SR AccounTax

Privacy Policy

Last updated: July 14, 2026

Privacy contact and typical retention

Privacy questions, access requests and correction requests may be sent to enquiry@sraccountax.ca. General enquiries that do not become client engagements are normally retained only as long as reasonably needed to respond, manage follow-up and maintain basic business records. Where an enquiry becomes a client engagement, tax, accounting and engagement records are retained according to the applicable legal, professional and contractual requirements.

Service providers and technical records

The website and business email are hosted through service providers that may process basic server, security and email-delivery information on behalf of SR AccounTax. Website logs may include an IP address, browser details, requested page and time of access. Google Fonts may create a connection to Google when pages load. Sensitive tax records should not be submitted through the public form.

Access, correction and deletion requests

You may ask what personal information SR AccounTax holds about a website enquiry, request a correction or ask whether information can be deleted. Some information may need to be retained where required for legal, tax, security, dispute or recordkeeping purposes.

Google sign-in

When a member chooses Sign in with Google, Google provides a signed account identifier together with the member’s name, verified email address and, when available, profile image. SR AccounTax uses this information only to create, connect and authenticate the Bank Statement Converter account. The service does not request access to Gmail, Google Drive, contacts, calendars or the member’s Google password.

The Google account identifier and email used for sign-in are retained while the connection remains active. Members can disconnect Google from the Profile page after establishing an SR AccounTax password. Google processes the sign-in interaction under Google’s own privacy terms.

Member accounts and subscription billing

When a person creates an SR Tools account, SR AccounTax stores the name, email address, password hash, email-verification status, subscription status and Stripe customer or subscription identifiers required to provide access. Passwords are stored as one-way hashes.

Stripe processes checkout, recurring charges, invoices, payment methods and the billing portal. SR AccounTax does not receive or store the complete card number. Stripe's own privacy practices apply to information submitted through its hosted pages.

Bank-statement converter

The converter is designed to process PDF statements and extracted transactions in the user's browser. The website does not intentionally transmit or retain the selected PDF or transaction table. Pro members may save non-sensitive converter preferences on their own device; bank and account identifiers are excluded from those saved preferences.

Account security and retention

Login attempts and Stripe webhook event identifiers may be retained for security, billing reconciliation and abuse prevention. Account and billing records may be retained where reasonably required for tax, legal, dispute, fraud-prevention and contractual purposes.

Usage controls and privacy-preserving identifiers

To enforce free and paid limits, the application records conversion authorization events, page counts, plan usage and conversion-credit balances. It stores keyed one-way hashes of the network address, signed device identifier and PDF file fingerprint. The PDF, account number, transaction descriptions and balances are not sent with these checks.

The PDF fingerprint is used to prevent the same statement from repeatedly receiving free conversion under different accounts. Free fingerprint and abuse-control records may be retained for at least the applicable 90-day restriction and longer where reasonably necessary for fraud prevention, disputes or legal obligations.

Cloudflare Turnstile

When enabled, Cloudflare Turnstile is used to assess automated or abusive activity during account creation and free conversion authorization. Cloudflare receives the information required to provide and validate that service under its own privacy terms.

Stripe conversion credits and early renewal

One-time conversion-credit purchases and early plan-renewal invoices are processed by Stripe. The application records the Stripe Checkout Session, invoice or payment identifiers, credits purchased and payment status for access control and reconciliation.