Privacy Policy

Last updated: 21 October 2026

Brokers.tax is operated by HASHCODE SOFTWARE - FZCO, Building A1, IFZA Business Park, DDP, 61615-001, Dubai, United Arab Emirates (licence 61615), contact support@hashcode.software (“we”, “us”). This policy explains what we do with your data when you use brokers.tax.

What we process

• Your broker statement. The file you upload is read in memory on our server to extract trades, dividends, interest and positions. We do not keep the original file.
• Calculated figures. The extracted transactions and the calculation result are stored so you can reopen your report, switch tax years and download it. They are linked to a random identifier stored in a cookie, not to your name.
• Payment data. Payments are handled by Stripe. We receive the payment status, amount and the e-mail you enter at checkout. We never see your card details.
• Usage statistics. We count page views and steps of the purchase process with our own first-party records (random identifier, page, referrer). We use no third-party analytics or advertising trackers.
• Messages to us. When you use the contact form we store your e-mail, your message and your IP address so we can reply and keep spam out. Messages are kept for up to 2 years, or deleted earlier on request.
• Server logs. Technical logs (time, request, errors) kept for up to 30 days to keep the service secure and working.

Why and on what basis

We process data to provide the calculation you request and to fulfil the purchase (performance of a contract), to keep the service secure and improve it (legitimate interest), and to comply with accounting obligations for payments (legal obligation).

How long

Extracted transactions and report details are deleted after 90 days; only anonymous totals remain for statistics. You can delete a report at any time with the “Delete this report” button. Payment records are kept as long as accounting law requires.

Who receives data

Stripe Payments Europe / Stripe, Inc. for payments; our hosting provider for running the server. We do not sell or share your data with anyone else. Some providers may process data outside your country; transfers rely on appropriate safeguards such as standard contractual clauses.

Cookies

We use only necessary cookies: a random identifier (“uid”) that links your reports to your browser, your chosen country (“picked”), and, if you opened a link a friend shared, that link’s short code (“by”, kept 90 days) so we can count invitations. No advertising cookies.

Your rights

You may request access, correction, deletion, restriction or a copy of your data, and object to processing, by writing to support@hashcode.software. If you are in the EU/EEA or the UK you may also complain to your data protection authority.

Security

All traffic is encrypted with HTTPS. Statements are never shared, and no broker login is ever requested.