Privacy policy

Who we are

vat.com.cy is operated by Taxerly LTD, a company based in Limassol, Cyprus ("we", "us"). We are the controller of the personal data described here.

For anything about your data, email hello@tax.com.cy.

When you read the site

Reading pages and using the calculators doesn't send us any personal data. The calculators run in your browser. We use no analytics, no advertising and no tracking tools, and the site loads no third-party scripts (even the fonts are served from our own domain).

Like any website, our host (Vercel, see below) receives standard request data to deliver pages and keep the site secure: your IP address, browser type, the page requested and the time. Vercel keeps these request logs for a limited period under its own log retention.

When you ask Taxerly a question

Taxerly, our VAT assistant, answers questions using our guides and our facts table. When you ask it something:

• Your question goes to Anthropic. Our server sends your question, the relevant guide pages and up to 3 earlier questions and answers from the same conversation to Anthropic, whose Claude model writes the answer. The question is sent as you typed it, so please don't include names, ID numbers or other personal details.
• We count your questions to keep to the limit of 5 a day. We count them against a random ID kept in a cookie (taxerly_anon, see the cookie policy) and against a one-way, salted hash of your IP address. We never store or log your IP address itself. We delete each day's counters once they are more than a day old (the clean-up runs whenever a question is asked).
• We log questions to improve our guides. Each log entry holds the question with email addresses, IBANs, phone numbers, ID numbers (such as a tax identification code) and long numbers masked, cut to 500 characters. It also records the date, the topic page you asked from, whether an answer was given, and which pages and figures the answer used. The log holds no IP address, hash, cookie ID or account. The masking works by pattern, so names or other details you type stay in the logged question. Entries are deleted automatically after 90 days (the clean-up runs each time a question is logged).
• Your conversation itself lives only in your browser tab. We don't keep a copy linked to you, and it is gone when you close or reload the tab.

Because log entries carry no identifier, we can't find the entries for a particular person. That is also why we can't show you, correct or delete them on request.

When you send a form

When you send one of our forms (contact, consultation booking, VAT deadline SMS reminders, VAT updates or partnerships), we store what you entered in our database: your email address, the form's other fields (such as your name, company, phone number and message), the page you sent it from and the time.

We then email it to our inbox, hello@tax.com.cy, through Resend, so our team can reply. To stop repeated or automated submissions, the stored record also holds a salted hash of your IP address for one day (at most 10 submissions a day from one address). We never store the IP address itself.

We use what you send to reply and to provide what you asked for: arranging the consultation, sending SMS reminders or VAT updates, or discussing a partnership. We keep it for as long as we need it for that and for our legal and accounting obligations. Ask us at any time to delete it, or to stop reminders or updates.

Why we use your data (legal bases)

• Answering your Taxerly question, replying to your enquiry and sending the reminders or updates you signed up for: to provide the service you asked for (GDPR article 6(1)(b)).
• Counting questions and form submissions, preventing abuse and keeping request logs: our legitimate interest in keeping the service available, fair and secure (article 6(1)(f)).
• The question log: our legitimate interest in finding topics our guides don't cover yet (article 6(1)(f)).

We don't sell your data, use it for advertising or make decisions about you by automated means that have legal or similarly significant effects.

Who processes your data for us

• Vercel hosts the site. Our server code runs in Vercel's Dublin (Ireland) region, and pages are delivered through Vercel's global network.
• Supabase hosts our database in its EU region (Ireland). It holds Taxerly's question counters, the question log and the forms you send.
• Resend delivers the email that tells our team about your form.
• Anthropic writes Taxerly's answers. Under its commercial terms, Anthropic doesn't use the questions or answers to train its models.
• Our email provider hosts the mailbox that receives your enquiries.

Vercel, Anthropic and Resend are US companies, so some processing can take place outside the EU. Those transfers are covered by the EU Standard Contractual Clauses in their data processing terms.

How long we keep it

Your rights

Under the GDPR you can ask us for access to your personal data, and to correct it, delete it, restrict it or receive a copy of it. You can also object to processing based on our legitimate interests. Email hello@tax.com.cy and we will reply within one month.

If you're not happy with our answer, you can complain to the Office of the Commissioner for Personal Data Protection, 1 Iasonos Street, 1082 Nicosia, Cyprus (dataprotection.gov.cy), or to the data protection authority where you live.

Changes to this policy

When the site starts collecting something new, we update this page before it does, and change the date at the top.