ("Company," "we," "us," or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our financial management application and related services (collectively, the "Service").

Please read this Privacy Policy carefully. By using the Service, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Personal Information You Provide

We collect information you provide directly to us, including:

• Account Information: Name, email address, phone number, and password when you create an account
• Profile Information: Business type, industry, and tax filing status
• Communication Data: Information you provide when contacting our support team

2.2 Financial Information

When you connect your bank accounts or financial institutions to Taash, we collect:

• Transaction history and details
• Account balances
• Account and routing numbers (encrypted)
• Financial institution names

Important: We never store your bank login credentials. All financial connections are facilitated through secure, encrypted third-party services (such as Plaid) that comply with banking security standards.

2.3 Receipt and Document Data

When you upload receipts or documents, we collect and process:

• Images of receipts and documents
• Extracted text and data from receipts (merchant name, amount, date, items)
• Categories and tags you assign

2.4 Automatically Collected Information

When you use our Service, we automatically collect:

• Device information (device type, operating system, unique device identifiers)
• Log data (IP address, browser type, pages visited, time spent)
• Usage data (features used, actions taken within the app)
• Location data (general location based on IP address, with your consent for precise location)

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Process and categorize your financial transactions
• Generate tax estimates and financial insights
• Extract and organize data from uploaded receipts
• Send you technical notices, updates, and support messages
• Respond to your comments, questions, and customer service requests
• Detect, prevent, and address fraud, security issues, and technical problems
• Analyze usage patterns to improve user experience
• Comply with legal obligations

4. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

4.1 Service Providers

We share information with third-party vendors who perform services on our behalf, including:

• Financial data aggregation providers (e.g., Plaid)
• Cloud hosting providers
• Analytics providers
• Customer support tools

These providers are contractually obligated to protect your information and use it only for the purposes we specify.

4.2 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency), or to protect our rights, privacy, safety, or property, or that of our users or the public.

4.3 Business Transfers

If we are involved in a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you of any change in ownership or uses of your personal information.

4.4 With Your Consent

We may share your information with third parties when you give us explicit consent to do so.

5. Data Security

We implement appropriate technical and organizational security measures to protect your personal information, including:

• 256-bit AES encryption for data at rest
• TLS 1.3 encryption for data in transit
• Regular security audits and penetration testing
• Multi-factor authentication options
• Strict access controls and employee training
• SOC 2 Type II compliance (or working toward certification)

While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with the Service. We will also retain and use your information as necessary to:

• Comply with legal obligations (e.g., tax and accounting requirements)
• Resolve disputes
• Enforce our agreements

When you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal purposes.

7. Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information:

7.1 Access

You can request a copy of the personal information we hold about you.

7.2 Correction

You can update or correct your personal information through your account settings or by contacting us.

7.3 Deletion

You can request that we delete your personal information, subject to certain exceptions required by law.

7.4 Data Portability

You can request a copy of your data in a structured, commonly used, machine-readable format.

7.5 Opt-Out of Marketing

You can unsubscribe from marketing communications at any time by clicking the "unsubscribe" link in our emails or adjusting your notification preferences.

7.6 Disconnect Financial Accounts

You can disconnect your linked bank accounts at any time through your account settings.

8. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• The right to know what personal information we collect, use, disclose, and sell
• The right to delete your personal information
• The right to opt-out of the sale of personal information (we do not sell data)
• The right to non-discrimination for exercising your privacy rights

To exercise these rights, please contact us at privacy@taash.tax.

9. European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):

• Right to access, rectify, or erase your personal data
• Right to restrict or object to processing
• Right to data portability
• Right to withdraw consent at any time
• Right to lodge a complaint with a supervisory authority

Our legal basis for processing your information includes: performance of a contract, legitimate interests, compliance with legal obligations, and your consent.

10. International Transfers

Your information may be transferred to and maintained on servers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ. If you are located outside the United States and choose to provide information to us, please note that we transfer the data to the United States and process it there. We use appropriate safeguards such as Standard Contractual Clauses to protect your information during international transfers.

11. Children's Privacy

Our Service is not intended for anyone under the age of 18. We do not knowingly collect personal information from children under 18. If we learn we have collected personal information from a child under 18, we will delete that information as quickly as possible. If you believe we might have any information from or about a child under 18, please contact us at privacy@taash.tax.

12. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to:

• Keep you logged in
• Remember your preferences
• Understand how you use our Service
• Improve our Service

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.

13. Third-Party Links and Services

Our Service may contain links to third-party websites or services that are not owned or controlled by us. We have no control over, and assume no responsibility for, the content, privacy policies, or practices of any third-party websites or services. We encourage you to review the privacy policies of every site you visit.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. For significant changes, we will provide additional notice, such as via email or a prominent notice within the Service. Your continued use of the Service after such modifications constitutes your acknowledgment and agreement to the updated Privacy Policy.

15. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us: