Privacy Policy

Last updated: 17 July 2026

What we store

We store only the figures extracted from your documents: salary, TDS, interest, dividends, and your capital-gains rows, so you can return without re-uploading. We do not store your original document files. Uploaded PDFs and spreadsheets are read in memory to extract these figures and are never written to disk or persistent storage, including when extraction fails.

What goes to our extraction provider

PDFs are read by an extraction service to identify the numbers in your statements. Excel and CSV files are parsed using deterministic rules. Uploaded documents are not retained after extraction.

Where your data lives

Your extracted figures are stored in our database (Supabase), encrypted at rest, and accessible only to your own account, enforced at the database level, not just in the app. All traffic between your browser and our servers is encrypted (HTTPS/TLS).

Who we share with

We do not sell or share your data. We use a small number of service providers to run Klaro. Each processes only what is needed to provide the service.

Your control

You can delete your account and all stored tax data at any time from within the app. Deletion is immediate and permanent.

⚠ Placeholder. This is not final legal copy. Klaro needs a real Privacy Policy reviewed by someone qualified before this page is relied on. The summary above reflects what the product actually does today (see SECURITY.md in the repo for the underlying audit), but is not a substitute for proper legal drafting.