What FilerKaro holds, and why
FilerKaro asks for tax documents, so it asks for sensitive things: your CNIC, your income, your bank statements. This page says exactly what is collected, where it sits, who else can see it and how to have it removed. It describes what the software actually does today, not what a template says.
What is collected and why
The free estimate on the home page needs no account and no email. It takes an amount and two answers, computes in your browser and on the API, and keeps nothing tied to you unless you ask for the estimate by email, in which case your address and that estimate are stored so it can be sent.
Once you buy a pack and start the wizard, FilerKaro stores:
- Your email address, which is also how you sign in.
- Your name as it appears on your CNIC, your CNIC, your NTN and your PSEB registration number if you have one.
- Your income figures, and the payment exports and bank statements you upload.
- Withholding certificates, expense entries and the wealth statement items you enter.
- For a bank transfer or Raast payment: your email, the amount, a reference code and the receipt you upload.
- For ATL Guard: a keyed hash of your CNIC, used to look up your Active Taxpayer status each week.
All of it is there for one purpose: to compute your return and produce your filing pack. None of it is used for advertising, and none of it is sold or shared for marketing.
Your CNIC is never stored in plaintext
When you enter your CNIC it is encrypted on the server before it is written to the database, using a key held outside the database. The plaintext is not kept anywhere. What is stored alongside it is the last five digits, so the app can show you which CNIC is on file, and a keyed one-way hash used to run ATL lookups without decrypting anything. Every API response about your profile carries those last five digits and nothing more.
Sign-in works the same way by design: FilerKaro uses emailed magic links only. There are no passwords, so there is no password to leak. Anyone with access to your inbox can sign in as you, which is worth remembering.
Where your data is stored
The database, the authentication and the uploaded files live in a Supabase project in the ap-south-1 region, which is Mumbai. Uploads go into a private storage bucket with no public URLs; when a file has to be displayed, the server mints a signed link that stops working after ten minutes. The website is served by Cloudflare Pages and the API runs on Cloudflare Workers, so requests pass through Cloudflare's network before reaching either.
Bank statement PDFs are read in your browser, not on the server. Only the text extracted from the PDF is sent to the API for parsing. FilerKaro does not send your documents or your figures to any AI service or any external OCR provider.
Who else touches it
Four companies are involved in running FilerKaro, and no others.
| who | what they do | what they see |
|---|---|---|
| Cloudflare | Hosting for the website and the API | Every request, including your IP address |
| Supabase | Database, sign-in and file storage | Everything listed above, as stored |
| Resend | Sends sign-in links, receipts and reminders | Your email address and the contents of those emails |
| Paddle | Merchant of record for card payments | Card details and billing data, when card payment is switched on |
Card payment is not switched on today, so Paddle currently receives nothing. When it is enabled, card details go to Paddle and never reach FilerKaro. Every page on this site also loads two typefaces from Google Fonts, which means Google sees the IP address of the browser that loads them.
Cloudflare Web Analytics runs on the public pages only, never on a signed-in page that carries filing data. It sets no cookies and does not follow you between sites. There are no advertising pixels anywhere on this site.
How long it is kept, and how to have it deleted
Your filing and its figures are kept while your entitlement runs and after it, because next year's return starts from this year's closing wealth and reuses your profile. Files you upload stay in the private bucket. An automatic purge of uploaded source files some months after filing is planned, but it is not running yet, so today those files stay until you ask for them to go.
Email [email protected] from the address on your account and ask for a copy of your data or for it to be deleted, and it will be done. Deletion removes your profile, your filing, your figures and your uploaded files. The record of a payment itself, meaning the reference code, amount and date, is kept for accounting. Deleting your data while a filing is in progress means starting again, so it is worth downloading your pack first.
If something ever goes wrong that affects your data, you will hear it from me by email, and not from anyone else.