Draft dated 11 August 2026. Nigerian legal review is required before production launch; no compliance certification is claimed.
Information we collect
TaxPadi may collect account identity, contact details, taxpayer type, state, calculator inputs and results, consultation details, consent records, provider identity IDs, professional relationship and engagement records, report approval metadata, and security/audit metadata. TaxPadi never stores your Google or Facebook password.
Why we use it
We use information to authenticate accounts, calculate and save informational tax estimates, route consented consultations, operate professional workspaces, prevent abuse, generate signed professional reports and maintain audit records.
Visitors, acquisition and consent
Optional first-party analytics uses a random browser identifier stored only as a hash to count visits, registration methods, acquisition tags and funnel actions. It does not use fingerprinting, raw IP retention, income, tax amounts or confidential notes. Essential authentication and security cookies work when analytics is declined. A referral cookie may last 30 days.
Professionals and business relationships
A professional receives consultation details you explicitly submit. A referral code alone does not reveal your identity or grant record access. Access to protected records requires active consent or an accepted invitation and ends after revocation, apart from immutable audit or legally required records. Professionals update engagement status to record agreed, active or completed work; a WhatsApp click alone is never treated as completed business.
Social sign-in
Google and Facebook provide a stable account identifier, name and email when available. TaxPadi does not silently merge an existing account based only on an email match. Missing required fields and consent are collected during TaxPadi onboarding.
Professional reports
Signed reports store an immutable canonical version, SHA-256 hash, verification code, professional identity and approval time. The public verification page excludes client identity and financial figures. Optional handwritten signature assets, if enabled later, must use private storage rather than the public website folder.
Retention and your choices
Anonymous analytics is scheduled for deletion after the configured retention period. You may correct profile details, withdraw optional communication or analytics consent, revoke a professional relationship, request an export or request deletion. Some audit and legal records may need to be retained.
Security and limitations
We use access controls, hashed passwords and sessions, validation, rate limiting and audit logging, but no online service can promise absolute security. Do not send passwords, banking credentials or tax-portal credentials through consultation descriptions.