Most privacy policies are written to permit as much as possible. This one is written to describe what actually happens, which in the case of the tools themselves is almost nothing.
The figures you enter into the safe harbour test and the scoping tool never leave your browser. They are not transmitted to this site, not stored, and not visible to me at any point. Close the tab and they are gone. If someone asked me to produce them, I could not.
Saurabh Satija, sole proprietor, India, trading as saurabhsatija.com. Contact hi@saurabhsatija.com about anything on this page, including any request to see, correct or delete what I hold.
Address: TO CONFIRM — the trading address must be completed before the site is submitted for payment-processor review
| When | What | Why | Kept |
|---|---|---|---|
| You send a message | Your name, email and what you wrote | To reply to you | Until it is no longer useful to either of us |
| You subscribe to alerts | Email, and optionally your role and the jurisdictions you care about | To send you the alerts you asked for, filtered to what is relevant | Until you unsubscribe |
| You buy a licence | Your email, the licence code, and the processor's order reference | To issue the licence and to validate it when you use it | The licence term, then as long as needed for tax records |
| You visit any page | A page view, with no cookie and no identifier | To know which pages are worth maintaining | Aggregate only |
| You use the tools | Nothing | — | — |
I do not buy data, I do not enrich what you give me against other sources, and I do not sell or share it with anyone for marketing.
Analytics are cookieless and collect no personal data and no cross-site identifier. There is nothing to consent to, which is why you are not asked. Events recorded are things like “someone built a scope” or “someone opened an authority source” — never a search term, never an entity name, never a number you typed.
Your browser does store a small amount of information locally for your own convenience — your licence code, and which filters you last used. That stays on your device, is never sent anywhere, and you can clear it at any time through your browser settings.
Each holds data on my instructions and for no purpose of their own. Because I am in India and these providers operate internationally, your data may be processed outside the country you live in.
Where UK or EU data protection law applies: your message and your licence record are processed to perform a contract with you or to take steps at your request; alerts are sent on your consent, withdrawable in one click in any email; aggregate analytics rest on a legitimate interest in knowing which pages are worth keeping, balanced by collecting nothing personal.
You can ask me to show you what I hold, correct it, delete it, stop using it, or send it to you in a portable form. Email hi@saurabhsatija.com and I will do it within thirty days, usually the same week. There is no form and no charge.
If you think I have handled your data badly, tell me first — I would rather fix it. You are also entitled to complain to your data protection authority: in the UK the Information Commissioner's Office, and in the EU the supervisory authority where you live.
The site is served over HTTPS with a strict content security policy, HSTS, and no third-party scripts beyond the analytics named above. Licence records sit in Netlify's storage, reachable only by authenticated server functions. Forms carry spam protection that does not involve profiling you.
No system is perfectly secure, and I will not pretend otherwise. The strongest protection here is structural rather than technical: the most sensitive data in this whole product — your group's revenue, profit and tax figures — is never collected in the first place.
This is a professional tool for tax and finance practitioners. It is not directed at children and I do not knowingly collect data from them.
Last updated 7 October 2026. If this changes materially, anyone holding a live licence is told by email before it takes effect.