ZHX Coretax Downloader

ZHX Coretax Downloader ("Extension") is developed and maintained by ZHX Labs ("we", "us", "our"). This Privacy Policy explains our commitment to your privacy and outlines how data is handled when you install and use the Extension in your browser (Google Chrome, Microsoft Edge, or Mozilla Firefox). By installing and using the Extension, you agree to the practices described in this policy.

1. Extension Scope

This Extension is only active on web pages under the domain coretaxdjp.pajak.go.id (the official portal of the Directorate General of Taxes / DJP Republic of Indonesia). The Extension does not run, does not inject scripts, and does not collect any data on any other websites.

2. Data We DO NOT Collect (100% Local Processing)

We never access, copy, store, or transmit to our servers or any third parties:

• The contents of any tax documents (tax invoices, withholding slips, tax returns, etc.) that you download
• Your personal identity or taxpayer profile on CoreTax (TIN/NPWP, names, addresses, financial or transaction data)
• Your CoreTax authentication credentials (usernames, passwords, authentication tokens, session cookies)
• Your web browsing history on any other websites

All Extension automation (selecting table rows, clicking download buttons, applying tax period filters, reading document headers for auto-renaming) executes entirely locally within your browser. Downloaded PDF files are transferred directly to your computer through your browser's native download manager — never through our intermediary servers.

3. Browser Permissions Usage

The Extension requests only the minimum set of permissions necessary to deliver its core features:

• downloads: Required to save and rename PDF documents automatically based on user-defined naming templates.
• storage: Used to store local user preferences (theme, language, rename templates, and license status) in browser storage.
• activeTab & tabs: Required to detect the active CoreTax tab and reload it when the user explicitly triggers a refresh.
• sidePanel: Used to provide a side panel user interface alongside the CoreTax web portal in supported browsers.
• alarms: Used to schedule periodic background checks for license status validity.
• host_permissions (*://coretaxdjp.pajak.go.id/*): Strictly restricted to the official CoreTax DJP portal to interact with document tables and trigger downloads.

4. Data Processed for Licensing

To verify trial periods and manage commercial license activations, the Extension transmits minimal, non-personal technical data to our backend infrastructure (hosted on Supabase):

5. Local Storage

User preferences such as theme (light/dark), language choice, filename templates, and table filters are stored locally in your browser (chrome.storage). This data remains private to your device and is never uploaded to our servers.

6. Third-Party Sharing

We use Supabase as our backend service provider strictly for license validation. We do not sell, rent, monetize, or transfer any user data to third parties for advertising, marketing, or creditworthiness evaluation. The Extension contains no third-party analytics or tracking SDKs.

7. Security

All communications with our licensing server are encrypted via industry-standard HTTPS (TLS). License serials and installation IDs are protected using one-way cryptographic hashing (SHA-256).

8. User Rights

You may contact us at [email protected] to inquire about, clarify, or request the deletion of any technical records associated with your license activation.

9. Children's Privacy

This Extension is intended for professional tax management and is not directed at or marketed to children under the age of 13.

10. Changes to This Policy

We may update this Privacy Policy periodically to reflect feature updates. Any revisions will be indicated by the updated date at the top of this page.

11. Contact Us

ZHX Labs
Website: zhxlabs.net
Email: [email protected]