Privacy Policy

Last Updated: September 5, 2026

1. Introduction & Scope

PlatformTaxHub is owned and operated by 4042 Solutions Group LLC ("we," "us," or "our"). This Privacy Policy explains how we collect, use, and protect the personal and financial data of our users globally, including those in the EU and UK.

This policy covers all subsidiaries and associated brands, including but not limited to platformincome.com and platformearners.com. It applies to your use of our website, web application, free tools, widgets, browser extensions, and downloadable templates.

This policy reflects the requirements of the UK GDPR, the UK Data Protection and Digital Information Act 2024 (DPDI Act), the EU GDPR, and applicable data protection laws in the jurisdictions where we operate.

2. Legal Basis for Processing

We process your data under the following legal bases:

• Contractual Necessity: To provide the tax estimation, income tracking, and financial reporting services you subscribe to.
• Legitimate Interests: For fraud prevention, security, service improvement, and improving our AI strategy engine. Under the DPDI Act 2024, we rely on legitimate interest for recognised activities including analytics, network security, and direct marketing to existing customers (with opt-out available).
• Consent: For marketing communications to non-customers and any processing beyond what is strictly necessary for service delivery. You may withdraw consent at any time.
• Legal Obligation: Where we are required to retain records or report data by law (e.g., financial record retention requirements).

3. Data We Collect

• Identity & Business Data: Full name, business name, registered address, and tax identifiers (VAT ID, UTR, SSN, TIN, RC Number).
• Financial Data: Income streams, expenses, platform fees, and transaction data uploaded by you from third-party platforms.
• Technical Data: IP address, browser type, device information, and usage patterns collected via cookies and server logs.
• Payment Data: We use Stripe for payment processing. We do not store credit card numbers on our servers. Stripe processes payment data under their own privacy policy.
• AI Processing Data: Where you use our Growth Engine, AI Strategy, or free AI-powered tools, the financial and income data you provide is sent to Google's Gemini API for processing in order to generate personalised recommendations and categorisations. We do not currently operate a backend database — this data is transmitted for processing only, and no persistent copy is retained on our servers. Google processes this data under its own privacy policy (policies.google.com/privacy).
• Browser Extension Data: Our Chrome extensions generate a randomly-generated anonymous identifier on install, which is not linked to your name, email address, or account. Alongside this identifier, we log which domain, tool, and role was shown to you within the extension. We do not collect your email address, browsing history, or the content of any page you visit. This data is used solely to improve the accuracy and relevance of tool suggestions.

4. International Data Transfers

As a US-based entity (4042 Solutions Group LLC), we transfer and process data on servers in the United States.

For users in the UK: transfers are protected by the UK International Data Transfer Agreement (IDTA) or UK Addendum to EU Standard Contractual Clauses, as applicable under the DPDI Act 2024 framework.

For users in the EU: transfers are protected by EU Standard Contractual Clauses (SCCs) as approved by the European Commission.

We conduct Transfer Impact Assessments where required to ensure the level of protection for your data is not undermined by the transfer.

5. Data Retention

• Financial records: Retained for 7 years from the end of the tax year to which they relate, in line with HMRC, IRS, and equivalent regulatory requirements.
• Account data: Retained for the duration of your account plus 30 days after deletion request.
• Technical/analytics data: Aggregated analytics retained indefinitely. Individual-level technical logs retained for 26 months.
• Browser extension identifiers: The anonymous identifier and associated domain/tool/role logs described in Section 3 are retained for up to 26 months, consistent with our other individual-level technical logs.
• Marketing data: Retained until you unsubscribe or withdraw consent.

You may request deletion of your data at any time (see Section 7). Where we have a legal obligation to retain data, we will inform you of the retention period and reason.

6. Data Security

We implement:

• TLS/SSL encryption for data in transit, including data sent to our payment processor, our AI processing provider, and our exchange rate providers
• Access controls limiting data access to authorised personnel
• Regular security assessments
• Local browser storage: We do not currently operate a backend database. Financial and income data you enter into your dashboard is stored locally in your browser rather than on our servers, so its security also depends on the security of your own device.

7. Your Rights

Under the UK GDPR and DPDI Act 2024, you have the following rights:

• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Request correction of inaccurate or incomplete data.
• Right to erasure: Request deletion of your data where there is no compelling reason for continued processing.
• Right to restrict processing: Request that we limit how we use your data.
• Right to data portability: Receive your data in a structured, machine-readable format and transfer it to another controller.
• Right to object: Object to processing based on legitimate interests, including direct marketing.
• Rights related to automated decision-making: Our AI features provide recommendations only — no decisions with legal or similarly significant effects are made solely by automated means.

To exercise any of these rights, contact [email protected] with "[Privacy]" in the subject line.

We will respond within one calendar month. In complex cases, this may be extended by two further months — we will inform you if this applies.

If you are unsatisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or your local supervisory authority.

8. Children's Data

PlatformTaxHub is not directed at individuals under 18. We do not knowingly collect data from minors. If we become aware that we have collected data from a person under 18, we will delete it promptly.

9. Third-Party Services

We use the following third-party processors:

• Stripe — payment processing (stripe.com/privacy)
• Google (Gemini API) — AI-generated recommendations and categorisation (policies.google.com/privacy)
• Google Sheets (via Google Apps Script) — records affiliate/referral codes solely to credit the correct affiliate for a signup (policies.google.com/privacy)
• Resend — transactional emails, e.g. welcome and verification emails (resend.com/legal/privacy-policy)
• Beehiiv — newsletter delivery (beehiiv.com/privacy)
• ExchangeRate-API and Frankfurter API — currency exchange rate data

Each third party processes data under their own privacy policy. We have data processing agreements in place with each.

10. Changes to This Policy

We update this policy when our data practices change or regulations are amended. The "Last Updated" date at the top reflects the most recent revision. Material changes affecting your rights will be communicated via email to registered users and via a prominent notice on the website.

11. Contact

For questions, data requests, or complaints:

Email: [email protected]

Data Controller: 4042 Solutions Group LLC

Supervisory Authority (UK): Information Commissioner's Office — ico.org.uk