Privacy
The short version
PaperTax works from public wallet addresses. We never ask for private keys, seed phrases, signatures or exchange logins. We keep the minimum needed to run accounts and payments, and we don't sell data.
What we collect
- Wallet addresses you enter, and the public trading data we read for them. Addresses you save to an account are stored with it.
- Your email address, if you sign in, join a list or buy something.
- Purchase records: which wallet and tax year you bought, the price and the Stripe reference. Card details are handled by Stripe and never reach us.
- Technical data: IP address and request logs, kept briefly for security and rate limiting.
Your browser stores your sign-in session, and paid-report unlock tokens in local storage. We don't use advertising or tracking cookies.
Who processes it
- Supabase (database and sign-in), hosted in Sydney, Australia.
- Vercel (website and API hosting), which may process requests in the United States.
- Stripe (payments) and our email provider (sign-in and receipt emails).
- Hyperliquid's public API, which receives the wallet addresses we look up.
How long we keep it
Account data is kept while your account is open. Purchase records are kept for at least five years because Australian tax law requires us to keep business records. Request logs are kept for a short period.
Your choices
You can remove saved wallets and revoke API keys from your account page. To get a copy of your data, correct it or delete your account, email nick@astrnt.me. We aim to handle this in line with the Australian Privacy Principles. If you're unhappy with our response you can contact the Office of the Australian Information Commissioner (oaic.gov.au).