Privacy Policy | MessyTax.com

Summary: We collect only what we need to provide our service. Your uploaded bank statements are used solely to generate your tax report and are deleted from our servers within 48 hours of job completion. Your processed Excel results and extracted data are retained securely so you can access them at any time. We never sell your data.

1. Who We Are

MessyTax.com ("MessyTax," "we," "us," or "our") is an automated financial data extraction and tax organization service. We help self-employed individuals and small businesses organize their bank statement transactions into clean, audit-ready Excel reports. We are not a licensed tax preparer, CPA, or financial advisor.

2. Information We Collect

Account Information

When you create an account, we collect your name, email address, and a hashed password (or OAuth token if you sign in with Google). We use this to authenticate you and communicate with you about your jobs.

Uploaded Documents

You upload PDF bank statements to our service. These files are stored temporarily on our servers solely for the purpose of automated data extraction. Uploaded PDF files are automatically deleted within 48 hours of your job completing, whether it succeeds or fails.

Processed Results

The Excel report and JSON data generated from your statements are stored securely so you can download and access them from your dashboard at any time.

Usage Data

We collect basic usage logs (page views, API calls, error logs) to keep the service running reliably. These logs do not contain your financial data.

Payment Information

Payments are processed by Stripe. We never see or store your full credit card number. We only receive a token and the last four digits of your card for your records.

3. How We Use Your Information

To extract and organize your financial transactions into a structured report
To send you email notifications when your report is ready or if processing fails
To process payments for our services
To respond to your support requests
To comply with applicable laws and regulations

4. Data Retention Schedule

Data Type	Retention Period	Deletion Method
Uploaded PDF bank statements	48 hours after job completion	Automatic - permanent deletion from servers
Excel report & extracted data	Retained for your ongoing use	On request via support
Account information	Until account deletion	On request via support
Payment records	7 years (tax compliance)	Per Stripe's data retention policy
System logs	90 days	Automatic rotation

5. Data Security

Your data is transmitted using TLS (HTTPS) encryption. Files are stored on servers with restricted access. We do not share your uploaded documents or extracted data with any third party except as necessary to provide the service. Our staff cannot access your raw bank statement content — only anonymized processing logs.

6. Your Rights

Access: You can view all your jobs and downloads in your dashboard at any time.
Deletion: You can request deletion of your account and all associated data by contacting us at support@messytax.com.
Portability: Your Excel report is always available for download from your dashboard.
Correction: You can update your account information from your dashboard settings.

7. Cookies

We use minimal session cookies to keep you logged in and a short-lived cookie for secure OAuth flow (PKCE). We do not use advertising cookies or track you across other websites.

8. Changes to This Policy & Pricing

We may update this Privacy Policy from time to time. We will notify you of significant changes by email. Continued use of the service after changes constitutes acceptance of the updated policy.

Pricing Adjustments: We reserve the right to change and adjust our subscription pricing at any given time. We will provide prior notice at least 7 days before any pricing changes take effect.

9. Contact

For privacy-related questions or data deletion requests, contact us at support@messytax.com or use our contact form.