Legal

Terms of service

Last updated 2 October 2026

These terms govern use of FileDesk ("the software"), published by Muhammad Ahsan ("we", "us"). By signing in, an agency and its users accept them. Our Privacy policy explains how the software handles data.

1. Licence

We grant your agency a non-exclusive, non-transferable right to use FileDesk for the agreed number of branches and users, for as long as the agreement between us remains in force. The software, its source code and its design remain ours. You may not resell, sublicense, or redistribute it, or copy the browser extension to devices outside your agency.

2. Accounts and devices

Accounts are provisioned by us. Your agency owner is responsible for creating branch accounts, setting their permissions — including who may upload, view or delete client documents and who may see amounts — and revoking access when staff leave.

An ordinary agency or branch account may stay signed in to the FileDesk web app on up to two devices at once, for example a phone and a desktop computer. Signing in on a third device ends the session on whichever of the other two was used least recently. Each ordinary account may hold one active extension installation, with one live extension session; moving the extension to another installation requires the old installation to be revoked and a replacement approved. Extension installations are registered against a licence and may be revoked by your agency owner or by us where a licence lapses. An isolated synthetic Chrome Web Store review account may be configured with a higher installation limit solely so Google can repeat its review in different browser profiles; this does not change the ordinary customer policy.

Keep credentials confidential. You are responsible for activity under your accounts.

3. Your responsibilities regarding client data

Your agency is the data controller for everything it enters. You confirm that:

• you have each client's permission to store their tax-portal credentials in a digital wallet for the purpose of acting on their behalf, including on branch devices running the extension;
• you have each client's authority or consent to store copies of their documents in FileDesk, and you upload only documents relevant to the work you do for that client;
• you have a lawful basis for the personal data you record;
• you will remove a client's stored credentials, and delete their documents, on request, unless the law requires you to keep them.

4. Acceptable use

You must not use FileDesk to:

• access a tax portal account you are not authorised to act on;
• circumvent a CAPTCHA, one-time password or other anti-automation control — the software deliberately refuses to fill such fields, and you must not attempt to defeat that;
• submit anything false to a tax authority;
• store documents you are not authorised to hold, or files that are not client documents for your practice;
• probe, scrape or attack the service, or attempt to reach another agency's data.

5. What FileDesk does not do

FileDesk does not file returns with the Federal Board of Revenue or any other authority, does not submit anything on your behalf, and is not affiliated with or endorsed by the FBR. Calculator outputs are working estimates produced from published statutory rates; they are not tax advice, and professional judgement remains yours. Verify every figure before relying on it.

6. Client documents

Staff can scan or upload client documents in the FileDesk web app. Each file is encrypted on the user's device before it is stored with Cloudflare, our storage provider, which cannot read it, as the Privacy policy describes. Your agency remains the controller of every document it uploads and decides, through permissions, who in the agency may upload, view or delete documents. Documents are never sent to any AI service.

When a client asks for their documents to be deleted, your agency deletes them in the software or asks us to help. Deleting a document removes its key at once, so the stored file can no longer be opened, and FileDesk then deletes the encrypted file from Cloudflare, retrying automatically until Cloudflare confirms it is gone. Backups never contain document files, so a deleted document cannot be recovered from them. We do not undertake to recover a deleted document, so keep your own copy of anything you are required to retain.

7. AI summaries

While AI summaries are switched on for the FileDesk service (they are switched on or off for every agency at once), staff permitted to see amounts can ask for an English summary of a client's wealth-statement register; you control their use through who may see amounts, and nothing is sent until a user asks for a summary. It is written by Google's Gemini service from a redacted timeline, as the Privacy policy describes; Google does not use these requests to improve its products but may keep them for a limited period to detect abuse and meet legal obligations. The feature is optional and assistive: a summary may be incomplete or wrong, it is not tax, legal or financial advice, and you must verify every figure and statement against your own records before relying on it or using it in anything submitted to a tax authority.

8. Service providers

FileDesk relies on three companies: DigitalOcean, our hosting company, keeps FileDesk's records; Cloudflare, our storage provider, stores the encrypted client documents and never receives their keys; and, only while AI summaries are switched on for the service, Google's Gemini service writes summaries from the redacted register timeline. Each provider operates under its own terms, and an outage at one of them may make part of FileDesk temporarily unavailable.

9. Availability and changes

We aim to keep the service available continuously but do not guarantee uninterrupted operation. Maintenance and updates may cause brief interruptions; clients reconnect and recover automatically. We may change features and will not remove something you depend on without telling you. We may update these terms; the date at the top shows the current version.

10. Data, backups and export

Your data is yours. We make encrypted backups of your agency's records on a schedule. They include the locked keys for its documents but never the document files, which are stored, encrypted, with Cloudflare.

Staff permitted to view documents can download any document from the app at any time. On request, and on termination, we will provide an export of your agency's data, including its documents, in a machine-readable form within a reasonable period.

11. Fees

Fees are as agreed in writing with your agency. Non-payment may lead to suspension after notice.

12. Liability

To the extent permitted by law, our total liability arising from the software is limited to the fees paid by your agency in the twelve months preceding the claim. We are not liable for indirect or consequential loss, for penalties arising from filings you made or failed to make, or for loss caused by credentials your own staff mishandled.

The software is provided without warranty of fitness for a particular purpose beyond what is described in our documentation.

13. Termination

Either party may terminate with reasonable notice. We may suspend access immediately for a serious breach of clause 4. On termination your licences and installations are revoked; your data, including your documents, remains available for export for a reasonable period.

14. Governing law

These terms are governed by the laws of the Islamic Republic of Pakistan.

15. Contact

Muhammad Ahsan · mahsan7861100@gmail.com · 0317 7880059