Privacy notice

The data controller is TaxPilot CH, based in Basel, Switzerland (no fixed office address; commercial register entry in progress). For any data-protection request, email hello@taxespilot.ch. Our data-protection officer can be reached at the same address.

TaxPilot is a software tax preparation assistant. It does not constitute professional tax, legal or financial advice and does not replace a licensed Swiss fiduciary or tax advisor. The final accuracy, completeness, signature and submission of your tax return are your sole responsibility. To the maximum extent permitted by Swiss law, TaxPilot accepts no liability for tax assessments, back-taxes, penalties, interest, fines or missed deductions arising from the use of the service. See the terms of service for the full liability framework.

We only process your personal data when at least one of the following applies:

• Contract: processing is necessary to provide the TaxPilot service you signed up for.
• Consent: you have given explicit consent (e.g. for optional analytics or marketing communications). You may withdraw consent at any time.
• Legal obligation: retention of accounting records under Swiss law.
• Legitimate interest: securing our infrastructure against fraud and abuse.

TaxPilot collects only what is strictly required to prepare your Swiss tax return:

• Identity: name, email, AHV number, address, civil status.
• Tax documents you upload (salary certificate, Pillar 3a, insurance, bank statements, receipts).
• Technical data: IP address, device, language, essential cookies.
• Optional: analytics events, only if you accept the analytics consent.

We do not sell your data, do not profile you for advertising, and never share your tax data with third parties without your explicit instruction.

• Tax preparation data is kept for the current tax year + 10 years (Swiss accounting law).
• Account data is kept while your account is active and deleted within 30 days of closure.
• Server logs are kept for 90 days for security purposes, then deleted.

All tax documents and personal data are stored exclusively on servers located in Switzerland, operated by an ISO 27001-certified Swiss data-centre provider. We use a small number of vetted sub-processors bound by Swiss-level data-protection contracts:

• Infrastructure & database hosting — Switzerland only.
• Document OCR — runs in our Swiss cloud, never sent outside Switzerland.
• Email delivery — EU provider with Swiss Standard Contractual Clauses.

If transfer outside Switzerland is ever required, it only happens to countries with an adequate level of protection recognised by the Federal Council, or under the Swiss SCCs.

• TLS 1.3 in transit, AES-256 at rest.
• Per-customer encryption keys; staff cannot read your documents.
• Two-factor authentication available for every account.
• Annual penetration tests and 24/7 monitoring.
• Strict access controls, audit logging and least-privilege principles.

You have the right to:

• Access the personal data we hold about you.
• Request correction or completion of inaccurate data.
• Request erasure of your data (right to be forgotten).
• Object to specific processing or withdraw consent.
• Receive a copy of your data in a structured, machine-readable format (data portability).
• Lodge a complaint with the FDPIC (Federal Data Protection and Information Commissioner).

To exercise any of these rights, email hello@taxespilot.ch. We answer within 30 days.

In line with art. 24 nFADP, any data breach likely to result in a high risk to the rights of data subjects is notified to the FDPIC as soon as possible, and to affected users without undue delay.

Only strictly necessary cookies are set by default. Optional analytics cookies are only loaded after you accept them in the consent banner — you can change your mind any time by clearing site data in your browser.

TaxPilot is intended for adults. We do not knowingly collect data from persons under the age of 16.

This notice may be updated. Material changes will be highlighted in-app and via email. Last update: 22.10.2026.