TaxTron Connect · Version 2026-09 · In force from [date, set when approved]
TaxTron Connect is the app your tax professional uses to exchange messages, documents, signatures and payment requests with you. This policy says what the app and its service collect, why, who else sees it, how long it is kept, and what you can do about it.
1. Who is responsible
TaxTron Connect is run by 1064654 Ontario Limited, operating as TaxTron, 2292 Islington Ave, Etobicoke, ON M9W 3W8, Canada ("TaxTron", "we").
Your tax professional (the "firm") decides what it asks you for, and keeps its own client records under its own obligations, including the Canada Revenue Agency's record-keeping rules. For what you exchange with a firm, TaxTron holds the information on the firm's behalf and follows its instructions.
TaxTron is responsible for your TaxTron Connect account: signing in, your devices, what you keep for yourself in the app, and keeping the service secure.
The person in charge of protecting personal information at TaxTron is its President. Write to support@taxtron.ca.
2. What we collect
What
Examples
Your account
Your name, email address, Canadian mobile number, language and country, and the version of the terms you accepted. From you, or from the firm's invitation.
Signing in and security
The addresses we sent one-time codes to, when, and from which IP address. Your passkeys' public keys, and your authenticator app's key (encrypted). Each phone's name (for example "Jane's iPhone") and type. When you signed in. A security log of sign-ins and account changes, with IP addresses.
What you send a firm
Messages, documents, photos and scans. Answers to a firm's questions when you ask to become its client. Your details for the firm's client record: your name, date of birth, social insurance number (SIN), phone, email and home address, your marital status, whether you're a Canadian citizen, and when you came to Canada or moved province; and, if you have a spouse or common-law partner, their name and date of birth, and their SIN, phone and email if you give them. Your dependants' names and dates of birth, if you give them. Appointments you book, with the reason you give. Signatures, with the record of when and how you signed. A new phone or email of your own is confirmed with a code sent to it.
What you keep for yourself
In My files: your documents, receipts and scans. In My details: your name, date of birth, address, marital status and citizenship, and your spouse's and dependants' names and dates of birth. Your mileage log: trips, vehicles and odometer readings, which you type in; the app doesn't track your position for it. On the Self-employed plan, your ledger: the date, description, amount and account name of each statement line, and how you sort them. No firm sees any of this unless you send it.
What a firm sends you
Messages, shared documents and returns, signature requests, and payment requests and whether they are paid.
Notifications
The push address Apple or Google gives the app on your phone.
Subscriptions
Your plan, and when it renews or ends. You buy the subscription from TaxTron through Apple or Google, which takes the payment. RevenueCat tells us what you bought, under an id that doesn't name you. We never see your card.
Approximate location
Only when you tap to search for a tax professional near you: your position, rounded to about 1 km, goes with that search. It isn't kept or linked to your account.
Crash and performance reports
When the app fails: what it was doing, the phone model, and the system and app versions. For about 1 in 10 uses of the app, how long screens and requests took, with the addresses it called and any ids removed from them. They are not linked to your account and carry no name, email address or phone number.
We don't collect your precise location, your contacts or any advertising identifier. There are no ads, no tracking across other apps or websites, and no analytics beyond crash and performance reports. We don't sell personal information.
On your phone, the camera opens only when you scan a document or a firm's QR code, and your photos only when you pick one. Face ID or your fingerprint, for the app lock, is checked by your phone; we never receive it.
3. Why we use it
To run your account and sign you in securely: codes, passkeys, a second step when a firm asks for one, and alerts when a new phone signs in.
To carry messages, documents, signatures and payment requests between you and the firms you connect with.
To run what you keep for yourself, including reading receipts and statements when you ask.
To provide your subscription.
To send you codes, invitations, notifications and your firms' reminders.
To keep the service secure: limiting repeated attempts, detecting misuse and investigating incidents.
To fix problems and keep the app fast, from crash and performance reports.
To meet our legal obligations.
We don't use it for anything else without asking you. You don't have to accept any other use. You can withdraw consent at any time, subject to legal limits; for what the account needs to work, that means deleting your account (section 7).
4. Who else sees it
The firms you connect with, and only for the client record they connected you to. A firm you haven't connected with sees nothing, except a request you send it through its join link.
Service providers that work for us, under contracts or service terms that limit what they may do with it:
Provider
What for
Where
Microsoft Azure
Hosting, database, file storage, malware scanning, and reading receipts and statements when you ask. Azure's copy of the result is deleted at once, and we keep neither a CSV nor a PDF statement
Canada
Microsoft Azure Maps
Turning postal codes into places when you search the directory
European Union
Amazon Web Services
Email
Canada
Twilio
Text messages with codes, invitations and notices about your plan, and phone calls with codes
United States
Apple and Google
Delivering notifications. A notification names the firm and says what's new, and a new sign-in notice names the phone; it never carries amounts or document contents
United States and elsewhere
RevenueCat
Managing subscriptions, under an id that doesn't name you
United States
Google ML Kit, on Android
The document and QR-code scanners run on your phone. What you scan stays there; Google receives device and app information and performance measures
United States and elsewhere
Sentry
Crash and performance reports
United States
Expo
Delivering updates to the app
United States
Stripe: when you pay a firm, you pay on Stripe's own page, under Stripe's privacy policy. We never see your card.
Apple and Google: they distribute the app and take payment for subscriptions, under their own privacy policies.
When the law requires it, for example a court order.
Outside Quebec and outside Canada. TaxTron is in Ontario and our main systems are in Canada, so if you live in Quebec your information is held outside Quebec. The providers the table above shows outside Canada also process some of it there, where the authorities of those countries may be able to reach it under their laws. Before doing this we assessed, as section 17 of Quebec's private-sector privacy act requires, how sensitive the information is, why it goes there, how it is protected, including by contract, and the legal framework that applies there. Each of these providers is bound by a written agreement or by the written terms of its service. For written information about how we use providers outside Canada, or to ask about it, write to our President at support@taxtron.ca.
5. How long we keep it
Your account: for as long as you have it. When you ask to delete it in the app, you're signed out everywhere and it is kept for 30 days in case you change your mind (signing in keeps it). Then, or at once when we act on a request by email, we erase your name, email address, mobile number, passkeys and authenticator app, your phones' names and push addresses, My details, your mileage log and ledger, your files in My files, and our copy of any answers or corrections you sent a firm that it hadn't accepted or declined. One email address or phone number may stay while a plan is still renewing; see Your subscription below.
What you keep for yourself: until you remove it or delete your account.
Your subscription: deleting your account doesn't stop the store charging you, so cancel in your App Store or Google Play settings first. If you don't, we treat the deletion as your notice to cancel from the day you ask, and refund any later charge. Until the plan ends in the store, we keep only one email address or phone number, to send you the notices the law requires and to refund you; we then delete it. Our record of the subscription stays, under an id that no longer names you, for 3 years after the subscription ends, in case of a billing question or a claim. We then delete it, with RevenueCat's copy. Apple and Google keep theirs under their own policies.
Notices and refunds: we keep a log of the notices we send you about your plan for 3 years. If we pay you a refund directly, we keep that record, with your name, for 6 years after the end of the tax year it belongs to, as tax law requires.
The one-time code log: 30 days.
The security log: IP addresses are removed after 12 months, and the log after 24 months, including after you delete your account.
Phones you've signed out: the push address is removed at once, and the name after 90 days.
Invitations never accepted: removed 12 months after they expire.
Crash and performance reports: 30 days.
Your details go into the firm's client record, which is the firm's (see the next point). A firm whose own system adds them holds them encrypted with us until it does; if it never does, they're removed after 90 days, and at once when you delete your account. After that, the app shows a SIN on file only masked (for example *** *** 544), and it can't be changed from the app.
Messages and documents you exchanged with a firm are part of that firm's records. They stay with the firm after you delete your account, for as long as the firm's obligations require (for tax records, usually at least six years). Ask the firm about them. So do corrections a firm accepted or declined, and requests to become a client that it accepted, with its reply. A request to become a client that a firm declined stays for 3 years after the firm declined it, then is deleted.
6. How we protect it
Everything is encrypted in transit and at rest.
Sign-in codes expire after 10 minutes, and we keep only a hash of codes and sign-in tokens.
Documents are checked for malware before a firm can open them, and links to documents last 10 minutes.
A firm can require a second step at sign-in. You can add a passkey or an authenticator app, and lock the app with Face ID or your fingerprint.
Our staff can reach your information only when they need to run or fix the service.
If a breach of our safeguards puts you at real risk of significant harm, or a confidentiality incident presents a risk of serious injury to you, we tell you promptly, and we tell the regulators the law requires: the Privacy Commissioner of Canada, the Commission d'accès à l'information du Québec, and Alberta's Information and Privacy Commissioner where it applies.
7. Your choices and rights
See and download: most of what we hold about you is in the app: Account, then Download your data. For the rest, or without the app, write to us (below). We answer within 30 days.
Correct it: change your name, email address and mobile number in Account. To correct a firm's record of you, use Suggest a correction on the firm's page in Account.
TaxTron Connect is for adults dealing with their own taxes. You must be 18 or older to create an account or use the app. The app doesn't accept a date of birth under 18 for you. We don't knowingly collect personal information from anyone under 18. If you think someone under 18 is using the app, write to us at support@taxtron.ca. If we confirm it, we close the account and delete that information, apart from what section 5 says is kept, such as a firm's own records. Your dependants' details reach a firm only when you give them, for the firm's work on your taxes.
9. Changes to this policy
When we change this policy we raise its version, tell you in the app before the new version applies, and show you the new text.