Privacy Policy

Taxflow, Inc. ("Taxflow," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our tax preparation and document management platform (the "Service").

By accessing or using the Service, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with our policies and practices, please do not use the Service.

We collect information that you provide directly to us, as well as information collected automatically when you use our Service.

Information You Provide

• Account Information: When you create an account, we collect your name, email address, and authentication credentials (via Google or Microsoft OAuth).
• Tax Documents: Tax returns, W-2s, 1099s, and other financial documents you upload for processing.
• Financial Information: Income data, deductions, credits, and other tax-related financial information extracted from your documents.
• Client Information: If you are a tax professional, information about your clients that you input into the Service.
• Communications: Records of your communications with us, including support requests and feedback.

Information Collected Automatically

• Usage Data: Information about how you interact with the Service, including pages visited, features used, and actions taken.
• Device Information: Browser type, operating system, device identifiers, and IP address.
• Cookies and Similar Technologies: We use cookies and similar tracking technologies to enhance your experience and collect usage information.

We use the information we collect to:

• Provide, maintain, and improve the Service, including processing tax documents and generating insights.
• Create and manage your account and authenticate your identity.
• Communicate with you about the Service, including sending notifications, updates, and support messages.
• Analyze usage patterns to improve user experience and develop new features.
• Detect, prevent, and address fraud, security issues, and technical problems.
• Comply with legal obligations and protect our legal rights.

We do not sell your personal information. We may share your information in the following circumstances:

Service Providers

We share information with third-party vendors who perform services on our behalf, such as cloud hosting (Supabase), authentication services (Google, Microsoft), and analytics providers. These providers are contractually obligated to protect your information.

Legal Requirements

We may disclose your information if required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of Taxflow, our users, or others.

Business Transfers

In connection with a merger, acquisition, reorganization, or sale of assets, your information may be transferred to the acquiring entity.

With Your Consent

We may share your information with third parties when you have given us explicit consent to do so.

We implement appropriate technical and organizational security measures to protect your personal information, including:

• Encryption of data in transit using TLS/SSL and at rest using AES-256 encryption.
• Secure authentication through OAuth 2.0 with Google and Microsoft.
• Regular security assessments and monitoring for unauthorized access.
• Access controls limiting employee access to personal information on a need-to-know basis.

While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

We retain your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

For tax-related documents and information, we generally retain data for a minimum of seven (7) years to comply with IRS record-keeping requirements. You may request deletion of your account and associated data, subject to legal retention requirements.

You have the right to:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request that we correct inaccurate or incomplete information.
• Deletion: Request deletion of your personal information, subject to legal retention requirements.
• Portability: Request a copy of your data in a portable format.
• Opt-Out: Opt out of marketing communications at any time.

To exercise these rights, please contact us at felipe@jointaxflow.ai.

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with additional rights regarding your personal information:

Right to Know

You have the right to request disclosure of the categories and specific pieces of personal information we have collected about you, the sources of that information, the business purpose for collecting it, and the categories of third parties with whom we share it.

Right to Delete

You have the right to request deletion of your personal information, subject to certain exceptions permitted by law.

Right to Non-Discrimination

We will not discriminate against you for exercising your CCPA rights. We will not deny you services, charge different prices, or provide a different quality of service because you exercised your rights.

Do Not Sell

We do not sell personal information as defined under the CCPA.

To submit a CCPA request, please contact us at felipe@jointaxflow.ai. We will verify your identity before processing your request.

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically.

Your continued use of the Service after any changes to this Privacy Policy constitutes your acceptance of the revised policy.

If you have questions or concerns about this Privacy Policy or our privacy practices, please contact us at: