Privacy Policy

1. Introduction

Tax It ("Tax It", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our FBR digital invoicing platform and related services.

2. Information We Collect

We collect information that you provide directly to us, including:

Account Information: Name, email address, phone number, company name, NTN/STRN, CNIC (where required for FBR compliance), and business address.

Business Data: Invoice details, product catalogs, customer records, branch information, and financial data necessary for FBR submission and tax compliance.

Usage Data: Log data, device information, IP addresses, browser type, and interaction patterns with our platform for improving service quality.

Payment Information: Billing details processed securely through third-party payment processors. We do not store complete payment card information on our servers.

3. How We Use Your Information

We use the information we collect to: provide and maintain our FBR digital invoicing services; submit invoices to FBR on your behalf; generate tax reports and compliance documents; communicate with you about your account, updates, and support; improve our platform and develop new features; comply with legal obligations and regulatory requirements; and protect against fraud, unauthorized access, and security threats.

4. Data Sharing and Disclosure

We do not sell your personal or business data. We may share information with: the Federal Board of Revenue (FBR) as required for digital invoice submission; service providers who assist in operating our platform (hosting, email, payment processing); law enforcement or regulatory authorities when required by law; and professional advisors including lawyers, auditors, and insurers where necessary.

5. Data Security

We implement industry-standard security measures including encryption for data in transit and at rest, secure storage for sensitive data, team-based permissions with 7 access levels, complete activity logs for all system actions, regular security assessments and updates, and strict data isolation ensuring your company's data is never accessible by other users.

6. Data Retention

In compliance with FBR regulations, we retain invoice and tax-related data for a minimum of 6 years. Account information is retained for the duration of your subscription and for a reasonable period thereafter. You may request deletion of non-regulatory data by contacting us.

7. Your Rights

You have the right to: access and receive a copy of your personal data; correct inaccurate or incomplete information; request deletion of your data (subject to regulatory retention requirements); object to processing of your data in certain circumstances; and export your invoice and business data at any time.

8. Cookies and Tracking

We use essential cookies for session management and authentication. We use analytics tools to understand how our platform is used and to improve the user experience. You can control cookie preferences through your browser settings.

Advertising and measurement technologies run only on our public marketing website. They are never loaded inside the signed-in application. See section 9 below.

9. Advertising and Conversion Measurement

We advertise Tax It on Meta platforms (Facebook, Instagram and WhatsApp) and measure whether those advertisements lead to sign-ups. This section explains exactly what is and is not shared.

Marketing website only. The Meta Pixel runs solely on our public marketing pages. It is deliberately blocked from every signed-in area of the application, including invoices, customers, products, reports, FBR submissions, settings and the admin panel. It therefore cannot access anything you enter into Tax It. On the marketing pages it records page visits and clicks on our WhatsApp and telephone links.

Account events. We also operate a server-side integration which, where enabled, reports two events to Meta: that a company account was created, and that a subscription payment to Tax It was completed. The payment event includes the amount paid to us and the plan name.

Identifiers are hashed. Where we share identifiers for measurement, they are irreversibly hashed (SHA-256) before leaving our servers. This applies to the account holder's email address, the company telephone number, and an internal company reference. We do not transmit these values in readable form.

What is never shared. We do not share invoice data, customer records, product catalogues, NTN, STRN, CNIC, FBR credentials or tokens, submitted invoice payloads, or any tax figure with Meta or any other advertising provider. Any monetary amount shared for measurement relates solely to your subscription payment to Tax It, never to an invoice you issue to your own customers.

Your choices. You can limit this through your browser's cookie and tracking settings, and through your advertising preferences in your Meta account. Declining has no effect on your use of Tax It or on FBR submission.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our platform and updating the "Last updated" date. Your continued use of Tax It after changes constitutes acceptance of the revised policy.

11. Contact Us

If you have any questions about this Privacy Policy, please contact us at:

Tax It
Email: privacy@taxit.pk
Phone: +92 320 7785503
Address: 2nd Floor, Shadman Plaza, Chiniot Bazar, near Grace Hotel, Clock Tower, Faisalabad, 38000