What happens to your information
You can use the calculators and download reports without creating an account. Deductit receives personal information only when you choose secure account saving, sign in, or ask to be contacted.
Last updated 31 July 2026You choose what Deductit receives
Use Deductit privately
Your calculator entries, deduction workspace and locally downloaded report stay in this browser. You do not need to give Deductit your name or email.
Save a report to an account
An account is optional. Deductit receives your verified email, any preferred name you add, and a report only after you choose Save this report.
Ask Deductit to contact you
Deductit receives your email, optional first name, report category and broad income and deduction bands. The full report and exact dollar amounts are not included.
Deductit does not ask for your tax file number, date of birth, bank details, identity documents or residential address when you save a report or request contact.
A contact request can also include whether the report relates to an individual or company, whether a HELP loan appears relevant, the Deductit page used and the referring website domain. The customer backend does not store your network address. It keeps a general browser type, the notice accepted and the time to protect the service and record your choice.
How Deductit uses it
- Verify your email, protect your account and provide reports you explicitly save.
- Respond when you ask Deductit to contact you about its tax tools or services.
- Prevent misuse, investigate security events and keep a protected-data access record that does not contain report values.
- Meet legal obligations and respond to lawful requests.
Deductit does not give a selected tax or financial service partner your saved report or exact dollar amounts under the partner permission. If you opt in, the partner receives only your contact details and broad summary. The partner's privacy policy applies to its later handling.
Encrypted storage in the United States
Deductit's secure customer data service is hosted with Railway in its US West region. If you choose an account or contact request, that information is transmitted to and processed in the United States.
Detailed financial data and contact details are encrypted before database storage. Access is restricted, protected actions are audited, and decrypted report contents are not copied into access logs.
Deductit uses hosting, database and email-delivery providers to operate the account and contact services. Information can also be disclosed where Australian law requires it.
A report you download directly to your device is not sent to the secure customer data service. A report waiting in your browser is uploaded only when you choose Save this report after email verification.
How long server data is kept
| Information | Deletion schedule |
|---|---|
| Unverified sign-in or report-save request | 7 days |
| Inactive contact request | 90 days after the latest contact or activity |
| Contact request you withdraw or Deductit closes | 30 days |
| Verified account and saved reports | 24 months after the latest account activity |
| Security and access audit records | 24 months, without financial report contents |
| Deletion request and key-destruction records | Account, request and staff identifiers are removed after 24 months. Non-identifying proof that encryption keys were destroyed is kept. |
| Expired sessions, sign-in links and abuse-prevention records | Checked and deleted daily |
When a confirmed account deletion is requested, active sessions are revoked. The account and each saved report have separate encryption keys; those keys and the stored data are destroyed. Deductit can keep a minimal, one-way protected email code and consent record where needed to honour a withdrawal and record the permission history.
Deductit's server retention does not replace your own tax record-keeping obligations. Download any report you need to keep with your records.
View, correct, export or delete your data
Sign in to view or update account details, download an export, remove individual saved reports, change optional permissions, or delete the account.
Open My accountTo ask a privacy question, correct other information, request access or deletion, or withdraw a contact or partner choice, email Deductit from the address connected to the request.
Email privacy contactDeductit will verify identity before releasing or changing protected information. If a privacy concern is not resolved, you can contact the Office of the Australian Information Commissioner.