1. Overview
ato-mcp.com.au ("we", "our", "the service") is an independent tool that provides access to publicly available Australian Taxation Office information via the Model Context Protocol. We collect minimal personal information to deliver a personalised experience.
We are not affiliated with the Australian Taxation Office. This service operates under Australian privacy law principles.
2. Information we collect
When you create an account, we collect your email address and the following tax profile fields. All fields are optional: you can use the service without completing your profile.
| Field | Description |
|---|---|
| given_name | Your first name |
| state | Your state or territory of residence |
| residency_status | Your Australian tax residency status |
| has_abn | Whether you hold an Australian Business Number |
| abn | Your ABN (if applicable) |
| business_structure | Your business entity type |
| business_name | Your registered business name (if applicable) |
| industry_code | Your ANZSIC industry classification code |
| occupation | Your occupation |
| gst_registered | Whether you are registered for GST |
| gst_period | Your GST reporting period |
| payg_instalments | Whether you pay PAYG instalments |
| fbt_payer | Whether you are registered for Fringe Benefits Tax |
| has_spouse | Whether you have a spouse or de facto partner |
| dependants | Number of dependants |
| hecs_help_debt | Whether you have a HECS/HELP debt |
| private_health_insurance | Whether you hold private health insurance |
| has_investment_property | Whether you own investment property |
| has_shares_or_managed_funds | Whether you hold shares or managed funds |
| has_crypto | Whether you hold cryptocurrency |
| super_fund_type | Your superannuation fund type |
| current_fy | The current financial year |
| prior_fy_lodged | Whether you have lodged your prior year tax return |
| accepted_disclaimer_at | Timestamp when you accepted the disclaimer |
| facts_updated_at | Timestamp when your facts were last updated |
| schema_version | Internal data schema version |
3. What we do not store
- Your actual tax returns or ATO correspondence
- Your Tax File Number (TFN)
- Banking or financial account details
- Income amounts or asset valuations
- Information from third-party services
4. Event types logged
We log the following events for security and debugging purposes. Logs are retained for 90 days.
- Magic-link email sign-in
- Tax facts created or updated
- Account deleted
- MCP connection detected
5. Data retention & deletion
You can delete your account at any time from your account page. Deletion is permanent and cascades to all associated records including your tax profile.
6. Contact
For privacy enquiries, contact us at privacy@ato-mcp.com.au.