Trust & privacy
Tax data is sensitive. Here's the full, specific picture of what we store, who processes it, and when it's deleted. No marketing language, no unearned badges.
PDF, JPG, or PNG from your device
Encrypted at rest, Supabase Zurich region
An isolated virtual machine reads the file, then is destroyed
Anthropic processes under ZDR — no logging, no training
Structured entries appear in your session
All uploads + chat + guide erased when you archive the session
Three parties touch your data, each with a specific role and retention policy.
Database + file storage, Zurich (Switzerland) region
Deleted 24h after you finish your return
Document extraction and guide assembly
Zero data retention — no logging, no training
Web application hosting, Frankfurt region
Standard request logs, no user content
Under Swiss and EU data protection law, you have the right to access, export, correct, and delete your data. Every active session has a privacy card showing exactly what's stored and how to remove it. For historical sessions or anything unclear, email privacy@calmtax.ch.
Security concerns, incident reports, or data requests: privacy@calmtax.ch