1. Information We Collect
TaxSquid is designed to help eBay sellers track sales, fees, inventory, mileage, and tax deductions. To provide these services, the app may collect:
- Account Information: When you create a TaxSquid account, we collect your email address and a password, which our authentication provider stores only in securely hashed form — we never see or store your plain-text password. If you sign in with Apple, Google, or Facebook instead, that provider shares your name, email address (Apple may give us a private relay address instead of your real one), and, for Google and Facebook, your profile picture, as permitted by your settings with that provider.
- eBay Account & Order Data: When you connect your eBay account via OAuth authorization, TaxSquid retrieves read-only data regarding your sales, fees, listing details, buyer-paid shipping, and transaction dates. Your eBay access tokens are encrypted before they are stored on our server, are associated only with your TaxSquid account, and are never shared with other users.
- Location Data: If you turn on the Mileage Auto-Tracker, TaxSquid uses your device's location — including in the background while the app is closed or your phone is locked — to detect when you are driving and to record the drive. This runs only while the Auto-Tracker is enabled; you can pause it at any time in the app, or turn off location access for TaxSquid in your iPhone's Settings. For each recorded drive we save its start and end address, distance, date and time, and your business/personal classification to your account. We do not save a continuous trail of your location to our servers. To turn coordinates into street addresses, the app uses your device's built-in geocoding service (on iPhone, provided by Apple), which receives those coordinates to return an address.
- User-Provided Data: Information you manually enter into the app, including inventory purchases and Cost of Goods Sold (COGS), home office and utility expense details, manually logged transactions, and tax settings (mileage rate, tax year, deduction method).
- Subscription Information: If you subscribe, Apple processes your payment — we never receive your card or payment details. Our subscription provider, RevenueCat, receives your TaxSquid account ID and your purchase and subscription status so that we can unlock the right features for you.
- Notification Token: If you allow notifications, we store a push notification token that identifies your device so we can send you notifications (see Section 6).
- Contact Form Messages: If you contact us through our website, we collect the name (optional), email address, and message you submit so we can reply.
We do not use third-party advertising or analytics tools in the app.
2. How We Use Your Information
We use the data described above strictly to:
- Aggregate and display your sales, revenue, gross profit, and mileage metrics.
- Calculate estimated Schedule C tax deductions, mileage deductions, and home office costs.
- Authenticate you and keep your data synced across your devices.
- Determine which features are available to you based on your free trial or subscription.
- Send you account-related emails, such as password reset codes, and notifications you have allowed.
- Respond to your questions and support requests.
- Export standardized financial records and PDF/CSV files for your personal bookkeeping.
- Keep the service secure and prevent abuse.
3. Data Storage & Security
- Cloud Storage: Your account information, transactions, mileage records, inventory entries, and tax settings are stored in a secure cloud database (provided by Supabase), associated with your individual account. This allows your data to follow you across devices when you sign in.
- Access Controls: Your data is protected by database-level access rules that restrict it to your account only — no other TaxSquid user can view or access your data.
- Encryption: Data is encrypted in transit using HTTPS, and your eBay access tokens are additionally encrypted before they are stored.
- No Selling of Personal Data: We do not sell, rent, trade, or monetize your personal information or eBay transaction data under any circumstances, and we do not share it for advertising.
No system is perfectly secure, but we take reasonable measures to protect your information.
4. Third-Party Services
TaxSquid relies on the following third-party services to operate. Each processes data only to provide its service to us:
- eBay API: TaxSquid integrates with eBay's RESTful APIs using secure OAuth 2.0 authentication. We only request the minimum read-only permissions necessary to sync your sales and listing details. You can revoke TaxSquid's access to your eBay account at any time through your eBay Account Security Settings.
- Supabase: Our database and authentication provider, which securely stores your account and app data as described in Section 3.
- Apple: Provides Sign in with Apple, processes App Store subscription payments, delivers push notifications to iPhones, and (on iPhone) provides the geocoding service that turns drive coordinates into addresses.
- Google Sign-In and Facebook Login: If you choose to sign in using Google or Facebook, those providers process your authentication and share basic profile information with us, subject to their own privacy policies.
- RevenueCat: Manages subscription status. Receives your TaxSquid account ID and purchase information, as described in Section 1.
- Expo: Relays push notifications to your device. Receives your notification token and the text of the notification being sent.
- Resend: Our transactional email provider, used solely to deliver account-related emails such as password reset codes. Resend processes your email address only for this purpose.
- Hosting: Our server is hosted on Replit, and our website is hosted on Cloudflare. Our website loads fonts from Google Fonts.
We do not sell your personal information, and we do not share it for cross-context behavioral advertising.
5. How Long We Keep Your Data
- While your account exists: We keep your data for as long as your account is active so the app can work for you.
- After you delete your account: Your account and all associated data — transactions, drives, inventory, settings, eBay tokens, and notification token — are permanently deleted from our live database. Copies held in our database provider's backups, if any, are overwritten on that provider's normal schedule.
- Purchase records: Apple and RevenueCat may keep records of purchases for their own accounting and legal obligations, as described in their own policies.
- Contact messages: Messages sent through our contact form are kept only as long as needed to respond to you and for reasonable record-keeping, and we will delete them on request.
6. Notifications
If you allow notifications, TaxSquid may send you a reminder to classify a newly recorded drive (generated on your device) and a notice when your free trial ends (sent from our server through Expo and Apple). We do not use notifications for advertising. You can turn notifications off at any time in your iPhone's Settings under Notifications → TaxSquid.
7. Children's Privacy
TaxSquid is intended for adults age 18 and older and is not directed at children. We do not knowingly collect personal information from anyone under 18. If we become aware that a child has provided us with personal information, we will take steps to delete it.
8. Your Rights & Choices
You can view and edit your data directly in the app. Depending on where you live, you may also have the right to access, correct, delete, or receive a copy of your personal information, or to object to certain uses of it. We do not sell personal information or use it for targeted advertising. To exercise any of these rights, use the in-app account deletion described in Section 9 or contact us using the information in Section 11, and we will respond within the time required by applicable law.
9. Account Deletion & Data Removal
- In the app: Go to Settings and choose Delete Account. After you confirm, your TaxSquid account and all associated data are permanently deleted.
- Disconnect eBay only: You can disconnect your eBay account at any time from within the app, which immediately removes your stored eBay access tokens.
- By email: You can also ask us to delete your account and data by contacting us as described in Section 11.
- Subscriptions are separate: Deleting your account does not cancel an App Store subscription. To stop billing, cancel the subscription in your Apple ID settings (Settings → your name → Subscriptions).
- Uninstalling the app alone does not delete your account or cloud-stored data.
10. Security Incidents
If a security incident affects your personal information, we will notify affected users and the relevant authorities as required by law, without unreasonable delay.
11. Contact Us
If you have any questions or concerns regarding this Privacy Policy, or wish to exercise your rights or request deletion of your account and data, email support@taxsquid.app or use our contact form.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will update the "Last Updated" date above whenever changes are made, and for material changes we will notify you in the app or by email. Continued use of TaxSquid after changes take effect constitutes acceptance of the revised policy.