Privacy Policy

SnapTax ("we", "us") helps Australian sole traders and small businesses capture receipts, track GST and prepare BAS records. This policy explains what information we collect and how we handle it, in line with the Australian Privacy Principles (Privacy Act 1988).

Information we collect

• Account details: name, email address and password (stored hashed), and two-factor settings.
• Business details: business name, ABN, entity type and BAS settings you enter.
• Financial records: receipts, invoices and documents you upload, the details extracted from them, and bank statement files you import.
• Gmail data (only if you connect Gmail): see "Google user data" below.
• Security and usage data: sign-in times, device/browser type, IP address and audit logs used to protect your account.

How we use it

• To provide the service: extract receipt details, calculate GST, match bank lines and produce reports.
• To keep your account secure and prevent fraud.
• To contact you about your account or important changes.

We do not sell your personal information and do not use it for advertising.

Google user data

If you choose to connect Gmail, SnapTax requests read-only access to search your mailbox for messages that look like receipts or invoices. We only read messages and attachments needed to import receipts you select. Imported receipts are stored in your SnapTax account; we do not store the rest of your mailbox.

SnapTax's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is not used for advertising, is not sold, and is not read by humans except with your consent, for security purposes, or to comply with law. You can disconnect Gmail at any time from Settings, which stops all further access.

AI processing

Receipt images are processed by AI models to read merchant, date, ABN, GST and totals. This processing is used only to provide the service to you and not to train third-party models.

Sharing

• With people you invite, such as your accountant or bookkeeper, at the access level you choose.
• With service providers who host and process data on our behalf under confidentiality obligations.
• Where required by law.

Storage and security

Data is encrypted in transit and stored with access controls that restrict each record to members of its business profile. We offer two-factor authentication and keep security audit logs. Some providers may store data outside Australia; we take reasonable steps to ensure they protect it to an equivalent standard.

Retention and deletion

We keep your records while your account is active so you can meet ATO record-keeping obligations (generally five years). You can delete receipts at any time, or ask us to delete your account and associated data.

Your rights

You may access, correct or request deletion of your personal information, or complain about how we handled it, by emailing us. If unresolved, you may contact the Office of the Australian Information Commissioner (oaic.gov.au).

Contact

Email: privacy@snaptax.au