FFiler.pk
Sign inGet started

← Back to Filer.pk

Privacy & consent policy

Filer.pk helps you prepare a filing-ready summary of your Pakistani income tax. To do that we handle sensitive personal and financial information. This page explains, in plain language, what we collect, how we use it, how we protect it, and the control you have over it. By using Filer.pk you consent to the handling described here.

What we collect

  • Account details — your email address and, optionally, your phone number, used to sign you in and to send the reminders and updates you opt into. You can change your email preferences any time in Settings.
  • CNIC / NTN — stored encrypted at rest. We use it only to label your filing and to help you check your Active Taxpayer List status on FBR's portal.
  • Financial documents — salary certificates, bank statements, withholding certificates, property and vehicle papers, and similar files you upload.
  • Income and asset figures — the amounts you enter or that we read from your documents: income by head, taxes already paid, assets, and liabilities.

How we use it

We use your data for one purpose: to prepare your own tax filing summary and the calculations and reminders that go with it. We do not use it to build advertising profiles or for any unrelated purpose.

How we protect it

  • Encryption at rest. Sensitive fields, including your CNIC and your uploaded documents, are encrypted with AES-256 before they are stored. Data in transit is protected with TLS.
  • Key management. Encryption is performed with a server-held key that is not accessible to other users and is never exposed to your browser. We do not use a separate key per user; the key is managed centrally by us.
  • Backups. Database backups are managed by our hosting provider and are encrypted at rest under the provider's standard configuration.
  • No sensitive data in logs. Our application logs are scrubbed of CNICs, financial figures, and document contents before anything is written.
  • Access control. Your data is tied to your account and is not visible to other users.
  • Breach notification. If we become aware of a breach that affects your personal or financial data, we will notify you at your account email without undue delay (and in any case within 72 hours of confirming it), describing what happened and the steps you can take.

Where your data is processed

Filer.pk runs on cloud infrastructure (our application host and a managed PostgreSQL database) located in the United States. This means your data — including your encrypted CNIC and financial figures — is transferred to and processed on servers outside Pakistan. It is encrypted in transit and at rest as described above. By using Filer.pk you consent to this transfer and processing.

Lawful basis

We process your personal and financial data on the basis of your consent, which you give when you create your account (we record the time you accept this policy), and to provide the service you have asked us for. You can withdraw consent at any time by deleting your account, which erases your data as described below.

How long we keep it

We keep your account data for as long as your account is active so you can return to your filing prep year over year. When you delete your account, your records are removed from our live systems immediately; residual copies in encrypted backups are purged on the provider's rolling backup cycle (within about 30 days). The free public tools (such as the calculator) store nothing.

We do not share or sell your data

We do not sell your personal or financial information, and we do not share it with third parties for their own purposes. If you choose to share your summary with a consultant, that sharing is initiated and controlled by you.

Your rights: access, export & deletion

  • Export. You can download a copy of all your data — profile, income, assets, liabilities, your document list, and reminders — from Settings → “Export my data”, as a JSON file.
  • Deletion. You can delete your account at any time from Settings. Deletion is permanent and removes all of your documents, income and asset figures, and your encrypted CNIC. This is your right to erasure; once completed, your data cannot be recovered.

To exercise any of these rights, or if you have a question or complaint about your data, email us at mtahirkaam@gmail.com.

Not affiliated with FBR

Filer.pk is an independent tool and is not affiliated with, endorsed by, or operated by the Federal Board of Revenue (FBR) or IRIS. We have no access to any official FBR account or filing system on your behalf. Any status you record from FBR's portal is information you provide to us.

Contact

Questions about this policy or your data? Email us at mtahirkaam@gmail.com.

Disclaimer

Estimates and general information only — not tax, legal, or financial advice. Filer.pk is not affiliated with, endorsed by, or operated by the FBR, and does not file your return on IRIS. Verify with FBR/IRIS or a qualified professional before filing.