Privacy Policy

1. Introduction

CYBER MIND Unipessoal LDA (“we”, “us”, “our”) operates taxclara (taxclara.pt). This Privacy Policy explains how we collect, use, and protect your personal data when you use our service, including bank account data accessed via PSD2-compliant open banking providers.

2. Data We Collect

We may collect and process the following categories of data:

• Waitlist data - email address and stated plan preference when you join the waitlist.
• Account information - bank account names, IBANs, and balances retrieved via PSD2 open banking APIs.
• Transaction data - transaction dates, amounts, descriptions, and counterparty information from linked bank accounts.
• Authentication data - session tokens and consent validity periods for bank connections.

3. How We Use Your Data

Your data is used exclusively to:

• Notify you when early access opens (waitlist emails).
• Display your bank account balances and transaction history within the application.
• Estimate your Portuguese tax obligations (IRS, IVA, Seguça Social) in English.
• Generate financial summaries and tax-ready exports.

We do not sell, share, or transfer your personal data to any third parties for marketing purposes.

4. Data Storage & Security

All data is stored in an encrypted database hosted in the EU. Bank connections use PSD2-compliant read-only open banking APIs. Consent tokens expire according to each bank’s policy and must be re-authorized by you.

5. Data Retention

Waitlist entries are kept until the service launches or you request removal. Bank connection data is retained while the connection is active. You can disconnect any bank at any time, permanently deleting the connection and associated account information.

6. Your Rights

Under GDPR and Portuguese data protection law, you have the right to access, correct, delete, and export your personal data. To exercise these rights, email hello@taxclara.pt.

7. Third-Party Services

We use PSD2-regulated Account Information Service Providers (AISPs) to securely access bank account data on your behalf. These providers do not store your financial data - they act as a pass-through to your bank’s API. We also use Resend to send transactional emails.

Inside the app, documents you submit (such as receipt photos) are read by AI models from Anthropic under a data processing agreement — never used to train AI models, retained by Anthropic only briefly, and sent without your name or account identity attached. Plain-language details at taxclara.pt/trust; the app’s full policy is at app.taxclara.pt/privacy.

9. Contact

For any questions regarding this Privacy Policy, contact us at hello@taxclara.pt.