Who is responsible
TaxAI is owned and operated by Marsolab FZ-LLC, a UAE Free Zone Limited Liability Company registered with RAKEZ. Our registered address and contact details are below. This policy covers taxai.tech, the TaxAI workspace, support and our API and agent integrations.
We act as controller for account administration, billing, security and our own support communications. When a business or accounting firm supplies personal data about its staff, clients or other people for bookkeeping, it determines the purposes of that processing and we process the records to provide its requested service. Contact that business about its own use of your information; you may also contact us for assistance.
Information we process
Account information includes your name, email address, authentication identifiers and workspace membership. Business records may include company details, tax identifiers, transactions, invoices, bank-statement contents, counterparties, reconciliation entries, deadlines and reminders that you or your authorised workspace members provide.
For AI assistance, we process your questions, conversation context and the company or transaction information retrieved by the advisor’s tools. Support and feedback include your contact details, message and information you choose to send. Please do not include passwords, card details or unnecessary sensitive information.
Billing information includes your selected plan, billing identity, subscription status, invoices and payment references. Stripe collects payment credentials on its hosted pages; TaxAI does not receive your full card number or security code. Technical information may include IP address, browser details, request times, security events and diagnostic logs. Server-side usage events record account or company identifiers, actions, counts and timestamps for usage limits and product measurement; they do not include statement contents or transaction descriptions. Browser storage is explained in our Cookie policy.
Purposes and legal grounds
We use information to provide the service you request: authenticate users, organise records, calculate estimates, answer questions, manage subscriptions, send service reminders and respond to support requests. We process data necessary to perform our contract or take steps you request before entering it, and to meet applicable legal obligations, including accounting and lawful requests.
Where consent is required under applicable law, we obtain it for the stated purpose and allow you to withdraw it. We do not treat acknowledgement of the cookie notice as consent to marketing, AI training or unrelated data use. We do not sell personal information or use customer records for advertising. Security and legal-claim processing must also have a lawful basis under applicable law; we do not rely on a blanket permission to use your information.
Service providers and AI processing
Our service uses Cloudflare for website delivery and security, Clerk for authentication, Stripe for payments and subscription administration, and Resend for service emails and feedback delivery when enabled. Infrastructure and database service providers support operation and storage. We share information needed for each function; payment and authentication providers may also process data for their own legal and security obligations.
External AI processing requires enabling it in the company’s Books settings. The advisor sends questions, conversation context and relevant tool results to Anthropic. PDF and receipt extraction and expense suggestions use OpenRouter and configured model or document providers, including Google Gemini, TypeSafe and Mistral OCR where configured. Requests may include uploaded document contents and transaction descriptions. Disabling external AI stops new requests; CSV imports and manual review remain available. Providers and models depend on the enabled feature and deployment configuration. Provider retention and training practices depend on the selected endpoint and account settings. We do not promise zero retention, UAE-only AI processing or that every provider excludes training. Do not submit personal or confidential information that you are not authorised to share with these providers. You can use bookkeeping features without sending an advisor message.
Workspace owners and authorised members can access records within their permissions. Integrations you choose to connect receive information within their authorised scope and operate under their own policies. We may disclose information where legally required, to handle legal claims or in a business transfer with appropriate protections and any legally required notice.
International transfers
TaxAI is operated from the UAE, but service providers and their subprocessors may process information outside the UAE, including in the United States and other countries where they operate. We do not offer a UAE-only data-residency guarantee.
International transfers must meet applicable UAE data-protection requirements, using an available lawful mechanism such as adequate protection or appropriate contractual safeguards, or another legally permitted condition. Contact us for information about the recipients, destinations and safeguards relevant to your use. This policy is a disclosure, not a request for blanket consent to all overseas transfers.
Retention and deletion
We retain account and workspace information while needed to provide your service. After closure or a deletion request, retention is assessed against outstanding billing, legal duties, disputes and security needs. Billing and statutory accounting records may need to be retained for the applicable legal period. We do not apply a single tax-record retention period to every type of personal information.
There is no automatic deletion guarantee tied to cancelling a subscription. Contact us to request deletion or an export; we will explain any information that must be retained and the applicable reason. Backups and provider-held records may have separate retention cycles. Local reminders and preferences remain in your browser until removed. Keep your own copies of records needed for tax compliance.
Your rights and how to contact us
Subject to applicable law and its exceptions, you may request information about processing, access to your personal data, correction, erasure, a portable copy, restriction or cessation of processing, withdrawal of consent, and review of decisions based solely on automated processing. The AI advisor provides information for you to assess; it does not make binding tax determinations or submit returns on your behalf.
Email hi@marsolab.com with “Privacy request” and enough information to identify your account and request. We may ask for proportionate identity verification or confirmation of authority to act for a company. Do not send identity documents unless requested through an appropriate channel. We will respond within the period required by applicable law and explain any restriction on a request. You may complain to the UAE Data Office or another competent supervisory authority where applicable.
Security, children and updates
We use access controls and technical safeguards appropriate to operating the service. No online service is completely secure. Report a suspected security incident using the contact below; where required, we will notify affected people and competent authorities.
TaxAI is a business service for adults with authority to use the workspace, not a service directed to children. Contact us if you believe a child has supplied personal data. Material changes to this policy will be communicated through the service or an appropriate contact channel; the date above identifies this version.
Provider policies
Company & contact
Marsolab FZ-LLC
Free Zone Limited Liability Company · United Arab Emirates
- Registration authority
- Ras Al Khaimah Economic Zone Authority (RAKEZ)
- Company registration
- 0000004084549
- Services licence
- 47030340
- Registered address
- VUEP2159, Compass building - Al Hulaila, Al Hulaila Industrial Zone-FZ, Ras Al Khaimah, United Arab Emirates