P60 PDFs, tax records, HMRC credentials, NI number — stored only in your browser. Never uploaded.
Key figures (not documents) are sent to Google Gemini so it can answer your questions accurately.
Our backend handles sign-in and billing. It receives your email and plan status — nothing else.
TaxPilot is a Chrome extension and web service built by an independent UK developer. Our website is tax-pilot.co.uk and you can reach our privacy team at privacy@tax-pilot.co.uk.
We are the data controller for the personal information we process in connection with TaxPilot.
The following data is stored exclusively in chrome.storage.local — your browser's private, encrypted local storage. TaxPilot's servers have no access to this data. It never leaves your device unless you explicitly export it.
When you ask TaxPilot a question or it analyses your HMRC page, a structured text summary is assembled from your locally-stored data and sent to Google Gemini. This summary contains key figures — not source documents.
Important: Your P60 PDF, NI number, HMRC session, uploaded documents, and full financial records are never included in AI prompts. The AI only receives structured numerical summaries that you have explicitly set up.
Google's use of data submitted via the Gemini API is governed by their Privacy Policy and Gemini API Terms. Data sent via the API is not used to train Google's models by default.
TaxPilot's backend server handles authentication and billing only. It does not receive, process, or store your tax data.
TaxPilot uses Google OAuth to authenticate users. When you sign in with Google:
TaxPilot uses the Google Gemini API. When you send a message, your question and a structured tax context summary (Section 3) are sent to Google's Gemini API for processing. We do not log AI conversations on our servers. Conversation history is cached locally on your device only.
By default, data submitted via the Gemini API is not used to train Google's models under the API terms — unlike consumer Gemini products. See Google's API Terms of Service for details.
Payments are processed by Stripe, a PCI DSS-compliant payment processor. TaxPilot never receives or stores your card number or CVV — these are handled entirely by Stripe. We receive only a payment confirmation. Stripe's privacy policy: stripe.com/gb/privacy.
The TaxPilot website does not currently use tracking cookies or third-party analytics. The Chrome extension uses chrome.storage.local rather than cookies — this is accessible only by the TaxPilot extension on your device.
Your locally-stored data persists until you uninstall TaxPilot (Chrome clears local storage on uninstall), clear your browser extension storage, or use the in-extension "Sign Out / Reset" option.
Your account data (email, subscription status) is retained while your account is active. To delete your account, email privacy@tax-pilot.co.uk and we will complete deletion within 30 days.
As a UK resident, you have rights including: access, rectification, erasure, restriction, portability, and the right to object. To exercise any right, email privacy@tax-pilot.co.uk. We respond within 30 days. You may also complain to the ICO.
TaxPilot is intended for adults completing UK Self Assessment tax returns. We do not knowingly collect data from anyone under 18. Contact privacy@tax-pilot.co.uk if you have concerns.
We may update this policy as TaxPilot evolves. Significant changes will be communicated via the extension or by email. The "Last updated" date at the top always reflects the current version.
We're a small, independent team and we take data privacy seriously. If you have any questions, concerns, or requests — we aim to respond within 48 hours.
privacy@tax-pilot.co.uk