FBR e-invoicing deadline reached — Is your business compliant?  Start Free Trial →
Sign In Start Trial

Privacy Policy

Last updated: July 11, 2026

TaxConnect (“we,” “our,” “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service, website, and related applications (collectively, the “Service”).

By using the Service, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

Personal Information

When you register for an account, we collect:

  • Your full name and email address
  • Company name, business NTN, and business address
  • Phone number and billing information

Accounting Data

When you connect your accounting software, we receive:

  • Xero OAuth tokens (read-only scope — we never modify your data in Xero)
  • QuickBooks OAuth tokens (read-only scope)
  • Invoice details including customer names, amounts, tax codes, and HS codes

Usage Data

We automatically collect certain information when you visit the Service, including:

  • IP address, browser type, and operating system
  • Pages visited and time spent on each page
  • Referring URL and device identifiers

2. How We Use Your Information

We use the information we collect for the following purposes:

  • Invoice Processing: To transform and submit your invoices to PRAL/FBR in compliance with applicable regulations.
  • Service Provision: To operate, maintain, and improve the Service.
  • Support: To respond to your inquiries, troubleshoot issues, and provide customer support.
  • Billing: To process payments and manage your subscription through our billing partner.
  • Compliance: To comply with legal obligations and enforce our Terms of Service.

3. Data Storage and Security

We implement industry-standard security measures to protect your data:

  • Encryption in Transit: All data transmitted between your browser and our servers is encrypted using TLS 1.2 or higher.
  • Encryption at Rest: Data stored on our servers is encrypted using AES-256 encryption.
  • Access Controls: Role-based access control ensures only authorized personnel can access your data.
  • Data Centers: Our infrastructure is hosted on secure cloud providers with physical security controls.

We retain your data for as long as your account is active or as needed to provide the Service. Upon account cancellation, we retain your data for 90 days before secure deletion, unless required otherwise by law.

4. Third-Party Sharing

We share your information only as necessary to provide the Service:

  • Xero API: To fetch invoices for processing (OAuth-based, read-only).
  • QuickBooks API: To fetch invoices for processing (OAuth-based, read-only).
  • FBR / PRAL: To submit invoices as required by Pakistani law. Only invoice data necessary for compliance is transmitted.
  • Polar (Billing): To process subscription payments. No invoice or accounting data is shared with Polar.

We do not sell your personal information to third parties. We do not share your data for advertising or marketing purposes.

5. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

  • Access: Request a copy of the personal data we hold about you.
  • Correction: Request that we correct inaccurate or incomplete data.
  • Deletion: Request deletion of your personal data, subject to legal retention requirements.
  • Portability: Request a machine-readable copy of your data.
  • Withdraw Consent: Withdraw consent at any time where we rely on consent to process your data.

To exercise any of these rights, please contact us at [email protected].

6. Cookies and Tracking

We use cookies and similar tracking technologies to enhance your experience, analyze usage, and support our marketing efforts. You can control cookie preferences through your browser settings. We use:

  • Essential Cookies: Required for the Service to function.
  • Analytics Cookies: To understand how you interact with our website (Google Analytics).
  • Marketing Cookies: For Facebook, LinkedIn, and Google Ads campaigns.

7. Data Transfer

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.

8. Children’s Privacy

Our Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal data, we will take steps to delete it.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the “Last updated” date.

10. Contact Us

If you have any questions about this Privacy Policy, please contact us: