How we handle your information.

Only what is needed to prepare and file your return:

• Contact details: name, email, phone, address.
• Tax information: your answers to the questionnaire (income, dependents, deductions, credits, prior-year details).
• Identification numbers: Social Security numbers or ITINs for you, your spouse and dependents; IRS Identity Protection PINs; ID details used to verify your identity for e-filing.
• Bank routing and account numbers, only if you choose direct deposit or direct debit.
• Documents you upload (W-2s, 1099s, statements, receipts).
• Your e-file authorization (Form 8879): typed name, drawn signature, e-file PIN, and the date, time, IP address and browser it was signed from. We keep it on file; it isn’t sent to the IRS.
• Basic technical data needed to keep the service secure (for example, IP address for rate limiting and access logs).

To prepare, review and file your tax return, to contact you about it, and to keep the records the law requires. We do not use your tax information for marketing, and we never sell it.

• The IRS and state tax agencies, when we file your return.
• Service providers that run this website (secure database and file storage, and email delivery). They store or transmit data on our behalf and may not use it for anything else.
• Anyone else only with your written consent, or when the law requires it.

Federal law (Internal Revenue Code §7216) limits how tax preparers may use and disclose tax return information. Before you submit, the questionnaire asks for your consent to use your information to prepare your return. You are not required to consent to anything beyond that.

• Everything is sent over an encrypted connection (HTTPS/TLS).
• Social Security numbers, ITINs, IP PINs, ID numbers and bank numbers are encrypted again (AES-256) before they are stored. Screens show only the last four digits.
• Documents are kept in private storage. Download links are created one at a time and expire within minutes.
• Only the firm’s staff can open client files. Every time a document or sensitive number is viewed, it is written to an access log.
• Client accounts sign in with a password and a confirmed email address; staff accounts also need a code from an authenticator app.
• We will never ask for your SSN or bank details by email, text or phone call. If someone does, it isn’t us.

[Confirm before launch: our written information security plan (FTC Safeguards Rule / IRS Publication 4557) is in place]

We keep return records for [how long records are kept, e.g. 7 years], as tax and professional rules require, and then delete them securely. Bank numbers you remove from the questionnaire are deleted right away.

You can ask to see, correct or delete your information (subject to records we are required to keep) by emailing us at [email protected].

If you think your information has been misused or you suspect tax-related identity theft, contact us right away and see IRS Identity Theft Central.

[Legal business name, e.g. Taxolo LLC] · United States · [email protected]