Why we’re publishing this
Taxocat helps you track income and prepare tax-related actions. That means you may enter sensitive information — so we want to be clear about what we store, how we protect it, and which external services we connect to.
This page is written for people without an IT background.
What we store (and what we don’t)
Taxocat stores your app data (for example, your income entries). When you connect an external tax service inside Taxocat, you may also provide login details or session codes needed to complete actions in that service.
We try to store only what is necessary to make the product work.
Encrypted data in our database
Some pieces of information are especially sensitive (for example, credentials and session codes used for tax-service integrations). Before saving those values to the database, Taxocat encrypts them.
In simple words:
- Encrypted means the data is turned into unreadable text (“scrambled”).
- If someone got direct access to the raw database, they would not be able to read these values without the encryption key.
Secure connection when we talk to integrations
When Taxocat connects to external services, it uses HTTPS (an encrypted internet connection). This helps protect your data while it is being sent between Taxocat and the integration.
We also follow two basic rules:
- We send only the data required to perform the requested action.
- We do not send your Taxocat session tokens to analytics.
Integrations (what they are)
Today Taxocat can interact with a few third-party services:
- Taxocat API (our own backend)
- Georgian Revenue Service (GERS) (for tax-related workflows)
- National Bank of Georgia (NBG) (exchange rates)
- Google reCAPTCHA (helps protect sign-in/registration from bots)
- Google Identity (optional sign-in method)
- Google Analytics (basic usage statistics to improve the product)
Tips to keep your account safe
- Use a strong password (or sign in with Google).
- Keep your device protected (screen lock + system updates).
- Be careful with unknown browser extensions.
- Sign out on shared devices.
What’s next
We’ll keep this page updated as security and integrations evolve.