Privacy policy & collection notice
Last updated 16 October 2026. TaxSweep is run by Yo-Da Lai trading as TaxSweep (ABN 84 992 526 369), a sole trader. Contact: [email protected].
Collection notice (APP 5)
- What we collect: the receipts you upload (files), the details you enter or confirm (who the receipt is from, date, amount, myTax category, notes), your job type, and — if you pay — your email address and payment record from Square. If you connect Gmail, the sender, subject, date and any detected dollar amount of receipt-like emails.
- Why: to organise your receipts into records for your accountant or your own review, to take payment and issue a tax invoice, and to run and secure the service.
- What happens if you don't provide it: we can't organise receipts we don't have. Everything is optional except what's needed to pay.
- Who we share it with: only the service providers listed below, to run TaxSweep. We don't sell personal information and we don't give receipt or Gmail data to advertisers.
- Overseas: some providers store or process data outside Australia (mainly the United States).
- Access, correction and complaints: you can view, edit and delete your data in the app, or email us. If you're not satisfied with our response, you can complain to the OAIC.
Tax File Numbers
TaxSweep doesn't need your Tax File Number. Do not upload it. Cover or crop out any TFN and check each file yourself before uploading. We check readable text in supported text and PDF uploads, manual entries and Gmail subjects for TFN patterns and reject detected matches. These checks can miss TFNs; photos, scanned PDFs and some PDF text formats can't be reliably checked automatically. If you notice a TFN in something you uploaded, delete it in the app or email us and we'll delete it.
Where your data is kept
Your receipts and files are stored using Cloudflare database and file storage. Cloudflare may process data outside Australia to deliver the service. Access requires the session linked to your records.
Gmail (optional)
If you choose to connect Gmail, the connection is made through Composio (Composio, Inc., United States), which holds the Google authorisation on our behalf. Google's consent screen will show Composio's name and may request broad Gmail access. TaxSweep itself only:
- searches for receipt, invoice, bill and renewal emails in your selected income year or across all available years, checking up to 100 messages per inbox per scan; results may be incomplete;
- reads the sender, subject, date and short message snippet of those emails to show you suggestions and pre-fill dollar amounts;
- doesn't store email bodies, snippets or attachments, doesn't send email, and doesn't change or delete anything in your mailbox.
Limited Use. TaxSweep's use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use Gmail data only to provide receipt suggestions to you. We don't use it for advertising, don't sell it, don't use it to train AI models, and people don't read it unless you ask us for help, it's needed for security, or the law requires it.
You can disconnect Gmail in the app at any time, or remove access in your Google Account. Deleting your data also disconnects every connected inbox.
Service providers
- Cloudflare — hosting, database and file storage.
- Square — payments. We never see your card details.
- Composio — Gmail connection (only if you connect Gmail).
- Google Ads and Meta — advertising measurement, only if enabled. They receive page visits and a purchase event (amount and an order reference), never receipt, file or Gmail data.
Cookies
We use one essential cookie to keep your list linked to your browser. Advertising pixels set their own cookies when enabled.
Keeping and deleting data
Use “Delete all my data” in the app to permanently delete your receipts, uploaded files, job type and Gmail connections. We keep payment and tax invoice records (amount, GST, date, invoice number) for 5 years because Australian tax law requires it, but we remove your email address from them when you delete your data. Inactive lists are deleted after the 2025–26 tax season closes; we'll post the date here.
Security
Data is encrypted in transit and at rest by our providers. Access to your list requires your signed session cookie. If a data breach is likely to cause serious harm, we'll notify you and the OAIC.
General information only, not tax advice. TaxSweep is not a registered tax agent and doesn't give tax advice. For advice about your situation, see a registered tax agent.