← Back to calculator

How We Handle Your Data

This is a plain-language explanation of what happens to your documents when you use the Equity Tax Calculator. No legalese.

What happens to your documents

When you upload a PDF brokerage statement, here is the exact path your data takes:

• Your PDF is sent from your browser to our server over a TLS-encrypted connection. This is the same encryption used by banks.
• Our server sends the PDF to Anthropic's Claude AI (api.anthropic.com) to read and extract the transaction data. This is also over an encrypted connection.
• The AI reads your document and returns structured data: transaction dates, amounts, quantities, and types. This data comes back to our server.
• Your original PDF is deleted from our server memory immediately after the transaction data is extracted.
• We use the extracted numbers to look up exchange rates and build your tax spreadsheet. The spreadsheet is sent to your browser for download.

What we store

We do NOT store the documents you upload — they are deleted from server memory after processing. Your calculated tax data, however, we do keep, so you can see your history from quarter to quarter. We explain that below, and you can delete it anytime.

Where your data lives

Your calculated tax data (amounts, dates, quarterly breakdown) is kept in a database so you have a history. Here is how we protect it:

• The database runs on Railway and is stored encrypted at rest (disk-level encryption).
• Automated backups are encrypted too, and the connection is TLS end to end.
• Your calculations are the most sensitive data we hold — not the documents, since we throw those away after processing.
• You can delete everything yourself at any time: the Delete my data button permanently removes your account and all your calculations.
• Whatever you do not delete, we keep past the tax assessment-limitation period (7 years past the tax year by default), then delete it.

What Anthropic stores

Anthropic retains API inputs (including your PDF content) for up to 30 days for safety and abuse monitoring. They do not use API data to train their AI models. This is their standard API data retention policy. You can read their full policy on their website.

What we send to Anthropic

We send two things to Anthropic's API for each document:

• The full PDF file (the AI needs to see the document to extract data from it).
• An instruction prompt telling the AI what to extract (transaction types, dates, amounts).

We do not send your name, email, IP address, or any other identifying information to Anthropic.

Analytics

We use PostHog to understand how the product is used — for example, how many people upload documents, complete a calculation, or download a report. This helps us improve the tool.

• Events are captured both server-side (e.g. "upload started", "report downloaded") and in your browser (page views and clicks on buttons/links).
• We do not record your screen. Session replay is disabled.
• The text content of pages is masked before any analytics property is sent, so the figures, names, or values shown on your screen are not transmitted.
• Analytics use in-memory storage only — no analytics cookies and no localStorage are written. A new device identifier is generated each time you load the page.
• When you are signed in, your invite code is one-way hashed before being used as your PostHog identifier. We cannot reverse it.
• PostHog is configured on the EU region (eu.i.posthog.com). Data is stored in the EU.

What we do NOT do

• We do not use advertising or marketing pixels.
• We do not set analytics cookies, write to localStorage, or fingerprint your browser.
• We do not record your screen or capture the text shown on the page.
• We do not share your data with any third party other than Anthropic (for document reading) and PostHog (anonymous usage events).
• We do not store your documents after processing.
• We do not use your documents for any purpose other than generating your tax report.

Transparency during processing

When you process your documents, we show you a live timeline of exactly what is happening: when your PDF is received, when it is sent to Anthropic, when the response comes back, and when your PDF is deleted. We also show a data handling summary with your document's SHA-256 fingerprint and all timestamps.

This is not just a claim — you can verify it in real time.