How does Crypto Tax protect my data?
The short answer
Crypto Tax keeps your data on EU servers and your files and backups in Israel, encrypts it in transit and at rest, requires a one-time code on every password sign-in, does not sell your data or submit anything to the Tax Authority, and lets you export your data and delete your account from Settings.
In brief
- Server location
- European Union (Germany)
- Encryption
- In transit and at rest
- Signing in
- Password plus a one-time code, or an authenticator app
- Automatic sign-out
- After a period without activity
- Use of your data
- Not sold, and not used for advertising
- Deleting the account
- From Settings, at any time
Where is the data kept?
Crypto Tax’s servers and databases are in the European Union (Germany), and uploaded files and backups are in Israel. Some providers operate worldwide and may process data elsewhere too. All of this is done under the Privacy Protection (Transfer of Data to Databases Abroad) Regulations.
Under Amendment 13 of the Privacy Protection Law, in force since August 2025, information on a person’s salary data and financial activity is information of special sensitivity, and trading history and tax reports fall within it.
How is the data encrypted?
All communication is encrypted, as regulation 14(b) of the Privacy Protection (Data Security) Regulations requires for data sent from a database over a public network or the internet. The databases, files and backups are encrypted at rest as well.
Passwords are stored in a form from which they cannot be recovered. Exchange API keys and authenticator-app secrets are stored encrypted.
How is signing in protected?
Every password sign-in also requires a one-time code sent by email and valid for a short time, or a code from an authenticator app, where one is set up in Settings. After repeated failed attempts the account is locked for a while.
A session ends after a period without activity.
Who sees the data, and what is it used for?
Every user sees only their own data. A tax advisor or accountant sees only the clients they manage on their own account.
Crypto Tax does not sell your data, does not use it for advertising and submits nothing to the Tax Authority on your behalf. Those who receive data, such as the payment provider and the tax-document provider, are described in the privacy policy.
How do you export or delete the data?
In Settings you can download all your data as a data export, and delete your account at any time. On deletion, the profile, keys, transactions and reports are deleted immediately, and uploaded files shortly afterwards. A tax advisor or accountant cannot delete the account while it still has clients.
Copies may remain in backups for up to 35 days. Payment records and tax documents are kept for at least 7 years, as bookkeeping and tax law require, with no link to the deleted account.
Sources
Last updated: 2026-10-29
This page is general information only and is not tax advice. For your own circumstances, consult a tax advisor or accountant.