Legal

Privacy Notice

Last updated: April 2026

This Privacy Notice explains how TaxAppeal.ie ("we", "us", "our") collects, uses, and protects your personal data. We are committed to protecting your privacy in accordance with the General Data Protection Regulation (GDPR) and the Irish Data Protection Act 2018.

Who We Are

TaxAppeal.ie operates the website taxappeal.ie, an AI-assisted document-drafting service for notices of appeal to the Tax Appeals Commission. We are the data controller for personal data collected through this website. We are not affiliated with the Revenue Commissioners or the Tax Appeals Commission.

For data protection queries, contact us at: our contact page or by email at hello@taxappeal.ie.

What Data We Collect

Email address — provided when you purchase or contact us
Payment information — handled entirely by Stripe; we do not store your card details
Appeal details — the information you enter to draft your notice of appeal (assessment reference, tax head, period, amount, grounds of appeal). We do not ask for your PPSN
Technical data — IP address, browser type, pages visited (via anonymous analytics)

Why We Collect It (Legal Basis)

Contract performance — to draft and deliver your notice of appeal
Legitimate interest — to improve our service and prevent fraud
Legal obligation — to comply with tax and financial record-keeping requirements
Consent — for any marketing communications (you can opt out at any time)

How We Use Your Data

To draft your notice of appeal
To process your payment via Stripe
To respond to your queries or refund requests
To send your document by email
To comply with our legal obligations

Who We Share Data With

We do not sell your personal data. We share data only with trusted service providers necessary to operate our service:

Stripe — payment processing (their privacy policy applies to card data)
Anthropic (Claude API) — to draft your appeal content. Inputs are processed but not stored for training purposes under our API agreement
Vercel — website hosting
Formspree — contact form processing

International Data Transfers

To create your document we send the details you enter to our AI provider, Anthropic, which processes them on servers in the United States. Where personal data is transferred outside the EEA — to Anthropic, and where applicable Stripe (payments), Vercel (hosting) and Formspree (contact form) — the transfer is protected by appropriate safeguards, namely Standard Contractual Clauses and/or the EU–US Data Privacy Framework, under each provider's data-processing terms. Anthropic does not use data submitted through its API to train its models.

How Long We Keep Your Data

Form inputs: not retained after your appeal is generated
Drafted appeal content: deleted within 30 days
Payment records: kept as legally required (Irish tax law — 7 years)
Contact form messages: deleted within 12 months

Your Rights Under GDPR

You have the right to: access your data · correct inaccurate data · erase your data · object to processing · data portability · withdraw consent at any time.

To exercise any right, contact us and we will respond within 30 days.

Cookies

We use only essential cookies required to operate the site. We do not use advertising or tracking cookies. No cookie consent banner is required as we do not use non-essential cookies.

Complaints

If you believe your data has been mishandled, you have the right to lodge a complaint with the Data Protection Commission (Ireland).

Changes to This Notice

We may update this notice from time to time. The "last updated" date at the top of this page will reflect any changes. Continued use of the site after changes constitutes acceptance.