TaxFlow

Privacy Policy

Last updated 29 September 2026

This policy explains how White Star Web Solutions (Pvt) Ltd (“we”), the company behind TaxFlow, collects and uses personal data, in line with the Personal Data Protection Act, No. 9 of 2022 of Sri Lanka.

What we collect

  • Account details: your name, email address and password (stored only as a secure hash).
  • Business details you enter or connect: company names, TINs, addresses, bank details, invoices, customers and the tax documents you issue.
  • Connection data: access tokens for Xero, QuickBooks, Zoho Books, Odoo, Google Sheets, WhatsApp and PayHere, encrypted at rest.
  • Usage and security data: sign-in times, IP address, browser type and an audit log of actions in your workspace.

How we use it

  • To provide TaxFlow: reading your invoices, preparing and issuing tax documents, and sending them when you ask us to.
  • To bill you through PayHere. We never see or store full card numbers.
  • To keep TaxFlow secure, prevent misuse and meet legal obligations.
  • To tell you about changes to the service. Marketing emails only with your consent, and you can unsubscribe at any time.

Who we share it with

We use carefully chosen processors to run TaxFlow: cloud hosting, email delivery, PayHere for payments and Meta for WhatsApp messages you send. When you send a document, its recipient receives it. We do not sell personal data.

How long we keep it

Issued tax documents and their audit records are kept for as long as your workspace exists and for the period Sri Lankan tax law requires records to be kept. When you close your account we delete or anonymise other personal data within 90 days, unless the law requires us to keep it.

Your rights

You can ask to access, correct or delete your personal data, withdraw consent, or object to processing, as the Act allows. Contact us using the details below. You can also complain to the Data Protection Authority of Sri Lanka.

Security

We encrypt data in transit and sensitive fields at rest (AES-256), offer two-step verification, limit staff access and record important actions in an audit log.

Changes

We will post changes on this page and tell you by email about significant ones.

Contact us

White Star Web Solutions (Pvt) Ltd. Reach us at support@artslabcreatives.com.