Privacy Policy

Last updated: May 2025

Your data belongs to you. SafeTax is designed to collect only what is strictly necessary to operate the service — nothing more. This page explains precisely what we collect, why, and how you can exercise your rights.

1. Who is responsible for your data?

Meditax SAS 9 avenue Armand Rousseau, 75012 Paris, France SIREN: 948 942 693 Contact: privacy@safetax.com

2. What data do we collect?

Registration data

When you create your account, we collect: • Your email address • Your first and last name This data is necessary for the creation and management of your account.

Tax and transaction data

The data you import (crypto transactions, exchange history) is used solely for the time needed to generate your tax report. It is not retained after the report is generated. Once downloaded, the report remains exclusively in your possession.

Technical data

We collect minimal technical data essential to the proper functioning of the service (connection logs, IP address). This data is retained for a maximum of 12 months.

3. Why do we collect this data?

Purpose	Legal basis
Account creation and management	Contract performance
Generation of your tax reports	Contract performance
Security and fraud prevention	Legitimate interest
Compliance with our legal obligations	Legal obligation

We do not collect any data for advertising or commercial purposes.

4. How long do we retain your data?

Data	Retention period
Email, first and last name	Account lifetime + 30 days after deletion
Tax and transaction data	Not retained (deleted after report generation)
Technical data (logs)	12 months maximum

5. Who do we share your data with?

Your data is never resold, exploited for commercial purposes, or shared with third parties for marketing. We only use one technical subcontractor for platform hosting:

Vercel Inc. — 340 S Lemon Ave #4133, Walnut, CA 91789, United States https://vercel.com — privacy@vercel.com

Vercel is based in the United States. This transfer outside the European Union is governed by standard contractual clauses approved by the European Commission, pursuant to Article 46 of the GDPR.

6. Security

Your data is encrypted in transit (TLS) and at rest. We apply high security standards and strictly limit data access to authorised personnel.

7. Your rights

Under the GDPR, you have the following rights regarding your personal data:

—Right of access — obtain a copy of your data
—Right of rectification — correct inaccurate data
—Right to erasure — request deletion of your data
—Right to portability — receive your data in a structured format
—Right to object — object to certain processing activities
—Right to restriction — temporarily restrict processing

To exercise these rights, contact us at: privacy@safetax.com We commit to responding within a maximum of 30 days.

8. Cookies

SafeTax does not use advertising cookies or third-party trackers. Only cookies strictly necessary for the service (session, authentication) may be used.

9. Right to lodge a complaint

If you believe that the processing of your data does not comply with applicable regulations, you have the right to lodge a complaint with the CNIL (French National Commission for Information Technology and Civil Liberties): CNIL — 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 https://www.cnil.fr

10. Changes

We may update this policy at any time. In the event of a material change, you will be notified by email or via a notification on the platform. The date of the last update is shown at the top of this page.