Privacy Policy

1. Introduction

CYBER MIND Unipessoal LDA (“we”, “us”, “our”) operates taxclara (taxclara.pt). This Privacy Policy explains how we collect, use, and protect your personal data when you use our service, including bank account data accessed via PSD2-compliant open banking providers.

2. Data We Collect

We may collect and process the following categories of data:

• Email sign-ups - your email address, and the page you signed up on, when you ask for deadline reminders or for your calculator results by email.
• IRS check steps by email - if you ask for your next steps by email, the list of steps with their dates and amounts is sent to us once, to email it to you, and is not stored. The documents you check stay in your browser and are never uploaded.
• Account information - bank account names, IBANs, and balances retrieved via PSD2 open banking APIs.
• Transaction data - transaction dates, amounts, descriptions, and counterparty information from linked bank accounts.
• Authentication data - session tokens and consent validity periods for bank connections.

3. How We Use Your Data

Your data is used exclusively to:

• Send the deadline reminders, results and IRS check emails you asked for.
• Display your bank account balances and transaction history within the application.
• Estimate your Portuguese tax obligations (IRS, IVA, Segurança Social) in English.
• Generate financial summaries and tax-ready exports.

We do not sell, share, or transfer your personal data to any third parties for marketing purposes.

4. Data Storage & Security

All data is stored in an encrypted database hosted in the EU. Bank connections use PSD2-compliant read-only open banking APIs. Consent tokens expire according to each bank’s policy and must be re-authorized by you.

5. Data Retention

Email sign-ups are kept until you unsubscribe or ask us to remove them. Bank connection data is retained while the connection is active. You can disconnect any bank at any time, permanently deleting the connection and associated account information.

6. Your Rights

Under GDPR and Portuguese data protection law, you have the right to access, correct, delete, and export your personal data. To exercise these rights, email hello@taxclara.pt.

7. Third-Party Services

We use PSD2-regulated Account Information Service Providers (AISPs) to securely access bank account data on your behalf. These providers do not store your financial data - they act as a pass-through to your bank’s API. We also use Resend to send transactional emails.

Inside the app, documents you submit (such as receipt photos) are read by AI models from Anthropic under a data processing agreement — never used to train AI models, retained by Anthropic only briefly, and sent without your name or account identity attached. Plain-language details at taxclara.pt/trust; the app’s full policy is at app.taxclara.pt/privacy.

If you accept cookies, we use PostHog to understand how the site and app are used — which pages and guides are read, and whether people who arrive here go on to use the app. PostHog is a data processor under a data processing agreement, and our data is hosted on their EU infrastructure. It sets a cookie on .taxclara.pt so that a visit to this site and a later visit to the app are recognised as the same person rather than two strangers. Nothing is sent to PostHog unless you accept cookies, and declining leaves the site fully functional. We do not send PostHog your bank data, transaction amounts, or the contents of documents you upload.

9. Contact

For any questions regarding this Privacy Policy, contact us at hello@taxclara.pt.