1. Introduction

Rolling Sloane Technology Limited ("we", "our", or "us") operates FiscalFox (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. It covers every FiscalFox product: the UK calculator, FiscalFox Ireland and FiscalFox Australia. Rolling Sloane Technology Limited is the controller of your personal data for all of them.

Company Details:
Rolling Sloane Technology Limited
124 City Road
London EC1V 2NX
England
Email: support@fiscal-fox.com
Telephone: +44 7426 714774

2. Information We Collect

2.1 Information You Provide

Email address (for account creation, authentication, and email communications)
The terms version you accept when signing in, the product and sign-in method, the time of your action and when our server receives the record. This is linked to your account and is separate from marketing permission.
Payment information (processed securely through Stripe)
Tax year selection and income information (for tax calculations)
Support requests you send us (name, email address and message)

2.2 Transaction Data Processing

In the UK calculator, built-in broker files are parsed in your browser where possible. When you upload a broker file, whether or not you are signed in, we also send a copy of the original file to our servers and store it privately so we can investigate support queries and improve import reliability. If you are not signed in, we link your uploads using a random identifier stored in your browser, and keep a short-lived record of the parsed rows, the outcome, and the other files active in that browser session. Broker files you upload may also be read on FiscalFox servers in Frankfurt, Germany (EU) to check and improve our imports.

When you are signed in, the transactions, dividends, settings and calculation results you save are stored in our database so you can return to them.

Some UK calculator features send parts of your data to AI providers (see section 6):

Other Broker AI import: opt-in, and only used where the background check described below is not available. After you sign in and give permission, the file contents (or, for some files, the column headings and a small sample of rows) are sent to an AI model to work out how to read them.
Corporate action research: when you are signed in and a possible share split, merger or similar event is found, we send the security name, ticker or ISIN, and the dates, quantities and amounts of related transactions to an AI model to research the event. We do not send your name or email address.
Import recovery (background check): when one of your uploads cannot be read fully by our built-in importers, whether or not you are signed in, our servers may automatically send the file's column headings, up to about 30 sample rows (which can include dates, security names, tickers, quantities and amounts) and counts of the kinds of activity found to an AI model (Anthropic's Claude) to propose how to read the file. This does not need a separate opt-in. We do not send your name or email address, and the proposal is checked against the file before anything is imported. On the import review page you can also ask for a fresh check of a file; that only happens after you tick the AI permission box.

FiscalFox Ireland: Irish history is stored on your device in a separate workspace. When you sign in, original files, extracted records and calculation settings are saved to your private account. Irish files are not added to the UK calculator's upload store. Trading 212, Revolut, eToro and IG exports are read entirely in your browser. For any other broker, FiscalFox Ireland sends up to 65 rows of the file, including its column headings, to Anthropic to work out how to read the export. This happens without a separate opt-in, including when you are not signed in, because it is needed to import the file you chose. Those rows can contain anything the export contains, such as dates, investment names, quantities, amounts and, if your broker includes them, account numbers or names. FiscalFox then reads the full export and calculates in your browser using its own code. To limit misuse, each assisted import request is counted against a one-way hash of your network address. If that quick import cannot read the file, FiscalFox Ireland keeps a private copy on our servers and a background job takes a closer look: it sends the first rows of every sheet and a sample of later rows to Anthropic to work out which sheet and columns hold your transactions. Only that column map comes back, and your browser reads the file with it. The copy is deleted after 14 days, or sooner if you remove the file or delete your account. Our servers send public ISINs to OpenFIGI to look up investment types, and request ECB exchange rates for the relevant dates and currencies from Frankfurter, so neither receives your IP address. Those lookups do not include your name, account details, transaction amounts or the original file. You can download a history backup before clearing your Irish workspace.

FiscalFox Australia: Australian history is stored on your device in its own workspace. When you sign in, the records read from your files, the file names and your answers (such as investment types, AMMA amounts, chosen parcels, trades and income payments you entered, and 30 June 2027 prices) are saved to your private account. A copy of each file you upload, whether or not you are signed in, is kept privately on our servers for 14 days so we can check and fix how it was read; FiscalFox staff can open these copies for that purpose. They are then deleted. Exports from brokers whose layout FiscalFox knows, eToro statements and the FiscalFox trade list are read by FiscalFox's own code. For an export it doesn't recognise, FiscalFox Australia sends up to 65 rows of the file, including its column headings, to Anthropic to work out how to read it, without a separate opt-in because it is needed to import the file you chose. Those rows can contain anything the export contains, such as dates, investment codes, quantities, amounts and, if your broker includes them, account numbers or names. FiscalFox then reads the full export with its own code. Each assisted import request is counted against a one-way hash of your network address to limit misuse. When you ask FiscalFox to look up company events for an investment, it sends Anthropic that investment's code, exchange, name, ISIN, trading currency and the dates you held it, so Claude can search public announcements; nothing about you or your other holdings is sent. Each lookup is also counted against a one-way hash of your network address. When you send your workings to a tax agent, the download you chose to send is stored privately on our servers for 30 days so they can open it, and we email them a link through Resend. We record when and how often the link is used to download the workings, counting those downloads against a one-way hash of the agent's network address. We keep their name and email address, your name and any note with the record of what was sent for 13 months, then delete it. If you start sending but don't finish, that record and the upload are deleted within two days. Our servers fetch Reserve Bank of Australia exchange rates for the dates and currencies needed, so the Reserve Bank does not receive your IP address or any of your details. Please remove tax file numbers from files before you upload them. If an export includes one in a labelled column or in the usual format, FiscalFox removes it in your browser before anything is sent or stored.

UK and Irish product history are held separately under your account. We record which product you use to separate service reporting and customer journeys; this is not a determination of your tax residence. Deleting your account removes its Irish cloud history and removes the Irish account copy in the browser used for deletion. Copies on other devices and backups you downloaded remain under your control. Signing out keeps device history for recovery and does not delete your account.

The UK and Irish products have their own addresses. We do not use your location or a cookie to choose between them.

We do not sell your transaction data.

2.3 Automatically Collected Information

Usage analytics via PostHog (page views, feature usage)
Technical information (browser type, device type)
File metadata (filename, size, upload timestamp) and private storage object metadata

3. How We Use Your Information

We use the collected information to:

Provide and maintain our Service
Process your payments via Stripe
Generate capital gains tax reports
Send secure continuation links when you ask to resume on another device
Send reminders and offers about FiscalFox's UK tax reports to people who sign in to the UK calculator, unless they say no when they sign in. FiscalFox Ireland accounts are not sent these unless they separately agree
Improve our Service through analytics
Comply with legal obligations

We may tailor reminders to actions you have taken in the Service, such as signing in without uploading a file, viewing a report preview, or leaving checkout before payment. Every such email includes an unsubscribe link. Unsubscribing stops these product and marketing emails, but we may still send messages you request and essential account, security, payment, or legal messages where necessary.

3a. Legal Bases for Processing

Under UK and EU data protection law, we rely on these legal bases:

Performance of a contract: providing the calculators, importing and reading the files you choose (including sending sample rows to an AI provider when an import needs it), saving your history, producing reports, handling payments and answering support requests
Legitimate interests: cookieless product statistics, keeping the Service secure, limiting misuse of imports, investigating failed imports to improve reliability, recording which product an account uses so that UK and Irish reporting and emails stay separate, and keeping evidence of the terms accepted during sign-in
Consent: persistent analytics and advertising cookies, and any marketing emails you agree to receive. You can withdraw consent at any time
Legitimate interests and the soft opt-in: reminders and offers about our own similar UK services to people who gave us their email when signing in to the UK calculator, with the chance to say no at sign-in and in every email (Privacy and Electronic Communications Regulations, regulation 22(3))
Legal obligation: keeping payment and accounting records, and responding to lawful requests

Your right to object: you can object at any time to processing based on legitimate interests, and to any marketing, by emailing support@fiscal-fox.com. We will stop unless we have compelling legitimate grounds that override your interests, or need the data for a legal claim.

You don't have to give us your broker files or an email address, but without your files we cannot calculate your figures, and without an email address you cannot sign in to save your history.

4. Data Security

We use the following measures to protect your information:

Client-side parsing: Built-in broker transaction files are parsed locally in your browser where possible
Private file storage: Uploaded files are stored in a private Supabase storage bucket that is not publicly accessible
Encryption in transit and at rest: Data is sent over HTTPS, and our database and file storage provider (Supabase) encrypts stored data at rest. We do not add a separate layer of application-level encryption, so authorised FiscalFox staff can access stored data when needed to provide support or operate the Service
AI imports: In the UK calculator, the background check for uploads our built-in importers cannot read sends column headings and sample rows to an AI model without a separate opt-in, and the Other Broker AI import, where it is used instead, only sends your file after you opt in. FiscalFox Ireland assisted imports send up to 65 rows without a separate opt-in. Both are described in section 2.2
Access controls: Database and storage policies limit each signed-in user to their own records
Secure authentication: Via Supabase with industry-standard protocols
Payment security: All payment processing handled by Stripe's PCI-compliant infrastructure

5. Data Storage and Retention

What we store:

Account information (email address and settings)
Purchase history and payment records
Transactions, dividends and calculation results you save while signed in
File metadata and original uploaded broker files
Anonymous import outcomes and short-lived review records linked by a random browser identifier
Records of AI parsing requests (used to apply usage limits)
With each purchase, how you found us: the campaign tags in the link you arrived on (such as utm_source and utm_campaign), the first page you visited and the website that sent you. Advertising click identifiers (such as Google's gclid) are only kept when you allow advertising measurement
Email journey, delivery, engagement, and unsubscribe records
Short-lived secure continuation-link records, including the broker and tax year you selected

What we DON'T store:

Publicly accessible raw transaction files
Bank account or card details (Stripe handles these directly)

How long we keep it:

Original files captured when you upload, and their upload records, are deleted automatically 14 days after upload. This applies whether or not you were signed in.
If you ask us to prepare your report with the done-for-you service, the files you share are kept until the request is delivered, refunded or cancelled, then deleted 30 days later. FiscalFox staff open them only to prepare your report.
If that capture step fails while you are signed in, the app may store the file directly in your private folder instead. Those files are kept until you delete your account.
Anonymous import outcomes and review records are deleted together with the uploaded file after 14 days.
Secure continuation links expire after seven days.
Other account data, including saved transactions and calculation results, is kept for as long as your account is active.
FiscalFox Ireland history on your device stays in your browser until you clear it, or until you delete your account in that browser.
FiscalFox Ireland account history, including original files, extracted records and settings, is kept until you delete your account. Files you remove from your Irish workspace can remain in private storage until then.
FiscalFox Ireland files kept for a background closer look, and the result, are deleted 14 days after upload, or when you remove the file or delete your account.
Rows sent to Anthropic for an assisted import are deleted by Anthropic within 30 days under its standard API terms, unless its safety systems flag the request, in which case Anthropic may keep it for up to 2 years. FiscalFox does not keep a copy of the request.
FiscalFox Australia workings sent to a tax agent are removed 30 days after sending; the record of who they were sent to is deleted after 13 months, or with your account.
FiscalFox Australia history on your device stays in your browser until you clear it, or until you delete your account in that browser. The account copy is kept until you remove your files or delete your account.
The record of which product an account has used is kept until you delete your account.
Terms-acceptance records are kept until you delete your account. Your browser also keeps a temporary record to complete sign-in and retry saving the evidence if a connection fails.

You can delete your account and its saved data at any time on the account deletion page (also linked from our support page), or ask us to do it for you.

6. Third-Party Services

We use the following third-party services:

Supabase: Authentication, database, file storage and server functions
Vercel: Website hosting and server functions, run in the United States, except reading uploaded broker files, which runs in Frankfurt, Germany (EU)
Stripe: Payment processing (they handle your payment information directly)
Google (Gemini API): AI model used for the opt-in Other Broker AI import and, as a fallback, for corporate action research. It receives the file contents or transaction details described in section 2.2
Anthropic (Claude): AI model used to work out how to read broker files our built-in importers cannot read (column headings and sample rows, including automatic import recovery and FiscalFox Ireland and Australia assisted imports) and to research corporate actions and Australian company events, as described in section 2.2
OpenFIGI (operated by Bloomberg): Investment type lookups for FiscalFox Ireland. Our servers send public ISINs only, not your identity or transactions
Trigger.dev: Runs background jobs, such as retrying a failed import or checking a corporate action. Files and transaction details processed by those jobs are handled on its infrastructure
Langfuse: Monitoring of AI parsing requests. It receives your account ID, the broker name, file type, and counts of rows found, but not file contents
Frankfurter (frankfurter.dev): Foreign exchange reference rates. FiscalFox Ireland lookups go through our servers, so Frankfurter does not receive your IP address. In the UK calculator, when a rate is not in the rate files we publish ourselves, your browser requests it directly from Frankfurter, which receives the currency and date range requested along with your IP address and browser information, but not your transactions or identity
Financial Modeling Prep and other market data providers: Share split and price data. They receive ticker symbols or ISINs only, not your identity
PostHog: Cookieless product statistics without browser storage for all visits; persistent identity and session replay only when you allow analytics
Resend: Delivery of account, product, reminder, and offer emails, and of the email that sends your FiscalFox Australia workings to the tax agent you name. Also internal alerts to our support inbox when a signed-in upload fails. These alerts contain only internal reference numbers, error codes and row counts, not your email address, file names or file contents
Google Analytics 4: Website analytics to understand how visitors use our Service, only when you allow analytics storage
Google Ads: Purchase conversion measurement, only when you allow advertising. Enhanced Conversions may send a securely hashed version of your email address to improve conversion measurement accuracy.
Trustpilot: Some pages show a Trustpilot review widget, which loads from Trustpilot and receives your IP address and browser information
Meta Business Tools: The Meta Pixel and Conversions API provide campaign and conversion measurement for Facebook and Instagram advertising, only when you allow advertising. Meta may receive advertising click/browser identifiers, IP address, browser user-agent, page path and the conversion event. We do not send your broker, tax year, gain figures, transaction counts, report figures, or email address to Meta.

We do not sell, trade, or otherwise transfer your information to third parties beyond these essential service providers.

7. Your Rights (UK and EU GDPR)

Under applicable UK and EU data protection law, you have the right to:

Access: Request a copy of your personal data
Rectification: Request correction of inaccurate data
Erasure: Request deletion of your data
Portability: Receive your data in a portable format
Object: Object to processing of your data
Restrict: Request restriction of processing

To exercise these rights, email support@fiscal-fox.com or write to the address in section 1. We respond within one month, as the law requires. You can delete your account and its saved data yourself on the account deletion page.

You can also stop product updates, reminders, and offers immediately by using the unsubscribe link in any of those emails. We retain a suppression record so that we can honour that choice.

8. Cookies and Consent

We use essential cookies for authentication and session management. PostHog also collects cookieless product statistics without using cookies, local storage, or session storage. Persistent analytics and advertising cookies (including those set by PostHog, Google Analytics, Google Ads and Meta) are only activated after you give your consent via our first-party privacy choices banner.

So that a purchase can be credited to the campaign or page that brought you, we keep the campaign tags from the link you arrived on, the first page you visited and the website that sent you in session storage for the current browser tab. This is deleted when you close the tab. Advertising click identifiers are only kept there when you allow advertising.

How to manage your preferences: You can change or withdraw your cookie consent at any time by clicking “Cookie settings” in the site footer, or by clearing your browser storage. When consent is denied or withdrawn, PostHog switches to cookieless product statistics and stops session replay, while Google tags receive a denied Consent Mode state and do not set analytics or advertising cookies. Depending on our configuration, Google may receive limited cookieless measurements. Learn more about how Google uses business data.

9. Children's Privacy

Our Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children under 18.

10. International Transfers

Some of our service providers process personal data outside the UK and the European Economic Area, including in the United States (for example Anthropic, Vercel and Stripe). Where a country does not have an adequacy decision, we rely on the European Commission's Standard Contractual Clauses, with the UK addendum for UK data, in our providers' data processing terms, or on an adequacy decision such as the EU-US Data Privacy Framework where a provider is certified under it. You can ask us for details of the safeguards that apply to your data.

If you are in Australia: we handle your personal information in line with the Australian Privacy Principles. It is held by us in the United Kingdom and by the service providers listed in section 6, including Supabase, Vercel, Anthropic, PostHog and Resend, who may store or process it in the United Kingdom, the European Union and the United States. We make no decisions about you by automated means that significantly affect your rights or interests: the calculator works out figures that you review and confirm. You can ask to see or correct the personal information we hold about you by emailing us.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

12. Contact Information

For questions about this Privacy Policy or to exercise your rights, email support@fiscal-fox.com or write to us at:

Rolling Sloane Technology Limited
124 City Road
London EC1V 2NX
England

13. Complaints

If you have concerns about how we handle your data, you have the right to lodge a complaint with a supervisory authority, in particular where you live, where you work or where you believe the infringement happened. In Ireland, you can contact the Data Protection Commission. In the UK, you can contact the Information Commissioner's Office (ICO) at ico.org.uk. In Australia, please contact us first; if you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner.