Privacy Policy

Who we are

mySal (mysal.life) is a salary and tax calculator application operated by [YOUR NAME / COMPANY NAME], [YOUR ADDRESS]. For any privacy questions or requests, contact us at privacy@mysal.life.

What data we collect

Account data. Your email address and password (encrypted), and the date you created your account.

Profile data. Information you enter to power your calculations: salary, country, employment type, pay frequency, pension contributions, and student loan plan.

Financial data you log. Jobs and income sources, bills and budget entries, freelance income and expenses, invoices, and mileage records. You control what you enter.

Payslip data. If you use payslip scanning, your payslip image is processed by our AI provider (Anthropic) to extract salary figures. The image is processed transiently and is not permanently stored by mySal.

Payment data. Your subscription tier and billing dates. Card details are handled entirely by Stripe — mySal never sees or stores your card number.

AI conversation data. Questions you ask the AI Advisor and reports generated by the AI Accountant are stored so you can revisit them.

Technical data. IP address, browser type, and session information needed to keep you signed in.

Why we process your data

Under GDPR, we rely on the following legal bases: contractual necessity for account, profile, financial and payment data (we need it to provide the service you signed up for); consent for payslip scanning and optional analytics cookies; and legitimate interest for service security and improvement.

Who we share data with

We use three service providers (sub-processors) to run mySal:

• Supabase Inc. (USA) — database and authentication infrastructure.
• Stripe Inc. (USA) — payment processing.
• Anthropic PBC (USA) — AI processing. When you use the AI Advisor, AI Accountant, or payslip scanning, the relevant data (your salary details, questions, or payslip image) is sent to Anthropic's API to generate the response.

We do not sell your personal data. We do not share your data with advertisers. We have data processing agreements in place with all sub-processors.

International transfers

Our sub-processors are based in the United States. Transfers are protected by Standard Contractual Clauses approved by the European Commission and, where applicable, the EU–US Data Privacy Framework.

How long we keep your data

Account, profile and financial data: while your account is active, deleted within 30 days of an account deletion request. AI conversation history: 12 months. Payment records: up to 7 years, as required by tax law. Technical logs: 12 months.

Your rights

If you are in the EU, UK or Ireland, you have the right to: access your data, correct inaccurate data, delete your data ("right to erasure"), export your data in a portable format, object to processing based on legitimate interest, and withdraw consent at any time.

You can exercise the deletion and export rights directly from your Account Settings page. For anything else, email privacy@mysal.life. We respond within 30 days.

You also have the right to lodge a complaint with a supervisory authority. In Ireland: the Data Protection Commission (dataprotection.ie). In the UK: the Information Commissioner's Office (ico.org.uk).

California residents

If you are a California resident, the CCPA gives you the right to know what personal information we collect, to request deletion, and to opt out of the sale or sharing of personal information. mySal does not sell or share your personal information. To exercise any right, email privacy@mysal.life or use the "Do Not Sell or Share My Personal Information" link in our footer.

Your rights around the world

United Kingdom. If you are in the UK, the UK GDPR and Data Protection Act 2018 give you the same rights described above. Complaints may be made to the Information Commissioner's Office (ico.org.uk).

Canada. We handle personal information in accordance with PIPEDA. You may access or correct your information, withdraw consent, and complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca).

Brazil. If you are in Brazil, the LGPD gives you rights of access, correction, deletion, portability, and information about data sharing. You may contact the ANPD (gov.br/anpd) with complaints. Our contact for LGPD matters is privacy@mysal.life.

Australia. We handle personal information consistently with the Australian Privacy Principles under the Privacy Act 1988. Complaints may be made to the OAIC (oaic.gov.au).

Other countries. Wherever you are, we apply the same core standards: we collect only what the service needs, we never sell your data, and you can always request access, correction, export or deletion by emailing privacy@mysal.life. Where your local law provides additional rights, we will honour them.

Cookies

We use essential cookies (sign-in session — always active), and optional functional and analytics cookies (only with your consent). You can change your cookie choices at any time via Cookie Settings in the footer.

Security

Data is encrypted in transit (TLS) and at rest. Access is restricted through row-level security — you can only ever access your own records. If a breach occurs that affects your rights, we will notify you and the relevant authority within 72 hours.

Changes

We'll email you before making material changes to this policy.

Contact

privacy@mysal.life · [YOUR NAME / COMPANY NAME], [YOUR ADDRESS]