DeliverTax

Privacy Policy

AARUDHRA NEXTGEN AI LIMITED · Co. no. 17189093 · Last updated 31 May 2026 · support@aarudhranextgen.ai

Registered in England and Wales. Company number 17189093. Registered office: 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ.

Important: This is a template for MVP launch. Have a UK solicitor review and replace company details (NEXT_PUBLIC_LEGAL_ENTITY, NEXT_PUBLIC_SUPPORT_EMAIL) before marketing to the public.

1. Who we are

AARUDHRA NEXTGEN AI LIMITED (company number 17189093), registered in England and Wales, operates DeliverTax, a UK self-employed delivery driver tax helper. This Privacy Policy explains how we collect, use, and protect your personal data under UK GDPR and the Data Protection Act 2018.

Contact: support@aarudhranextgen.ai. Data controller: AARUDHRA NEXTGEN AI LIMITED (17189093).

2. Data we collect

Account: name, email, password (hashed by Supabase Auth), 10-digit UTR, business type.

Financial: income, expenses, mileage, receipts, bank connection metadata (if you connect a bank).

HMRC: OAuth tokens and submission status stored server-side only — never in the browser.

Technical: IP address, device/browser type, audit logs for security and tax submissions.

3. Why we use your data

Legal bases: contract (providing the service), legal obligation (tax/record keeping where applicable), legitimate interests (fraud prevention, security), consent (marketing — only if you opt in).

We use data to calculate tax estimates, prepare MTD payloads, submit to HMRC when you authorise, and improve the product.

4. Who we share with

Supabase (hosting/database, EU/UK region as configured), HMRC (when you connect and submit), Stripe (payments), email provider (transactional email).

We do not sell your personal data. Sub-processors are bound by data processing terms.

5. Retention & security

We keep tax and transaction records while your account is active and as required by UK law (typically up to 6 years for tax records).

Access is protected by authentication, row-level security, and HTTPS. HMRC refresh tokens stay on the API server.

6. Your rights

You may request access, correction, deletion, restriction, portability, or object to processing. Contact support@aarudhranextgen.ai.

You may complain to the ICO (ico.org.uk). You can withdraw consent where processing is consent-based.

7. Cookies & local storage

We use essential cookies/session storage for login. Analytics cookies are not enabled by default.

8. Changes

We may update this policy; version 2026-05. Material changes may require renewed consent on signup.