Skip to main content
PaperTaxLog in →

Trust & privacy

How your data flows

Tax data is sensitive. Here's the full, specific picture of what we store, who processes it, and when it's deleted. No marketing language, no unearned badges.

The flow, step by step

  1. 01

    You upload

    PDF, JPG, or PNG from your device

  2. 02

    Swiss storage

    Encrypted at rest, Supabase Zürich region

  3. 03

    Claude Agent

    Anthropic's AI reads your document and extracts what matters. Anthropic has contractually committed not to train its models on your data.

  4. 04

    Your guide

    Structured entries appear in your return, one document at a time

  5. 05

    Deleted on finish

    All uploads, chat, and guide data are erased within 24 hours of you marking the return done

Sub-processors

Four sub-processors touch your data, each with a specific role and retention policy.

  • Supabase

    Database + file storage, Zürich (Switzerland) region

    Deleted within 24 hours of finishing your return

  • Anthropic (Claude Agent)

    Reads your documents and generates your guide

    Contractually committed not to train on your data. May retain API inputs temporarily for safety monitoring per Anthropic's commercial terms.

  • Vercel

    Web application hosting and compute, Frankfurt (EU) region

    Standard request logs, no user content

  • Stripe

    Payment processing: card and bank details go directly to Stripe

    We only see a payment ID; card data never reaches our servers

Our commitments

  • Your files are stored in Switzerland and deleted within 24 hours of finishing your return
  • Anthropic has contractually committed not to train its AI models on your data
  • We never use your data to train AI models either
  • You submit your return yourself in your cantonal tax app. We never touch it
  • You can export or delete your entire return at any time
  • We don't share data with tax authorities or any third party beyond our sub-processors (Supabase, Anthropic, Vercel, Stripe)

Your data rights

Under Swiss and EU data protection law, you have the right to access, export, correct, and delete your data. Every active return has a privacy card showing exactly what's stored and how to remove it. For historical returns or anything unclear, email contact@papertax.ch.

Contact

Security concerns, incident reports, or data requests: contact@papertax.ch