Privacy Policy

This policy explains what GCC Tax GPT collects, why, where it is kept, who can see it, and what you can do about it. It is written to match what the system actually does.

1. What we collect

• Account details: your name, email address, phone number, and the versions of the terms, privacy policy and disclaimer you accepted, with the time and network address of acceptance.
• Credentials: your password is held by Amazon Cognito, an identity service running in our own cloud account. We never see or store it.
• Your questions and the answers: stored so that your history works and so that a wrong answer can be investigated and reproduced.
• Usage: counts of questions, the processing cost of each, and sign-in times.
• Technical records: for each answer, a trace of what the system read and did (the documents opened, the checks made, timings and cost).

2. Information about third parties

A tax question often contains facts about a client or another business. You decide what to enter. If you enter information about other people, you are responsible for having the right to do so. We treat everything you enter as confidential and use it only to answer your questions and to operate and improve the Service.

3. How answers are produced

Your question and the passages of law the system reads are sent to a large language model operated by Anthropic under its commercial terms, which do not permit the use of our data to train its models. The published law itself carries no personal data; the personal data involved is what you type.

4. Who can see your data

Your questions and answers are private to your account. Our administrators can open a user’s conversation in order to investigate a reported wrong answer or a suspected misuse; every such access is logged with the administrator’s identity and the time. There is no cross-conversation memory: nothing typed in one conversation can surface in another.

5. Where it is kept and for how long

• Data is stored in Amazon Web Services in the United States (us-east-1), encrypted at rest and in transit.
• Questions and answers are kept while your account exists, or until you delete a conversation.
• Technical traces keep the question, the answer and the checks made on it for 90 days, after which they are removed automatically every night; what remains of the trace (which documents were read, timings, cost) contains none of your facts and is kept for engineering.
• Deleting a conversation removes it immediately and permanently: the questions and answers, and the investigation records behind them (including the sources read and the checks made). Only your daily usage counts and the administrative log entry that a conversation existed remain, and neither contains its content. Closing your account deletes your profile and conversations the same way.

6. Your rights

You can see and export your history, delete conversations, correct your account details, and ask us to close your account. Applicable data protection law, including UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data where it applies, may give you further rights; contact us to exercise them.

7. Cookies and tracking

The Service uses only the storage needed to keep you signed in. There is no advertising and no third-party analytics.

8. Changes and contact

We will notify material changes through the Service. Questions about this policy: admin@gcctaxgpt.com.