Privacy Policy — TaxHeaven MTD

Current public release

This release works without connecting a TaxHeaven account. Account sign-in and access to stored TaxHeaven records are unavailable. The connection information below describes the separate account connection service and its records; it does not mean account access is available in this release.

Anonymous scenarios

You can assess Making Tax Digital for Income Tax and use supported tax estimates without linking an account. ChatGPT sends the facts needed for your chosen tool, such as income figures, tax/reference year, region, expense descriptions, dates and exemption circumstances. Receipt categorisation receives extracted text and amounts supplied by ChatGPT; TaxHeaven does not receive the receipt image through that tool.

The calculation server processes these inputs in memory and returns results. It does not create a saved TaxHeaven record or reminder. Treat business names, receipt text and income figures as potentially personal information. Include only facts needed for the task.

Authorised account records

Account features are available only after the connection has been configured, you authorise access, and TaxHeaven verifies consent and eligible account access. When enabled, Supabase handles the connection’s sign-in through your TaxHeaven account. Identity sharing and access to your TaxHeaven records require separate approval. Sign-in and any required MFA take place in the secure TaxHeaven platform. The app receives a narrowly scoped read token through the host connection; tokens are not part of tool inputs, UI state or model context.

The platform retains the authoritative records and a consent association used to check read access and revocation. Supported account tools return authorised business/property labels, opaque selection references, bookkeeping periods, aggregate GBP figures, supported preparation issues and last stored submission facts. Raw ledger rows, receipt contents, bank credentials and government identifiers are excluded from these account responses.

Disconnect through TaxHeaven’s account connection page to revoke access. Revocation stops future authorised reads. A read authorised before disconnection completes may finish, and information already returned to ChatGPT remains subject to OpenAI’s policy and ChatGPT’s deletion controls.

Conversation and workspace context

The workspace can send the selected task, period, assumptions, concise result and provenance to ChatGPT so follow-up questions refer to the displayed result. Host context is separate from TaxHeaven account authorisation. The app does not send the whole ledger or an account credential into conversation context. Scenario edits do not change the stored account records.

OpenAI handles conversations, returned results and host-side state under OpenAI’s Privacy Policy. Use ChatGPT’s controls to manage that information. A result remaining in a conversation does not mean TaxHeaven saved it.

Service providers and logs

Vercel hosts the MCP server. OpenAI operates the host. When enabled, the configured identity provider handles account authorisation, and the TaxHeaven platform supplies the narrow account read service. These providers may process request metadata and authentication information needed to operate their services.

The app adds no analytics, advertising or profiling service. It does not log tool input bodies, calculation results or bearer tokens. Infrastructure may keep operational request metadata; retention follows the applicable provider and platform arrangements. We do not promise a specific infrastructure deletion period here.

Retention and your choices

Anonymous tool inputs and results are processed for the request and are not saved as TaxHeaven records by this calculation service. When you connect an account, the temporary browser authorisation cookie expires within ten minutes and is cleared when you complete or explicitly cancel the authorisation flow in this app. This cookie expiry does not delete records held by the identity provider.

TaxHeaven stores the account association, connection permissions and approval, expiry and revocation records needed to control account access, together with hashed approval codes. Approval codes expire within ten minutes and account consent lasts for up to 30 days. These periods limit access; they are not deletion periods. Disconnecting stops future authorised reads but retains the connection records. Ordinary TaxHeaven account erasure also retains the connection association and revocation records while preventing further access. The current service has no automatic time-based deletion of these connection records or hashed approval-code records.

Access tokens are valid for at most 15 minutes. When account access is enabled, the connection may renew them while your existing consent remains valid; renewal does not extend the 30-day consent period. Reconnecting after consent expires or is revoked requires fresh approval in TaxHeaven.

Existing financial, tax and payment records follow the TaxHeaven platform privacy policy. Information already returned to ChatGPT remains subject to OpenAI’s policy and ChatGPT’s deletion controls. Contact privacy@taxheaven.app for access, correction or deletion requests, including requests about connection records.

The processing is used to provide the tasks and account access you request, operate the service and meet applicable obligations. Where personal data is involved, the applicable basis and your rights depend on that processing. You can contact us about it and raise a concern with the Information Commissioner’s Office.

Links to the TaxHeaven website

Preparation links from the workspace to the TaxHeaven website use fixed campaign tags to indicate that a visit came from ChatGPT and identify the general action, such as reviewing income or expenses. These tags contain no account identifiers, selected periods, tax figures or tool inputs. The app sends no separate click event and adds no analytics service. Once you open the website, its privacy policy and consent controls apply to any website analytics.

Keep credentials in secure flows

Do not enter a NINO, UTR, password, OTP, bank credential or authorisation token into tools or forms. Filing, HMRC/bank connection changes, MFA and subscription management stay in the established TaxHeaven platform flows. This app does not submit anything to HMRC.

Changes and contact

Updates to enabled account features or data handling will be reflected in this policy. Contact privacy@taxheaven.app with privacy questions, or visit support for product help. Read the app’s Terms of Service.