Privacy Policy

1. Introduction

Sheet2Nest (“we”, “our”, “us”) operates Link2Tax, a cloud invoicing and business-document platform. Link2Tax is not a tax-compliance or tax-filing service. This Privacy Policy explains how we collect, use, store, and protect your information when you use the Link2Tax website and Service.

2. Information We Collect

We collect information you provide and data generated by your use of the Service:

• Account: email address, and (if you use social login) identifiers from the provider (e.g. Google).
• Company and business data: company name, logo, address, NTN/CNIC, and similar details you enter.
• Transactional data: customers, vendors, items, estimates, sales and purchase invoices, delivery challans, and payment records.
• Optional digital invoice posting credentials: if you enable posting of sales invoices to Pakistan’s Federal Board of Revenue (FBR) digital invoicing channel, you may store API tokens or related settings in the Service so invoices can be posted using your credentials. We use these only to perform posting you initiate and to show posting status.
• Usage and technical data: IP address, browser type, device information, and logs of how you use the Service (e.g. for security and improving the product).
• Billing metadata (from our Merchant of Record): when you subscribe, Polar (or another designated payment provider) may share limited transaction metadata with us (for example plan purchased, subscription status, billing email, and identifiers needed to operate your subscription). We do not receive or store your full payment card number.

3. How We Use Your Information

We use the information to provide, operate, and improve the Service; to authenticate you; to store and display your invoices and related data; to post sales invoices to FBR’s digital invoicing channel when you request it; to communicate with you (e.g. account and security notices); to comply with law and enforce our terms; and to protect our rights and the security of the Service. We do not use your data to file tax returns or act as your tax agent.

4. Hosting and Data Processing

We use Supabase and related infrastructure to host the Service and store your data. Data is processed in accordance with our instructions and applicable data protection requirements. When you post an invoice to FBR, relevant invoice fields are transmitted to FBR (or an intermediate relay you configure) solely to complete that posting.

5. Payments and Merchant of Record

Paid subscriptions are sold and charged by our Merchant of Record. Our current Merchant of Record is Polar Software, Inc. (“Polar”). For payment card details, billing address, buyer invoices/receipts, refunds, and chargebacks related to those purchases, Polar processes personal data under its own Privacy Policy and Checkout Buyer Terms. We do not store payment card information on Link2Tax systems. Polar may provide us with limited billing metadata so we can activate, sync, and support your plan. If a purchase is processed through another designated Merchant of Record, that provider’s privacy and buyer terms apply to that purchase.

6. Cookies and Similar Technologies

We use cookies and similar technologies for authentication, session management, and preferences (e.g. theme). You can control cookies through your browser settings; disabling some may affect how the Service works.

7. Data Retention

We retain your data for as long as your account is active and as needed to provide the Service and comply with legal obligations. After account closure, we may retain certain data for backup, legal, or audit purposes for a limited period. Billing and accounting records related to Merchant of Record purchases may also be retained by that provider under its own retention rules.

8. Your Rights

Depending on your location, you may have rights to access, correct, delete, or export your personal data, or to object to or restrict certain processing. You can update much of your data directly in the Service. For other requests about Link2Tax account data, contact us below. For payment-data requests held only by Polar (or another Merchant of Record), contact that provider as described in its privacy notice.

9. Security

We use industry-standard measures to protect your data (e.g. encryption in transit and at rest, access controls). Payment card data is handled by our Merchant of Record under its PCI responsibilities. No system is completely secure; you are responsible for keeping your login credentials and any FBR tokens you store safe.

10. Changes

We may update this Privacy Policy from time to time. We will post the updated policy on this page and update the “Last updated” date. Continued use of the Service after changes constitutes acceptance of the revised policy.

11. Contact

For privacy-related questions or to exercise your rights regarding Link2Tax, contact Sheet2Nest at info@link2tax.com.