Privacy Policy
Last updated: February 2026
Taxentis (taxentis.co.uk) is operated by MC Software Ltd (company number 16230837). This policy explains what data we collect when you use our UK PAYE tax tools (free) and CT600 corporation tax filing service (paid), and how we use it.
Data controller
MC Software Ltd is the data controller responsible for your personal data. If you have any questions about how your data is handled, contact us at hello@taxentis.co.uk.
What data we collect
Free tools (no account required): No personal data is collected. All tax calculations run entirely in your browser. We collect anonymous usage analytics only.
Account holders: When you create an account, we collect your email address and a hashed password (via Supabase Auth). If you use our CT600 service, we also store your draft filing data and submission metadata (including correlation IDs, company numbers, and filing status).
Paid users: Payment and billing data is processed by Paddle, who acts as merchant of record. We receive your purchase or subscription status and plan type but never your card details.
HMRC connections: If you connect your HMRC account, we store OAuth tokens (encrypted) to make API requests on your behalf. We do not store your Government Gateway password.
How we use your data
- To provide and improve the service
- To process CT600 filings on your behalf
- To manage your purchases and subscriptions
- To communicate about your account
We never sell your data.
Data processors
The following third parties process data on our behalf:
- Supabase — database and authentication (EU hosted). See the Supabase Privacy Policy.
- Paddle — payment processing and merchant of record. Handles billing, invoicing, and VAT. See the Paddle Privacy Policy.
- HMRC — CT600 submissions and MTD API data. See HMRC's data protection information.
- Vercel — hosting. Serves the website. See the Vercel Privacy Policy.
- Google Analytics — anonymous usage statistics. See the Google Privacy Policy.
- Google AdSense — advertisements on free pages. See the Google Ads Privacy Policy.
Cookies
Taxentis sets a session cookie for authenticated users (via Supabase). Google Analytics and Google AdSense may set additional cookies to measure site usage and serve relevant advertisements. You can manage or disable cookies through your browser settings at any time.
Data retention
Account data is kept while your account is active. CT600 drafts and submission records are kept for 7 years in line with HMRC record-keeping requirements. You can request account deletion at any time by emailing hello@taxentis.co.uk.
Your rights (UK GDPR)
Under UK GDPR, you have the right to:
- Access the personal data we hold about you
- Rectify inaccurate personal data
- Erase your personal data
- Restrict processing of your personal data
- Data portability
- Object to processing of your personal data
To exercise any of these rights, email hello@taxentis.co.uk. We will respond within 30 days.
Data security
All data is transmitted over HTTPS. Database access is protected by row-level security. Payment data is handled entirely by Paddle and never touches our servers.
Changes to this policy
We may update this policy from time to time. The date at the top of this page will reflect the latest revision.
Contact
If you have any questions about this privacy policy, please email us at hello@taxentis.co.uk.