Security & Data Protection Policy

Last Updated: October 2, 2026

At PlatformTaxHub, we treat your financial data with the same level of security as a bank. We understand that trust is the foundation of our service.

1. Infrastructure Security

• Hosting: Our infrastructure is built on Netlify.
• Encryption: Data sent to our payment processor, AI processing provider, and exchange rate providers is encrypted in transit using TLS 1.2+.
• Records stored on your device: The income and expense records you enter are stored on your device rather than on our servers. We keep no copy of your reports or their figures: for each finalised report we keep only its reference, issue date and a fingerprint of the file (a code that cannot be turned back into the figures), plus the date your account started, each against a one-way hash of your email address.

2. Data Handling

• No Data Selling: We do not sell your personal or financial data to third parties.
• No Bank Connections: We do not connect directly to your bank accounts. You enter income and expense data manually or via CSV import, so you control exactly what is shared with us.
• Data Minimization: We only collect the data necessary to provide our tax and financial insights services.

3. Payment Security

• PCI DSS: We use Stripe for all payment processing. PlatformTaxHub does not store or process your credit card information directly. Stripe is a PCI Service Provider Level 1 certified processor.

4. Access Control

• Authentication: We use secure, token-based authentication for user sessions.
• Internal Access: Access to customer data by PlatformTaxHub staff is strictly controlled, logged, and limited to employees who require it for support or engineering purposes.

If you have any questions about our security practices, please contact us.