Privacy Policy

MuniServe operates RaketTax and is the personal information controller for the data described here. For any privacy question or request, contact us at info.muniserve@gmail.com.

• Account data: your email address, and — if you sign in with Google — your name and Google account identifier. Optionally, a mobile number if you want SMS reminders.
• Tax profile: the details needed to prepare your filing — full name, Taxpayer Identification Number (TIN), Revenue District Office (RDO) code, registered address, civil status, and, if you are a mixed-income earner, related information you choose to provide.
• Income and tax records: the entries you add to your ledger — amounts, dates, currencies and exchange rates, payer or client names and labels, creditable withholding tax, and figures from Certificates of Creditable Tax Withheld (BIR Form 2307).
• Uploaded documents: files you upload, such as 2307 certificates and prior BIR filings or worksheets, for catch-up and record purposes.
• Payment records: what you bought, when, the amount, and a transaction reference from our payment provider. We do not receive or store your full card number or bank credentials.
• Support messages: the content of messages you send us.
• Technical data: basic log data such as IP address, device and browser type, and timestamps, generated automatically when you use the Service and used for security and troubleshooting.

• To provide the Service — create your account, run the 8% tax calculations, generate worksheets and draft forms, and operate features such as reminders and Notebook copy mode. (Basis: performance of our contract with you.)
• To read uploaded documents — we send the document to our AI provider to extract figures automatically, so you can review and confirm them. (Basis: contract; your consent when you upload.)
• To deliver the Concierge service — we share the relevant records with a bookkeeper working with MuniServe if you purchase that service. (Basis: contract.)
• To send service messages and deadline reminders by email and, if you gave us a number, SMS. You can turn reminders off. (Basis: contract; legitimate interest.)
• To take payment through our payment provider. (Basis: contract.)
• To secure and improve the Service, prevent abuse, and keep records we are required to keep. (Basis: legitimate interest; legal obligation.)

We do not sell your personal data, and we do not use it for third-party advertising.

We use trusted service providers who process data on our instructions:

• Supabase — database, authentication, and file storage (hosted in Singapore).
• Vercel — application hosting and delivery (United States).
• Anthropic — AI processing of documents you upload, to extract tax figures (United States). Data sent through the API is not used to train their models.
• Resend — sending transactional email (United States).
• Semaphore — sending SMS reminders (Philippines), only if you provide a mobile number.
• Xendit — payment processing (Philippines).

We may also disclose data where required by law or a valid government request (for example from the BIR or a court), or to establish, exercise, or defend legal claims.

Some of our providers are located outside the Philippines, as noted above. Where we transfer personal data abroad, we take steps to keep it protected to a standard consistent with the Data Privacy Act, including through contractual safeguards with those providers.

We keep your account and tax records for as long as your account is active and for a period afterwards to meet legal, tax, and accounting requirements — tax-related records are generally retained for up to ten (10) years, consistent with Philippine record-keeping rules. Uploaded documents are kept until you delete them or close your account, subject to those retention rules. Backups are cycled out on a rolling basis.

Under the Data Privacy Act you have the right to:

• be informed about how your data is processed;
• access the data we hold about you;
• correct inaccurate or outdated data;
• object to processing, or withdraw consent where processing relies on it;
• have data erased or blocked where there are grounds to do so;
• obtain a copy of your data in a portable format;
• be indemnified for damage caused by a violation; and
• lodge a complaint with the National Privacy Commission.

You can do much of this in the app directly — edit your profile and ledger, delete entries and uploads, and delete your account. For anything else, email info.muniserve@gmail.com and we will respond within a reasonable time.

We protect data with encryption in transit (HTTPS), access controls and row-level security so each user can reach only their own records, restricted staff access, and reputable infrastructure providers. No system is perfectly secure; if a breach affects your rights, we will notify you and the National Privacy Commission as required by law.

We use only what the app needs to work: a secure cookie to keep you signed in, and browser local storage for small preferences such as a remembered tab. We don’t use advertising or cross-site tracking cookies. We may use privacy-friendly analytics that count visits in aggregate without identifying you.

The Service is for adults managing their own tax affairs and is not directed at anyone under 18. We do not knowingly collect data from children.

We may update this policy. If a change is material, we will notify you by email or an in-app notice. The “last updated” date at the top always reflects the current version.

Privacy questions or data-subject requests: info.muniserve@gmail.com.

If you believe we have mishandled your data, you may also contact the National Privacy Commission at privacy.gov.ph.

See also our Terms of Service.