Settings & account · 2 min read

GDPR — your rights and data management

How to export all your data in Taxorio, how to delete your account and permanently erase your records, and what rights the GDPR data protection regulation guarantees you as a user.

Your rights under GDPR

As a Taxorio user, under the GDPR (the General Data Protection Regulation) you have the following rights towards Taxorio as the controller of your data:

  • Right of access — you can request an overview of the personal data Taxorio processes about you at any time.
  • Right to data portability — you have the right to export your data in a machine-readable format (CSV and JSON in a ZIP archive).
  • Right to erasure (the right to be forgotten) — you can request that all your data and your account be deleted.
  • Right to rectification — inaccurate data can be corrected directly in the app at any time.

Note: towards your own clients, you are the controller

When you enter data about your clients and suppliers into Taxorio (name, company ID (IČO), address, email on invoices and documents), you become the controller of personal data for those records, and Taxorio is merely a processor for you (it processes them under your instructions). This brings its own GDPR obligations for you:

  • Having a lawful basis for processing your clients' data (typically performance of a contract or legitimate interest).
  • In case of a data breach or misuse, assessing the risk and, if needed, reporting it to the Office for Personal Data Protection within 72 hours, and informing the affected clients if applicable. Taxorio doesn't fulfil this obligation on your behalf — we do inform you without undue delay about any incident affecting your data.
  • Handling your clients' requests (access, rectification, erasure). Taxorio provides you technical support for this.

Who Taxorio shares data with

To run the service we use vetted subprocessors: Railway (hosting and database, EU data region), Google – Gemini API (document recognition and the AI assistant; a paid interface where data isn't used to train models), Resend (sending emails and invoices) and Stripe (payments). You'll find the full list and terms in the Privacy Policy on the taxorio.cz website.

How to export your data

Taxorio lets you download a complete copy of all your data in a single file.

  1. Go to Settings → Data → Data export.
  2. Click Prepare export.
  3. Taxorio prepares a ZIP archive — this can take up to a few minutes depending on how much data you have.
  4. Once it's done, you'll get an email with a download link (valid for 7 days).

The ZIP archive contains:

  • Invoices — for every issued invoice, an .isdocx file for accounting software (containing both a machine-readable ISDOC and a PDF).
  • Invoice overview — a CSV with all issued invoices, and a second CSV with their line items.
  • Expenses — a CSV with all recorded expenses.
  • Attachments — scanned documents attached to invoices and expenses.
  • Clients — a CSV of your client address book.
  • Complete data — a summary JSON (invoices, expenses, clients, and both company and account settings).
  • README.txt — a description of the files and columns.

How to delete your account

Deleting your account is irreversible — once done, the data can't be restored. You don't need to ask anyone — you can do it yourself in the app:

  1. Go to Settings → Data → Account deletion.
  2. In the Danger zone section, click Delete account.
  3. Taxorio lists what will be deleted (invoices and attachments, expenses and documents, clients, settings and the company logo) and that your subscription will be cancelled automatically.
  4. To confirm, type your sign-in email and click Permanently delete account.

We remove production data immediately; it disappears from disaster-recovery database backups within 30 days at the latest (a single user's data can't be restored from those backups).

💡 Tip: Before deleting, download a data export (see above) — tax documents must be kept for 10 years.
⚠️ Warning: Deleting your account irreversibly removes: all invoices, expenses, clients, company settings and your user profile. Download a data export before deleting if you'll need the records for tax or accounting purposes (the law requires tax documents to be kept for 10 years).

What deletion does NOT remove

Even after account deletion, Taxorio may keep, for the period required by law:

  • Records of subscription payments (for accounting and tax purposes — 10 years).
  • Technical logs necessary for security and fraud detection (max. 90 days).

You'll find the details in the Privacy Policy on the taxorio.cz website.