What we collect, why, and how to delete it.

TaxPot.ie is operated by Karl, a sole trader based in Ireland. The data controller for any personal data is Karl, contactable at taxpot.ie@gmail.com.

• Email address. Only if you submit the waitlist form or pay the €1 founder lock-in. We use it solely to email you when TaxPot launches and for occasional product updates. No newsletter, no marketing rentals.
• IP address (transient). Held in memory for up to 60 seconds to rate-limit waitlist submissions and stop spam. Not written to disk, not shared, discarded after the window.
• Anonymous page analytics. Vercel Web Analytics records page views and approximate location at the country level. It is cookieless and does not identify you. You can opt out by enabling Do Not Track in your browser.
• Payment data (€1 founder lock-in only). If you choose to pre-commit, Stripe handles the €1 charge end to end. We never see or store your card number — we only see that the payment succeeded and your billing email.

• Bank account data. There is no Open Banking connection yet.
• ROS or Revenue credentials. We never touch ROS.
• Cookies for advertising or cross-site tracking.
• Anything you didn't deliberately enter into a form.

We use a small number of EU/EEA-aware processors. Each is bound by their own GDPR commitments:

• Resend — sends the welcome email and the internal new-signup notification.
• Stripe — processes the €1 founder payment.
• Vercel — hosts the site and provides cookieless web analytics.

We do not sell your data. We do not share it with anyone outside of the processors above.

Waitlist emails are kept until launch and then for a reasonable period afterwards so we can email you product updates. You can ask us to delete your record at any time and we'll do so within 30 days. Stripe holds payment records under their own legally-required retention.

You can ask us to access, correct, export, or delete the personal data we hold about you. Email taxpot.ie@gmail.com with the subject “Privacy request” and we'll reply within 30 days. You also have the right to lodge a complaint with the Irish Data Protection Commission (dataprotection.ie).

When the product launches and starts using bank feeds, this page will be rewritten and the date at the top will change. If the changes are material, anyone on the waitlist will get an email.