Privacy Policy

1. Introduction

Taxhance, Inc. ("Taxhance," "we," "us," or "our") is committed to protecting the privacy and security of the personal information we collect from our users ("you" or "your"). This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you access or use our web application, client portal, and related services (collectively, the "Services").

By accessing or using our Services, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use our Services.

2. Information We Collect

2.1 Information You Provide to Us

• Account Information: When you register for an account, we collect your name, email address, organization or firm name, and other information necessary to create and manage your account.
• Tax Documents: When you or your clients upload tax documents through our Services, we collect and store the documents and any metadata associated with them, including document types, classifications, and related notes.
• Client Information: If you are a tax professional, you may provide us with information about your clients, including names, email addresses, tax identification information, and financial records, in connection with your use of the Services.
• Communications: When you communicate with us or use in-app messaging features, we collect the contents of those communications.
• Waitlist Information: If you join our waitlist, we collect your name and email address.

2.2 Information Collected Automatically

• Usage Data: We automatically collect information about how you interact with our Services, including pages visited, features used, and the date and time of your visits.
• Device Information: We collect information about the device you use to access our Services, including device type, operating system, browser type, and IP address.
• Cookies and Similar Technologies: We use cookies and similar tracking technologies to collect information about your browsing activity on our Services. You may control the use of cookies through your browser settings.

3. How We Use Your Information

We use the information we collect for the following purposes:

• To provide, maintain, and improve our Services;
• To process and classify tax documents using artificial intelligence and machine learning technologies;
• To facilitate communication between tax professionals and their clients;
• To send you transactional emails, such as account verification, security alerts, and service notifications;
• To respond to your inquiries and provide customer support;
• To monitor and analyze usage trends and preferences to improve user experience;
• To detect, prevent, and address technical issues, fraud, and security concerns;
• To comply with legal obligations and enforce our Terms of Service.

4. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

• With Service Providers: We share information with third-party service providers who perform services on our behalf, such as cloud hosting (Supabase), email delivery (Resend), and AI processing (OpenRouter). These providers are contractually obligated to use your information only to provide the requested services and to maintain appropriate security measures.
• Between Tax Professionals and Clients: Our Services facilitate the sharing of tax documents and communications between tax professionals and their clients. Information shared through these features is accessible to both parties in accordance with their roles and permissions.
• For Legal Compliance: We may disclose your information if required to do so by law or in response to valid legal process, such as a court order, subpoena, or government investigation.
• Business Transfers: In the event of a merger, acquisition, reorganization, or sale of all or a portion of our assets, your information may be transferred as part of that transaction.
• With Your Consent: We may share your information for any other purpose disclosed to you at the time of collection or with your express consent.

5. AI Features and Data Processing

AI features within Taxhance are powered by enterprise-grade third-party AI providers. These providers' models are used to automate document classification and improve the efficiency of organizing your tax documents. To protect your data during AI processing, Taxhance implements the following safeguards:

• Enterprise services: Taxhance relies on enterprise-tier AI APIs designed for sensitive business workloads, not public consumer endpoints.
• No training: Your data and your clients' data is not used for AI model training purposes.
• Zero retention: Data transmitted for AI processing is not stored by AI providers beyond the processing of your request.
• Encryption: All data transfers to AI endpoints are encrypted using TLS 1.3.
• Minimal transmission: Only the essential data required for document classification is transmitted to AI endpoints.
• US-based storage: Regardless of AI processing, all data is stored within the United States.

6. Data Security

We implement industry-standard technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• AES-256 encryption of all data at rest;
• TLS 1.3 encryption of all data in transit;
• Access controls and authentication mechanisms, including role-based access control;
• Regular security assessments and monitoring;
• Secure storage of credentials and API keys using encryption.

While we strive to protect your personal information, no method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee absolute security.

7. Data Controller and Data Processor

Where you provide us with personal data relating to individuals — including your clients — you are acting as the data controller and Taxhance is the data processor. As data controller, you are responsible for protecting the personal data you process and for complying with all applicable data protection and privacy laws that govern your use of that data, including any obligations you may have under applicable professional regulations in connection with your client relationships. Taxhance will process personal data only as necessary to provide the Services and in accordance with your instructions.

8. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with our Services. We may also retain your information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. When your information is no longer required, we will securely delete or anonymize it.

9. Your Rights and Choices

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Access: You may request a copy of the personal information we hold about you.
• Correction: You may request that we correct inaccurate or incomplete personal information.
• Deletion: You may request that we delete your personal information, subject to certain legal exceptions.
• Data Portability: You may request a copy of your data in a structured, commonly used, and machine-readable format.
• Objection: You may object to the processing of your personal information in certain circumstances.
• Withdrawal of Consent: Where processing is based on your consent, you may withdraw your consent at any time.

To exercise any of these rights, please contact us at contact@taxhance.com.

10. Children's Privacy

Our Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child without verification of parental consent, we will take steps to delete that information promptly.

11. Data Storage Location

All customer data and client content is stored within the United States. We do not transfer or store your data in other countries. Enterprise-tier AI providers used for document processing operate under contractual data handling obligations consistent with this Policy and do not retain data after processing is complete.

12. Third-Party Links

Our Services may contain links to third-party websites or services that are not operated by us. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services you access through our Services.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. We will notify you of any material changes by posting the updated Privacy Policy on this page and updating the "Last updated" date at the top of this page. Your continued use of our Services after any modifications to this Privacy Policy will constitute your acknowledgment of the modifications and your consent to be bound by the modified Privacy Policy.

14. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at: