Privacy Policy

Last Updated: February 8, 2026

1. Introduction

This Privacy Policy explains how D.M.H Technologies ("we", "us", or "our"), the developer and operator of TaxDash, collects, uses, stores, and protects your personal and financial information when you use our tax preparation platform at national-tax-app.vercel.app (the "Service").

TaxDash is an AI-powered tax preparation tool designed for taxpayers in the Republic of Trinidad and Tobago. By accessing or using the Service, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.

This policy is governed by the laws of the Republic of Trinidad and Tobago, including the Data Protection Act, 2011 (Act No. 13 of 2011) to the extent that it is in force and applicable.

2. Information We Collect

2.1 Personal Information

When you create an account or use TaxDash, we may collect the following personal information:

Identity Information: your full name, date of birth, national identification number, and Board of Inland Revenue (BIR) file number.
Contact Information: your email address, telephone number, and mailing address.
Account Information: your username, password (stored in encrypted form), and account preferences.

2.2 Financial and Tax Information

To provide our tax preparation services, we collect and process:

Employment Income Data: information extracted from your TD4 slip(s), including employer details, gross emoluments, PAYE deductions, health surcharge deductions, and NIS contributions.
Self-Employment Income Data: business revenue, expenses, asset information, depreciation schedules, and related financial records for sole traders.
Tax Credits and Deductions: information related to tertiary education expenses, first-time homeowner status, pension/annuity contributions, CNG conversion credits, and other eligible deductions.
Tax Return Data: completed TD1, Form 400 ITR, Schedule E, Profit and Loss statements, and related tax documents generated through the Service.

2.3 Information Collected Automatically

When you use TaxDash, we automatically collect:

Device Information: browser type, operating system, device type, and screen resolution.
Usage Data: pages visited, features used, time spent on the platform, and interaction patterns.
Log Data: IP address, access times, and referring URLs.
Cookies: session cookies necessary for the functioning of the Service, and optional analytics cookies with your consent.

2.4 AI-Processed Information

TaxDash uses artificial intelligence to scan and extract data from uploaded documents such as TD4 slips. When you upload a document, our AI system processes the image or file to identify and extract relevant tax data. The original uploaded documents are processed in real-time and are not retained after data extraction is complete, unless you choose to save them within your account.

3. How We Use Your Information

We use the information we collect for the following purposes:

Tax Preparation Services: to extract data from your tax documents, calculate your tax liability or refund, generate completed tax forms (TD1, Form 400 ITR, Schedule E), and provide your downloadable tax returns.
Account Management: to create and manage your account, authenticate your identity, and provide customer support.
Service Improvement: to improve the accuracy of our AI extraction technology, enhance our tax calculation engine, and develop new features. Any data used for this purpose is anonymised and aggregated.
Communication: to send you filing deadline reminders, service updates, and important notices about changes to our Service or this Policy. We will never send unsolicited marketing emails without your explicit consent.
Legal Compliance: to comply with applicable laws, regulations, and legal processes in Trinidad and Tobago.

4. Data Storage and Security

4.1 Where Your Data Is Stored

Your data is stored on secure cloud servers. We use industry-standard cloud infrastructure providers that maintain robust security certifications. Your data may be stored on servers located outside of Trinidad and Tobago; however, we ensure that any such transfer is subject to appropriate safeguards consistent with applicable data protection laws.

4.2 How We Protect Your Data

We implement the following security measures to protect your information:

Encryption: all data is encrypted in transit using TLS 1.2 or higher (256-bit encryption) and at rest using AES-256 encryption.
Access Controls: access to personal and financial data is restricted to authorised personnel on a need-to-know basis, with role-based access controls and multi-factor authentication.
Secure Authentication: user accounts are protected by secure password hashing and optional two-factor authentication.
Regular Audits: we conduct periodic security assessments and vulnerability testing of our systems.
Incident Response: we maintain an incident response plan to address any potential data breaches promptly and in accordance with applicable notification requirements.

4.3 Data Retention

We retain your personal and financial data for as long as your account remains active, plus a period of seven (7) years from the date of your last filed return through the Service, to align with the record-keeping requirements of the Inland Revenue Division of Trinidad and Tobago. You may request deletion of your account and associated data at any time, subject to our legal retention obligations.

5. Sharing Your Information

We do not sell, rent, or trade your personal or financial information to third parties. We may share your information only in the following circumstances:

With Your Consent: when you explicitly authorise us to share information, for example, if you choose to share your tax return with an accountant or tax practitioner through the Service.
Service Providers: with trusted third-party service providers who assist us in operating the Service (e.g., cloud hosting, payment processing, analytics), subject to strict confidentiality agreements and data processing terms.
Legal Requirements: when required by law, regulation, legal process, or governmental request, including requests from the Board of Inland Revenue or other competent authorities in Trinidad and Tobago.
Business Transfers: in the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have regarding your information.

We do not share your financial data with any advertising networks, data brokers, or marketing platforms.

6. Your Rights

You have the following rights with respect to your personal information:

Right of Access: you may request a copy of the personal data we hold about you.
Right of Correction: you may request that we correct any inaccurate or incomplete personal data.
Right of Deletion: you may request that we delete your personal data, subject to our legal retention obligations.
Right to Withdraw Consent: where we process your data based on your consent, you may withdraw that consent at any time.
Right to Data Portability: you may request that we provide your data in a structured, commonly used, and machine-readable format.

To exercise any of these rights, please contact us at the details provided in Section 10 of this Policy. We will respond to your request within thirty (30) days.

7. Cookies and Tracking Technologies

TaxDash uses cookies that are strictly necessary for the operation of the Service, such as session management and authentication cookies. We may also use optional analytics cookies to understand how users interact with the Service. You may control cookie preferences through your browser settings. Disabling necessary cookies may affect the functionality of the Service.

8. Children's Privacy

TaxDash is not intended for use by individuals under the age of eighteen (18). We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected data from a child under 18, we will take steps to delete such information promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or applicable laws. We will notify you of any material changes by posting the updated Policy on our website and, where appropriate, by email notification. The "Last Updated" date at the top of this Policy indicates when it was most recently revised. Your continued use of the Service after any changes constitutes your acceptance of the updated Policy.

10. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

D.M.H Technologies

Email: [INSERT EMAIL ADDRESS]

Address: [INSERT BUSINESS ADDRESS]

Trinidad and Tobago