Cookie Policy
Last updated: 13 June 2026
Pivitax is an expense and receipt tracker for UK sole traders and freelancers. This Cookie Policy explains what cookies and similar tracking technologies we use on our web app at https://pivitax.com, why we use them, and how you can control them.
Please read this policy alongside our Privacy Policy to understand fully how we handle your data. This policy is governed by the UK Privacy and Electronic Communications Regulations 2003 (PECR) and the UK GDPR.
1. What Cookies Are
1.1 A cookie is a small text file that a website or web app places on your device (computer, tablet, or smartphone) when you visit or use it. Cookies are widely used to make websites and apps work, or work more efficiently, and to provide information to the owners of the site.
1.2 As well as cookies, we may use similar technologies such as web beacons, pixels, and local storage objects. For simplicity, we refer to all of these as "cookies" throughout this policy.
1.3 Cookies can be:
- Session cookies — temporary cookies that expire when you close your browser or log out.
- Persistent cookies — cookies that remain on your device for a set period or until you delete them.
- First-party cookies — set directly by Pivitax.
- Third-party cookies — set by our service providers and partners (listed in Section 3).
2. Cookies We Use
2.1 Strictly Necessary Cookies
These cookies are essential for the Pivitax web app to function. Without them, you would not be able to log in, navigate between pages, or use core features such as uploading receipts or viewing expense reports. These cookies do not require your consent under PECR.
| Cookie | Purpose | Set By | Duration |
|---|---|---|---|
| Authentication session token | Keeps you securely logged in to your Pivitax account | Supabase (first-party) | Session |
| CSRF token | Protects your account against cross-site request forgery attacks | Pivitax | Session |
| Subscription status cookie | Verifies your current plan (Free or Full) to unlock the appropriate features | Pivitax / Stripe | Session |
| Load-balancing cookie | Ensures your requests are routed to the correct server | Vercel | Session |
2.2 Performance and Analytics Cookies
These cookies help us understand how sole traders and freelancers use Pivitax — for example, which features are used most, how long it takes to process a receipt, and where errors occur. We only set these cookies with your consent.
| Cookie | Purpose | Set By | Duration |
|---|---|---|---|
| Error and performance logs | Records application errors and response times to help us fix bugs and improve performance | Vercel | Up to 30 days |
| Usage analytics | Tracks feature usage patterns in aggregate (e.g., how many receipts scanned per session) | Pivitax (first-party) | Up to 12 months |
2.3 Functional Cookies
These cookies enable enhanced functionality and personalisation within Pivitax. We set these cookies with your consent.
| Cookie | Purpose | Set By | Duration |
|---|---|---|---|
| User preferences | Stores your display preferences, such as currency format or tax category defaults | Pivitax | 12 months |
| Bank connection state | Retains state information during TrueLayer bank connection flow (Full plan users only) | TrueLayer | Session |
| Email delivery preference | Records whether transactional emails have been successfully sent | Resend | 30 days |
2.4 Marketing Cookies
At present, Pivitax does not use marketing or advertising cookies. We do not serve targeted advertisements, track you across third-party websites for advertising purposes, or share your data with advertising networks. If this changes in the future, we will update this policy and seek your consent before setting any marketing cookies.
3. Third-Party Cookies and Technologies
Because Pivitax integrates with several third-party services to deliver its core functionality, some of those providers may set their own cookies or use similar technologies when you use our web app.
| Provider | Purpose | Data Involved |
|---|---|---|
| Supabase | Database and file storage — stores all your account data, expense records, and uploaded files | Account data, expense records, receipt files |
| Anthropic (Claude) | AI receipt processing and document analysis — receipt photos, extracted text, and documents are sent to Anthropic's Claude API for categorisation and report generation | Receipt images, text content, and document data |
| Paddle | Payment processing — handles subscription billing, card data, and invoices | Payment and billing data |
| TrueLayer | Open banking connection (Full plan only) — enables you to connect your bank account for automatic transaction import | Bank account and transaction data |
| Resend | Transactional email delivery — sends account notifications and other emails to you | Your email address |
| Vercel | Hosting and infrastructure — hosts the Pivitax web app and captures server-side logs | IP address, request metadata |
3.1 We only share the minimum data necessary with each provider. Each provider acts as a data processor on our behalf or, in some cases, as an independent data controller. We have entered into appropriate data processing agreements with each provider where required under UK GDPR.
4. How to Manage and Disable Cookies
4.1 Your Consent Choices
When you first use the Pivitax web app, you will be presented with a cookie consent banner. You can accept all cookies, manage your preferences by category, or reject non-essential cookies. You can change your cookie preferences at any time by clicking the "Cookie Settings" link in the footer of the web app.
4.2 Browser Controls
You can also manage cookies directly through your browser settings. Most browsers allow you to view, delete, and block cookies. Links to instructions for common browsers:
- Google Chrome: support.google.com/chrome/answer/95647
- Mozilla Firefox: support.mozilla.org/en-US/kb/cookies-information-websites-store-on-your-computer
- Safari (Mac): support.apple.com/en-gb/guide/safari/sfri11471/mac
- Safari (iPhone/iPad): support.apple.com/en-gb/HT201265
- Microsoft Edge: support.microsoft.com/en-gb/microsoft-edge/delete-cookies-in-microsoft-edge
4.3 Please note that blocking strictly necessary cookies will impair or prevent your ability to use Pivitax — for example, blocking authentication cookies will mean you cannot stay logged in.
4.4 Blocking or deleting cookies set by third-party providers (such as Stripe) may affect related functionality, such as completing subscription payments.
4.5 Opting Out of Third-Party Services
- Anthropic (Claude): Contact us at info@pivitax.com to request that your data is not processed via Anthropic Claude. Note this will disable all AI-powered features for your account.
- TrueLayer (Full plan): You can disconnect your bank connection at any time from within your Pivitax account settings.
5. Consent and Your Legal Rights (GDPR and PECR)
5.1 Under PECR and UK GDPR, we are required to obtain your consent before setting non-essential cookies on your device. We do this through our cookie consent banner when you first use the app.
5.2 Strictly necessary cookies do not require your consent because they are essential for the service to function. All other cookies (performance, functional) are only set once you have given your consent.
5.3 You have the right to withdraw your consent at any time. To withdraw consent, use the "Cookie Settings" link in the app footer or adjust your browser settings as described in Section 4.
5.4 Under UK GDPR, you also have the following rights in relation to your personal data more broadly: right of access, right to rectification, right to erasure ("right to be forgotten"), right to restrict processing, right to data portability, and right to object to processing. Contact us at info@pivitax.com to exercise any of these rights.
5.5 If you are unhappy with how we handle your data or your rights request, you have the right to lodge a complaint with the UK's supervisory authority, the Information Commissioner's Office (ICO), at ico.org.uk/make-a-complaint or by calling 0303 123 1113.
6. Changes to This Cookie Policy
We may update this Cookie Policy from time to time to reflect changes in the cookies we use, changes in applicable law, or updates to the third-party services that power Pivitax. When we make material changes, we will update the Last Updated date at the top of this policy and, where appropriate, notify you via the app or by email. Continued use of Pivitax after changes have been posted constitutes your acceptance of the updated policy in respect of strictly necessary cookies. For non-essential cookies, we will seek fresh consent where required by law.
7. Contact Us
If you have any questions about this Cookie Policy or how we use cookies, please contact us:
Email: info@pivitax.com
Website: https://pivitax.com
We aim to respond to all enquiries within five working days.
Generated by InkTerms. This document should be reviewed by a qualified legal professional before use.