Privacy Policy

What you enter

You may enter income, country and region, filing status or tax regime, work frequency, household details, contribution assumptions, and names for saved estimates or family profiles. The calculator processes these details in your browser. Calculating and saving locally do not require an account or upload a financial scenario. Signing in alone does not upload existing local estimates.

What stays on this device

Estimates saved on this device stay in browser IndexedDB unless you deliberately sync them. The local store also contains a draft, workspace nickname and migration recovery data. Older local browser records may remain so existing data can be imported without losing the originals. Local records are not protected by a TaxCalcy password or application-level encryption. Someone with access to your browser profile may be able to view them.

Local data normally remains until you delete it or clear this site's browser storage. Clear estimate history leaves profiles, the draft and some recovery data; use Remove all local data for the app's known local copies. Downloaded backups and reports must be deleted separately. TaxCalcy cannot remotely recover local records after your browser removes them. Local-only records do not automatically appear on another device, and private browsing may discard them sooner.

Household Budget Planner

Household income, contributors, bills, payment dates, goals, actuals and notes are processed locally. Named saves, backups and restores are explicit. A separate versioned local recovery draft is retained while you edit, so an unfinished plan may be recovered in the same browser. This draft is not uploaded or included in account export.

An optional calculator or Job Offer handoff keeps only the deliberately selected monthly take-home amount, currency and source type in this tab for up to 24 hours. It is not placed in URLs, billing rows, Stripe metadata or analytics. Purchase access is separate from household records; signing in on another device does not restore budgets there.

Blank, fictional and personalized workbooks require the Budget product entitlement. Personalized generation happens in your browser. Backups and workbooks contain your inputs; keep them private. Clearing browser data can remove local plans. Account deletion does not automatically erase local budgets or downloaded files.

Job Offer Planner

Offer labels, optional employer labels, pay inputs, costs, time, benefit notes, priorities, scenarios and decision records are processed in your browser. Named saves are explicit, and a separate local recovery draft is retained while you edit. There is no automatic cloud sync. A verified account and purchase entitlement control access to the paid planner, while saved drafts and result snapshots use separate versioned browser localStorage. Signing in or purchasing does not upload planner records.

Filled Excel workbooks are generated locally from your comparison. They contain your information; where you save or share them controls who can access it. Blank templates and fictional examples are separate downloads available to an entitled account. Optional product-testing counts stay in memory for the current visit after you opt in, contain action counts without field values or identifiers, and are not uploaded. You can choose to download those counts or turn counting off to clear them.

Delete planner briefs from the planner's Saved briefs section. Calculator estimate deletion controls do not delete planner records. Clearing site storage removes both; downloaded briefs and recovery copies must be deleted separately. Planner records are not encrypted by TaxCalcy and may be visible to someone with access to your browser profile. Exporting requests a local file download; sharing that file is your choice. No full offline-operation promise is made.

Fictional examples and recovery copies

Each planner keeps a fictional workspace separately from your personal plan. Edited examples and the original draft are retained locally across refresh. Copying an example creates a separate draft with new record identifiers where applicable; review its fictional inputs before personal use. Returning to the prior draft retains a local recovery copy of the copied draft. These records are not account ownership and are not uploaded. Clearing this site's browser storage removes these working copies; downloaded files remain separate.

Account, purchases and synced estimates

Signing in

Supabase provides passwordless email authentication and the account database; Google remains an alternative sign-in provider. TaxCalcy receives the account identifier, verified email and basic display information supplied for sign-in. We request only Google identity scopes, not access to Gmail, Drive, Calendar or Contacts. An account email is not automatically enrolled in marketing.

Optional sync and account export

If you press a Sync control, the selected scenario's name, relationship label, country, region, tax year, calculator inputs, model release context and timestamps are stored with your account in Supabase. The local copy remains on your device. Historical take-home values are not stored as authoritative cloud results; opening a release-aware synced estimate recalculates it with its retained model release. Legacy synced rows without release context remain supported. A separate account export contains basic profile information, validated synced scenario inputs, available model release context and a minimal history of purchased products, versions and access status.

Payments and purchased access

Stripe processes payment details and receipts. TaxCalcy stores the verified account owner, product/version entitlement, order status, timestamps and payment identifiers needed for reconciliation. Salary, employers, offer labels, costs, benefits, notes and decisions are not included in checkout metadata or billing records. Full refunds revoke future access; a workbook already downloaded cannot be remotely removed.

Retention, deletion and sign-out

Synced data remains in the account until you delete individual records, all synced estimates or the account, subject to any applicable provider backups or legitimate retention requirements. Account deletion revokes product access and detaches payment records that must be retained; it does not erase local planner records without a separate device action. Stripe may retain transaction information under its own and TaxCalcy's legal obligations. We do not promise immediate removal from backups. Account deletion is enabled only where privileged server configuration is complete. Payment-record retention still requires owner, legal and accounting approval before live sales. Signing out does not delete local or synced records.

Exports and optional browser tools

When you choose a PNG, PDF/print, copied summary or JSON backup, the output goes to your browser, device, clipboard or chosen print destination. A local backup includes saved inputs and recovery data as plain text; an account export includes synced inputs and account basics. Keep either file private. If you deliberately invoke TaxCalcy through a browser-provided AI tool interface, that interface can receive the scenario and returned estimate under its own provider controls; TaxCalcy itself does not make an external calculation request for that feature.

Website requests, cookies and analytics

Guest calculator use does not require an account. Passwordless email and optional Google sign-in use Supabase authentication and browser cookies to maintain a session. The staging website is hosted by Netlify, which may process ordinary request information such as IP address, requested page, browser details and time. Account actions contact Supabase; Google sign-in contacts Google. TaxCalcy does not currently use advertising, affiliate tracking, production analytics or an error-reporting service. We do not claim that no information ever leaves your device.

Optional aggregate analytics

An integration for Simple Analytics is prepared but disabled by default. If activated on taxcalcy.com, collection requires your affirmative analytics choice and respects Do Not Track and Global Privacy Control. You can decline or change the choice using Analytics preferences. No collection is made on local or test previews.

The allowlisted data is a normalised public route, a named page or button event, broad device category, optional browser time zone for approximate geography, an external referrer hostname and approved campaign code. No full URL, query string, financial input, planner entry, note, name, email, account token or saved-plan identifier is sent. Browser time zone describes approximate visitor geography; it is unrelated to the calculator's tax country.

No advertising identifier, persistent visitor identifier, fingerprint, session replay, keystroke capture or financial-form recording is used. The consent choice is retained locally for up to six months. Event collection is optional; blocking it does not prevent calculations, sign-in or downloads. Download counts describe a request, not confirmed file delivery, and a purchase-return visit is not counted as a fulfilled purchase. Provider retention and applicable consent requirements must be configured before activation.

Other websites

Government sources and benefit-program links open other websites when you choose them. Those sites may receive information from your browser and have their own privacy practices. TaxCalcy does not control them. No affiliate partner links are active in this version.

Security and audience

TaxCalcy uses local storage and application security controls, but no website or device is completely secure. Use a protected browser profile and avoid putting sensitive identifiers in estimate names. TaxCalcy is intended for people planning employment income, not for children.

Contact enquiries

When you contact us, we process the name, email address, enquiry type and message you voluntarily submit to respond to your enquiry. These details pass through our hosting and email providers and are delivered to the TaxCalcy contact mailbox. Please do not submit passwords, government identification numbers, banking details or other sensitive personal information.

To limit abuse, we keep short-lived keyed hashes of the connection address and submission, with attempt counters, in our database. These counters expire within an hour and are removed on subsequent contact requests. Operational logs contain a reference, time, outcome and error category, not your message. Correspondence may remain in our mailbox as needed to handle your enquiry and related follow-up. You can contact us with privacy or deletion questions.

Changes to this policy

When data practices change, this page will be updated with a new last-updated date. Owner identity and legal review are still required before public release. Future analytics, affiliate tracking or a production host would require another review.

Privacy questions

Contact TaxCalcy at contact@taxcalcy.com.