Privacy Policy

Last updated: 9th of August 2026

Tax AI ("Penny", "the Service") is provided by MaraisVenter Technologies (Pty) Ltd ("MV Tech", "we", "us", "our"), a company registered in South Africa. This Privacy Policy explains how we collect, use, store, and protect personal information in compliance with the Protection of Personal Information Act, 2013 (POPIA).

1. Information We Collect

• Account information: name, email address, and profile details provided via Google Sign-In (or other supported authentication methods).
• Content you provide: chat messages, uploaded documents (e.g. SARS letters, financial statements, tax records), and any other material submitted to the Service for analysis or drafting.
• Usage data: how you interact with the Service, including feature usage, session activity, and technical logs (IP address, browser type, device information).
• Payment information: if you subscribe to a paid tier, billing details are processed by our payment provider (PayFast) — we do not store your full card details ourselves.

2. How We Use Your Information

• To provide, operate, and improve the Service, including AI-generated responses, document drafting, and tax analysis.
• To authenticate your account and maintain your conversation history.
• To process payments and manage subscriptions.
• To communicate with you about your account, updates, or support requests.
• To comply with legal obligations and enforce our Terms of Service.

3. How Your Information Is Processed

To deliver AI-powered features, content you submit may be processed by third-party infrastructure providers acting on our behalf, including:

• Anthropic (Claude API) — for AI-generated chat responses and document drafting.
• Voyage AI — for generating embeddings used in legal and tax document retrieval.
• Supabase — for authentication, database storage, and file storage.
• Vercel — for application hosting.

These providers are contractually bound to process data only for the purposes of providing their service to us and are not permitted to use your content for their own purposes beyond what is necessary to operate their infrastructure.

4. Data Retention

We retain your account information and conversation history for as long as your account remains active, or as needed to provide the Service. You may request deletion of your account and associated data at any time (see Section 6).

5. Data Security

We implement reasonable technical and organisational measures to protect personal information against loss, unauthorised access, alteration, or disclosure, including encryption in transit, access controls, and authenticated storage.

6. Your Rights Under POPIA

You have the right to:

• Request access to the personal information we hold about you.
• Request correction of inaccurate or outdated information.
• Request deletion of your personal information, subject to legal or contractual retention requirements.
• Object to the processing of your personal information in certain circumstances.
• Lodge a complaint with the Information Regulator of South Africa if you believe your rights under POPIA have been violated.

To exercise any of these rights, contact our Information Officer at whonishia@mvtech.co.za.

7. Children's Privacy

The Service is intended for use by professional accounting practices and their authorised staff. It is not directed at, and we do not knowingly collect personal information from, individuals under the age of 18.

8. Cookies

We use essential cookies required for authentication and session management. We do not use third-party advertising or tracking cookies.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via the Service or by email prior to taking effect.

10. Contact Us

For any questions about this Privacy Policy or how we handle your personal information, contact us at support@mvtech.co.za.