Privacy Policy
Last updated 16 June 2026
This Privacy Policy explains how MSP Tax (“MSP Tax”, “we”, “us”) collects, uses, discloses and protects personal information when you use the MSP Tax self managed superannuation fund (SMSF) tax and compliance software available at msptax.com.au (the “Service”). We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
MSP Tax is software used by accounting and SMSF administration professionals to prepare fund financial statements, tax returns and related lodgements. By using the Service you agree to this Policy.
1. Information we collect
- Account information: your name, business/firm name, email address and login credentials.
- Fund and tax data: SMSF details, member details, financial and investment data, and tax information you enter or upload to prepare returns and statements.
- Documents: financial statements, bank statements, trustee minutes and other supporting documents you upload, or that you authorise us to access from a connected source (such as Google Drive, see section 3).
- Usage and technical data: log data, device/browser information and actions taken in the Service, used for security and to operate the product.
- Cookies: a session cookie is used to keep you signed in. We do not use advertising cookies.
3. Google user data and Google API Limited Use
If you connect Google Drive, MSP Tax requests read only access (the drive.readonly scope) so that we can locate and read the fund documents you authorise, for example prior year financial statements and pension or commutation documents, and use their contents to assist with tax and compliance tasks within the Service. We do not create, modify or delete files in your Google Drive.
MSP Tax’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
- We use Google user data only to provide and improve the document reading features you enable.
- We do not sell Google user data, and we do not use it for advertising.
- We do not use Google user data to develop, improve or train generalised artificial intelligence or machine learning models.
- We do not transfer Google user data to others except as necessary to provide the Service, for security or legal reasons, or with your consent.
- You can disconnect Google Drive at any time in your firm settings, or revoke access at myaccount.google.com/permissions.
4. How we use your information
We use information to operate the Service: to authenticate you, prepare and generate fund financial statements, tax returns and lodgement reports, surface and process documents you provide or connect, provide support, maintain security and integrity, and meet our legal obligations.
5. How we store and protect information
The Service is hosted on infrastructure located in Australia. Documents are stored in a private object store with access restricted to authorised, signed requests; data is encrypted in transit. Access to production systems is limited to the operator of MSP Tax. We take reasonable steps to protect information from misuse, loss and unauthorised access, modification or disclosure.
6. Disclosure and service providers
We do not sell personal information. We disclose information only to service providers who help us run the Service, bound to protect it, including:
| Provider | Purpose |
|---|---|
| DigitalOcean | Cloud hosting and storage (Australia) |
| Google Drive access you authorise (read only) | |
| Email/SMS providers | Transactional notifications you request |
We may also disclose information where required by law, or to a related service you explicitly connect (for example MySMSF Property, for shared clients).
7. Data retention
We retain information for as long as your account is active and as needed to provide the Service and meet legal, tax and record keeping obligations. You may request deletion of your data, subject to those obligations.
8. Your rights
Under the APPs you may request access to, and correction of, the personal information we hold about you, and you may make a privacy complaint. Contact us using the details below. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
9. Cross border disclosure
Our primary hosting is in Australia. Where a service provider (such as Google) processes data outside Australia, we take reasonable steps to ensure it is handled consistently with this Policy and the APPs.
10. Children
The Service is intended for professional and business use and is not directed to individuals under 18.
11. Changes to this Policy
We may update this Policy from time to time. We will revise the “Last updated” date above and, where appropriate, notify you within the Service.
12. Contact us
Questions or privacy requests: support@msptax.com.au.