Who we are
Taxura provides VAT preparation software for businesses in the Kingdom of Saudi Arabia, available at taxura.app and in the Taxura mobile apps. This policy covers the website, the web app and the mobile apps.
Information we collect
| Category | Examples | Source |
|---|---|---|
| Account | Full name, work email, role in the workspace | You, at sign-up or invitation |
| Company | Company name, VAT number, CR number, group structure | Workspace admins |
| Invoices | Uploaded files (XML, PDF, images) and the data extracted from them | You and your team |
| VAT returns | Prepared returns by company and period | Generated in Taxura |
| Usage | Sign-in events, device and browser type, language preference | Collected automatically |
How we use it
- To read invoices, verify ZATCA QR codes and prepare VAT returns for your companies.
- To sign you in with a one-time email code and keep your workspace secure.
- To show the right companies and actions for each person's role.
- To support you when you contact us, and to improve how accurately invoices are read.
We only use invoice data to provide the service to your workspace.
AI and document processing
To read scanned PDFs and photos, Taxura sends the invoice image and its text to an AI provider: OpenAI or Anthropic, depending on how the service is configured. The provider returns the invoice details, such as the supplier, date, VAT number and amounts, and Taxura checks them against the ZATCA QR code where there is one. Anything Taxura can't read clearly goes to the Review queue instead of being guessed.
XML e-invoices are parsed directly and skip this step.
Sharing
Taxura does not sell your data. We share it only with the service providers that run Taxura for us, and where ZATCA or applicable law requires it. Our providers today are:
- Amazon Web Services (AWS), which stores uploaded files. Files are stored in the AWS São Paulo region for now. We plan to move them to a Saudi region.
- OpenAI or Anthropic, which read invoice images and text, as described above.
- Resend, which delivers our email, such as sign-in codes and invitations.
These providers process your data on our behalf, to provide their service to Taxura.
Retention
We keep invoices and prepared returns for as long as your workspace is active, so returns can be reopened or refreshed. Saudi VAT rules require businesses to keep tax records for a set period; you remain responsible for keeping your own records, and you can export your register to CSV at any time.
Security
- Passwordless sign-in with a 6-digit code sent to your work email. Sessions last 24 hours.
- Role-based access: group admins, accountants, company admins, project users and read-only auditors each see only what they need.
- All traffic to taxura.app runs over HTTPS.
- Uploaded files are stored with AWS in the São Paulo region. When storage moves to a Saudi region, we will update this policy.
Your rights
Under Saudi Arabia's Personal Data Protection Law you may ask to access, correct or delete your personal data, and to know how it is processed. Workspace admins can update company and user details directly in Taxura. For other requests, contact us.
Contact
Questions about this policy: support@taxura.sa, or use the contact form.