Privacy Policy

Last Updated: 26 July 2026

At TaxSync, we take your privacy seriously. This Privacy Policy explains how TD Marvel d.o.o. ("TaxSync," "we," "us," or "our") collects, uses, stores, and protects your personal data when you visit our website or use our platform and services.

By accessing or using our services, you acknowledge that you have read and understood this Privacy Policy.

1.1 Data Controller

The data controller responsible for the processing of your personal data is:

TD Marvel d.o.o.
Beogradska 9
Belgrade, Serbia

1.2 Contact Us

For any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

• General privacy inquiries: pp@taxsync-app.eu
• Data Protection Officer (DPO): dpo@taxsync-app.eu
• Support: support@taxsync-app.eu

We collect personal data only when necessary for the provision of our services and to improve your experience. The types of data we collect include:

2.1 Account and Profile Information

When you sign up for our services, we collect:

• Full name
• Email address
• Job title
• Company name and address
• Phone number (optional)

This data is used to create and manage your account, communicate with you, and provide customer support.

2.2 Financial and Organizational Data

To deliver our services, we may process:

• Financial transactions and invoices
• Payment information (processed securely via our payment processor)
• Organizational governance structures and ownership details
• Operational metrics and compliance records

2.3 Usage Data

We automatically collect information about how you interact with our platform, including:

• IP address
• Browser type and version
• Device information
• Pages visited and actions taken
• Date and time of access
• Referring website

2.4 Cookies and Similar Technologies

We use cookies to enhance your experience and analyze site traffic. For more details, please see our Cookie Policy.

We use the following types of cookies on our website:

You can manage your cookie preferences at any time through your browser settings. Most browsers allow you to block or delete cookies entirely.

We process your personal data for the following purposes:

4.1 Provision of Services

To deliver the services you have subscribed to, including account management, platform access, and customer support.

4.2 Communication

To send you important updates, progress reports, and service-related announcements. We may also contact you for customer satisfaction surveys.

4.3 Improvement of Services

To analyze aggregated and anonymized usage data to improve our platform's functionality, fix bugs, and optimize user experience.

4.4 Legal Compliance

To comply with applicable laws, regulations, and legal processes, including responding to lawful requests from government authorities.

Under the GDPR and Serbian law, we rely on the following legal bases for processing your personal data:

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

• Active accounts: Data is retained for the duration of your contract and for a period of 24 months after termination to comply with legal obligations, handle disputes, and provide historical data if needed.
• Inactive accounts: If you have not interacted with our services for an extended period, we may delete your data earlier, subject to legal requirements.

After the retention period, your data will be permanently deleted or anonymized.

We implement appropriate technical and organizational measures to protect your data against unauthorized access, loss, or misuse.

7.1 Encryption

All customer data, including financial and organizational details, is encrypted both at rest (stored securely) and in transit (during transmission). We use industry-standard encryption protocols (TLS 1.2+ and AES-256).

7.2 Access Controls

Access to personal data is restricted to authorized personnel on a strict need-to-know basis. We enforce role-based access controls and maintain detailed access logs.

7.3 Secure Hosting

Your data is stored on servers located within the European Union, hosted by reputable cloud service providers with robust security certifications.

7.4 Data Minimization

We only collect and retain data that is strictly necessary for the provision of our services.

7.5 Employee Training

All employees undergo regular data protection and security awareness training.

7.6 Third-Party Vendors

When we engage third-party service providers, we conduct a thorough vetting process and ensure they are contractually bound to protect your data.

7.7 Incident Response

We have a comprehensive incident response plan to address any security breaches. Affected customers and the relevant supervisory authorities will be notified as required by law.

7.8 User Responsibility

You are responsible for maintaining the security of your account credentials. Do not share your login information with unauthorized individuals.

Disclaimer: While we implement industry-standard security measures, no data transmission or storage method is 100% secure. If you have concerns, please contact us at pp@taxsync-app.eu.

We do not sell or rent your personal data to third parties. We may share your information in the following cases:

8.1 Third-Party Service Providers

We work with trusted third-party providers to deliver our services (e.g., hosting, payment processing, analytics). These providers are authorized to use your data only as necessary for their services and are bound by confidentiality agreements.

8.2 Legal Compliance

We may disclose your data to comply with legal obligations or respond to lawful requests from government authorities.

8.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred, subject to appropriate confidentiality arrangements.

Under the GDPR and Serbian law, you have the following rights regarding your personal data:

To exercise any of these rights, please contact us at support@taxsync-app.eu. We will respond within one month of receiving your request.

Your data is stored on servers located within the European Union. Any transfer of personal data to third countries will be carried out in compliance with applicable data protection laws, including the use of Standard Contractual Clauses (SCCs) where required.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes via email or through our platform.

Effective Date of Changes: The date at the top of this page will be updated accordingly. We encourage you to review this page periodically.

If you have any questions, concerns, or feedback regarding this Privacy Policy or our data practices, please contact us:

• Email: pp@taxsync-app.eu
• Data Protection Officer (DPO): dpo@taxsync-app.eu
• Support: support@taxsync-app.eu

TaxSync: Your Partner for PPWR Compliance.