SnapTax Security & Incident Response
Last Updated: June 2026
Operator & Contact
SnapTax is operated by Gang Huang, an individual sole proprietor ("we", "us", "our").
Contact: snaptax.lightxforge@gmail.com
Privacy requests: snaptax.lightxforge@gmail.com (subject: Privacy Request)
Mailing address: Hong Kong
Services are offered to users in the United States. Customer data is processed and stored in the United States as described below.
We protect receipt and account data using measures appropriate to financial information, including:
**Encryption in transit:** TLS 1.3 for data sent between your device and our servers.
**Encryption at rest:** AES-256 (or equivalent) where supported by our cloud providers for stored images and database records.
**Access controls:** Production data access is limited to operational need; credentials and secrets are not stored in client-side code.
**Logging:** Security and API logs exclude receipt images; email addresses in logs are masked where feasible.
If a security incident affects your personal data, we will:
1. Investigate promptly and contain the issue
2. Notify affected users without undue delay and, where required by law, within 72 hours of becoming aware of a high-risk breach
3. Notify regulators when required (e.g., under GDPR)
4. Describe what happened, what data was involved, and steps we are taking
We notify affected US users as required by applicable state breach notification laws.
How to report a security concern
Email snaptax.lightxforge@gmail.com with subject line Security Report.
We do not request your password or full payment card details by email.