Legal notice & privacy

Your data and access

Responsible for processing your data: DW 6 9 LTD, Ippou, 27B, Monagroulli, 4524, Limassol, Cyprus.

OSS Cyprus processes account and company details, uploaded transaction reports and return drafts to provide the service. Government portal credentials are stored encrypted. Support access to quarter data needs your separate, revocable permission and expires within 48 hours.

Paid quarter archives are retained for ten years from the end of the relevant calendar year. Unpaid uploads are deleted from the active system after 30 days with advance notice. Encrypted backups may retain this deleted data for up to 35 additional days and expire no later than that. These backups are used only for recovery. Essential session cookies are used for authentication and security.

Optional Google sign-in

If you use Google sign-in, we process the stable account identifier, email address and verification status provided by Google to sign you in and identify your account. A connection to Google for sign-in is established only when you use the Google button. We do not request access to Gmail, Google Drive or tax data. An existing OSS Cyprus account is linked only after you explicitly choose to link it. Google Privacy Policy

Anonymous page view counts

For public pages, we count views in aggregate by day, page and the fixed category “email link” or “other views”. A tagged link is the same for all email recipients. Daily counts are retained for 90 days. We use no tracking cookies or visitor identifiers and store no IP addresses, full links, referrers or account data in these statistics. Nothing is shared with an analytics provider. These statistics are separate from technical protection and security measures.