Privacy Policy

TaxCompass (“we”, “us”) is an early-stage project that helps foreign founders open and run a business in Italy. It is not yet incorporated as a company. Until a legal entity is formed, the founders act as joint data controllers:

Jan Wangrat, Sorin Marian, Mikhail Alekseev, Margarita Mitina, Dmitrii Bogdanov.

For any privacy matter — including to exercise your rights — contact us at privacy@taxcompass.it. We are based in Milan, Italy. When TaxCompass is incorporated, the new entity will become the controller and we will update this notice.

We only collect what we need to provide and improve the service:

• Setup intake. The answers you give in the guided intake (e.g. where you are moving from, EU/non-EU passport, what you do, whether your profession is licensed, expected annual revenue, prior years of tax residence abroad, where your clients are, any existing business). This can include data about your income and professional situation.
• Chat content. The questions you ask the AI and the answers it returns. Anonymous chats are stored only in your browser (see below); they reach our servers only to generate the answer.
• Account data (only if you sign in). Your name and email address and a stable user identifier from Microsoft Entra External ID. We never see or store your password.
• Saved conversations (only if you sign in and save them). Your conversations, messages and the setup profile attached to them.
• Early-access list. If you join the waitlist: your email address and the optional survey answers (timeline, biggest blocker, what would help most).
• Usage analytics. Product and page-view events via PostHog (EU) — e.g. pages viewed, that a message was sent (length and locale, not its content), that an intake or plan was completed. These rely on cookies and a device identifier (see our Cookie Policy).
• Consent and technical records. If you accept our policies while signed in, we log the policy version, a timestamp, your user agent and a one-way hash of your IP address (never the raw IP). Standard server logs may be kept briefly for security.

Stored on your device, not on our servers: your theme and language preference, and — until you sign in and choose to import them — your conversations and setup plan. These live in your browser's local storage and you can clear them at any time.

TaxCompass is not directed at children; the service is intended for users aged 18 or over.

• To provide the service — answer your questions, build your setup plan, run the calculations, and (if you sign in) save your conversations. Legal basis: performance of a contract / taking steps at your request (Art. 6(1)(b) GDPR).
• To run and improve the product — analytics, debugging, security and abuse prevention. Legal basis: our legitimate interests (Art. 6(1)(f)) in operating and improving a reliable service.
• To keep you informed — if you join the early-access list, we email you about TaxCompass. Legal basis: your consent (Art. 6(1)(a)); you can unsubscribe at any time.
• To meet legal obligations — e.g. keeping a record of consent. Legal basis: compliance with a legal obligation (Art. 6(1)(c)).

To answer your questions, your message and any relevant intake details are sent to a large language model hosted by Microsoft Azure OpenAI in the European Union (Italy North / EU) for the single purpose of generating your answer. Your content is not used to train the underlying models. Answers are grounded in official Italian sources (Normattiva, Agenzia delle Entrate, INPS) — see our Methodology.

We use OpenTelemetry tracing to monitor reliability. Recording of prompt/response content in those traces is switched off by default, so your questions are not retained in our observability tooling.

We do not sell your personal data. We share it only with service providers (processors) who help us run TaxCompass, under contract and on our instructions:

• Microsoft — Azure OpenAI (AI inference), Azure Database for PostgreSQL (storage), Azure App Service (hosting), Application Insights (diagnostics) and Microsoft Entra External ID (sign-in). Hosted in the EU.
• PostHog — product analytics, on its EU Cloud.

We may also disclose data where required by law. Our infrastructure is configured to keep data in the European Union. Where any provider processes data outside the EEA, that transfer is covered by appropriate safeguards such as the European Commission's Standard Contractual Clauses.

• Account data and saved conversations: until you delete them or close your account.
• Early-access email: until you unsubscribe or ask us to remove it.
• Analytics: per PostHog's retention settings; we keep it only as long as useful.
• Consent records: kept as an audit trail for as long as needed to demonstrate compliance.
• Data stored only in your browser: until you clear it yourself.

Under the GDPR you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased;
• restrict or object to certain processing;
• receive your data in a portable format;
• withdraw consent at any time (without affecting prior processing).

If you have an account, you can export all your data and delete your account directly from your account settings. Otherwise, email privacy@taxcompass.it and we will respond within the time limits set by the GDPR. You also have the right to lodge a complaint with the Italian supervisory authority, the Garante per la protezione dei dati personali (Piazza Venezia 11, 00187 Roma).

We may update this policy as the product evolves. We will change the version and date above and, for material changes, give notice in the product. Questions? Write to jan@taxcompass.it.