Privacy Policy
Last updated: August 2026
TaxOne is committed to protecting your privacy. This policy outlines what information we collect, how we use and protect it, and what rights you have over it.
1. Information We Collect
Account details (name, email, password), your Georgian taxpayer ID, monthly revenue figures, invoices and receipts you upload, and bank statement PDFs necessary to compile your declaration. If you connect your rs.ge account, we collect the credentials and one-time codes needed for your accountant to access the Revenue Service portal on your behalf. We also collect payment metadata (subscription status, plan, billing dates) from our payment processor — never your card number. Messages you send through in-app chat support are stored so our team can respond and keep a record of the conversation.
2. How We Use Your Data
Your uploaded documents and metadata are accessed solely by your matched local Georgian financial accountant to perform calculated audits, compute NBG currency conversions, and file your monthly declarations on the official RS.ge portal. Payment metadata is used to manage your subscription and billing. We may also use your email to send service notifications — declaration status updates, deadline reminders, and account security alerts.
3. Storage & Security
All user records and files are stored in private Supabase cloud databases with Row Level Security (RLS) policies, so only you and your authorized accountant can read your data. rs.ge credentials are encrypted at rest (AES-256-GCM) and are automatically purged once your accountant has connected your account — we do not keep a long-lived copy of your rs.ge password. TaxOne never stores, views, or processes your card number; all card details are handled directly by our payment provider's PCI-DSS compliant checkout.
4. Third-Party Sharing
We do not sell your data. We share information only with the service providers required to run TaxOne: your assigned financial accountant (to prepare and file your declaration), the Georgian Revenue Service (RS.ge, to submit your declaration), our payment processor (to process subscription payments), our infrastructure provider Supabase (to host your account and files), and our email provider (to send transactional notifications). Each of these providers only receives the data it needs to perform its function.
5. Cookies
TaxOne uses only the essential cookies required to keep you signed in and to protect your session. We do not currently use third-party advertising or analytics cookies. If that changes, this policy will be updated in advance.
6. Data Retention
We retain your submission records and documents for as long as your account is active and for as long as required by Georgian tax and accounting record-keeping obligations. If you close your account, we delete or anonymize your personal data within a reasonable period, except where we are legally required to retain it (for example, financial records relevant to a filed declaration).
7. Your Rights
You may request access to, correction of, or deletion of your personal data, and you may ask us for a copy of the data you provided to us, by contacting us at the email below. We will respond within a reasonable time and may need to verify your identity first. Some requests may be limited where retention is legally required.
8. Children's Privacy
TaxOne is intended for individuals and businesses of legal working age in Georgia. We do not knowingly collect data from children, and the service is not directed at them.
9. Changes to This Policy
We may update this policy as the service evolves. Material changes will be reflected here with an updated "Last updated" date, and where appropriate we will notify you directly.
10. Contact Us
Questions about this policy or your data can be sent to hello@taxone.ge.