Before you upload years of crypto transactions, you want a straight answer: does this information go to SARS?
See section 6 of our Privacy Notice for how we may share personal information.
We built Coinfig as an independent calculation and reporting tool. We aren't registered as a Financial Services Provider (FSP) or a Crypto Asset Service Provider (CASP), and SARS hasn't endorsed us. Uploading your records won't file your return, and we don't submit returns for you.
What "required by law" covers
Coinfig may be legally required to provide information to SARS.
The SARS Guide on Access to Audit Files explains that section 46 allows SARS to request relevant material from a taxpayer or another person for tax administration, subject to legal limits.
Read-only access to your exchanges
You do not need to upload identity documents, and your ID and tax numbers are optional.
For an exchange connection, create an API key in your exchange account with read-only permissions. Keep trading and withdrawal permissions disabled. You can also import CSV statements from supported sources if you prefer not to connect by API.
The Privacy Notice explains how stored credentials are encrypted and protected.
Our application and data infrastructure are hosted in South Africa, in AWS's Africa (Cape Town) region. Some service providers process limited information outside South Africa, as explained in section 7.
The providers that help run Coinfig
We don't sell your personal information. Operating Coinfig involves hosting, authentication and payment providers, alongside other services and integrations described in the notice.
Optional analytics and advertising cookies require your consent. If you arrive through an advertising link, Google may also load in a cookieless mode before you accept optional cookies. Our Cookie Policy explains how this works, and section 6 of the Privacy Notice lists the providers and information involved.
Can I remove an exchange or wallet later?
You can delete an individual exchange or wallet source without deleting your account. We delete that source's imported transaction data and keep the records from your other sources. We delete its stored API credential once no other source uses it. You can also revoke the key directly in your exchange account.
You can also request account deletion or a data export by emailing help@coinfig.tax. Some records and backups may remain subject to the retention requirements and backup limits described in section 10.
If you're dissatisfied with how we handle a privacy request or complaint, you can complain to the Information Regulator (South Africa). Our contact section includes its complaint email and website, as well as our Information Officer's contact details.
What about information from my exchange?
Your exchange may have its own reporting obligations. Using Coinfig doesn't change what another provider must report. Our guide to CARF and crypto reporting in South Africa explains that separate reporting framework.
Our full Privacy Notice explains how we handle your records. If you have questions before connecting an account or uploading a CSV, email help@coinfig.tax.
This article is general information, not tax advice. Crypto tax outcomes depend on your specific circumstances. For complex situations, consult a qualified tax practitioner.