Privacy Policy

Last update: 14th March, 2025

Thank you for choosing Taxxa AI!

We, Taxxa AI Oy, value your privacy and We are committed to safeguarding your personal information and being transparent about the data we collect and how we use it.

Our Privacy Policy applies to all interactions you may have with Taxxa AI and is intended to help you understand our practices concerning the collection, use, and disclosure of information. We retain the right to amend or update this Privacy Policy at any time. The updated version will be indicated by an updated "Last update" date, and the updated version will take effect immediately as soon as it is accessible.

Your Global Privacy Rights

No matter where you live, where you reside, where your citizenship lies, or where your data originates from, your interactions with Taxxa AI are governed by this Privacy Policy and you agree to the data practices described in this policy.

Data We Handle

Scope of Engagements

Information collection and processing occur through various interactions, including but not limited to: Customers using our services via different platforms (e.g. Website, AI Assistant Services) or Non-Customers connecting with us outside service agreements, like Visitor visiting/navigating our online website or otherwise communicating with us through various communication channels in whatever form, including but not limited to social media channels, phone/e-mail or giving feedback and making inquiries or signing up for our marketing communication or our newsletters. All these interactions are referred to as "Engagements" within this policy irrespective of the depth or nature of your association with us.

Roles in Data Handling

This policy applies uniformly to all engagement types, whether you're just a casual Visitor, a paying Customer, a prospect, or an event Participant. Depending on the Engagements you use, our role in processing your data might be as: (i) a data processor, under an Agreement with you, when you control the information We process, or (ii) a data controller handling Personal Data collected during your interaction with us independently of the Agreement.

Grounds for Processing

When acting as a data controller, signifying that We have authority over the reasons and methods behind processing your Personal Data, We rely on various legal bases for processing your data. These include: (i) Your request: to fulfill our commitments to you and to respond to your requests, (ii) Legal Compliance: to adhere to our legal obligations, (iii) Your Consent, and (iii) Legitimate Interests: such as providing you with our Engagements functionality (e.g. Website), supporting their continuous improvement, operational management, understanding its use, maintaining the reliability of our systems and related technologies and other customer service and support purposes. In such scenarios, We consistently strike a balance between our interests and your privacy rights. As a data processor, our relationship is governed by the Agreement with you, which sets out our respective obligations and rights.

Types and Sources of Data

Our Engagements may collect and process your information including Personal Data depending on how you interact with us, the choices you make, and the Engagements and features you use. The sources of this information include what you share, our automated systems, and third-party sources and contain both your Personal and Non-Personal data, including, but not limited to:

  • Identifiers: Contact information and Account-related details, e.g. your full name, email address, physical address, phone number and IP address, user name, password, and other identifiers you provide;
  • Commercial information: Transactional information, e.g. products or services purchased, obtained, or considered, or other purchasing or consuming histories and tendencies, payment data. Account information and supporting tickets;
  • Electronic and network activity information: This includes records of your interactions with our Engagements and other records;
  • Device and geolocation: e.g. IP address, operating system, device type, browser details, country preferences;
  • Shared Content: This is the content and information you share with us which is used and ingested by your AI Assistant Services.

How we process your information

Processing Purposes. As long as We process your information, including your Personal Data, We will continue to do so for the following purposes:

  • Service Delivery and Enhancement: To provide, maintain, operate, and improve the AI Assistant Services
  • Safety and Security: To ensure and improve security of the Engagements and related technologies
  • Compliance and Protection: Meeting legal obligations
  • User Engagement and Personalization: Targeting our Engagements experience for you
  • Marketing and Communication: Keeping you informed about offers and updates
  • Data Insights: To aggregate, pseudonymised, and anonymise personal data for research and development

How we secure your information

Taxxa AI Oy implements appropriate technical and organizational measures to protect your Personal Data against unauthorized access, modification, disclosure or destruction. While we strive to protect your information, no method of transmission over the Internet or method of electronic storage is 100% secure.

Your Rights

You have the right to access, correct, or delete your Personal Data. To exercise these rights, please contact us at contact@taxxa.ai. We will respond to your request within 30 days.

GDPR Compliance

Taxxa AI Oy complies with the General Data Protection Regulation (GDPR). We process Personal Data in accordance with the principles outlined in the GDPR and provide mechanisms for data subjects to exercise their rights under the GDPR.

Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at: contact@taxxa.ai