.png)
This Privacy Policy is designed for a U.S.-based tax-software and educational platform that may receive sensitive tax and financial information and may serve users in multiple jurisdictions.This draft assumes that The Tax Truths Technologies, Inc., a California entity, owns and operates both TheTaxTruth.com and YourTaxLine.com; offers subscription-based tax software, calculators, workflow tools, educational content, webinars, an LMS, document-upload functionality, and AI-assisted features; and may separately offer professional services under written agreements. The draft intentionally avoids promising specific technical controls or compliance certifications that must be verified operationally.Bracketed items are launch-blocking placeholders. Terms such as “Company,” “Services,” “Platform,” “User,” “Customer,” “Personal Information,” and “Professional Services” are used consistently throughout the package.
This Privacy Policy explains how The Tax Truths Technologies, Inc. (“Company,” “we,” “us,” or “our”) collects, uses, discloses, retains, and protects Personal Information when individuals visit or use TheTaxTruth.com and YourTaxLine.com, create accounts, purchase subscriptions, attend webinars, communicate with us, upload information, use integrations, or otherwise interact with the Services. It applies to visitors, trial users, subscribers, authorized users, prospects, and business contacts.This Policy does not govern information processed solely on behalf of an enterprise customer under a separate data-processing agreement, nor information collected by independent third parties under their own policies. If a separate agreement conflicts with this Policy, that agreement controls for the subject matter it addresses.
We will not use uploaded tax or financial information for unrelated targeted advertising without a separate, clear disclosure and any consent required by law. We will not use customer content to train generally available AI models unless the applicable product terms, enterprise agreement, or an express opt-in clearly permits it.
Where the GDPR, UK GDPR, or similar law applies, our legal bases may include performance of a contract; steps requested before entering a contract; legitimate interests in operating, securing, improving, and marketing the Services; compliance with legal obligations; protection of vital interests; and consent. When we rely on legitimate interests, we consider the nature of the information, reasonable expectations, benefits, risks, and available safeguards. Consent may be withdrawn prospectively, but withdrawal does not affect prior lawful processing.
We do not disclose Personal Information in exchange for money. Some analytics or advertising activities may be treated as “sale,” “sharing,” or targeted advertising under certain state privacy laws even when no money changes hands. Where applicable, we will provide legally required opt-out mechanisms and honor recognized preference signals as required.
We and our providers may use cookies, pixels, SDKs, local storage, and similar technologies for essential functionality, security, preferences, analytics, performance, and marketing. Non-essential technologies will be deployed only as permitted by applicable law and, where required, after consent. Details appear in the Cookie Policy and any live consent-management interface, which should be treated as the current operational inventory.
The Services may use machine learning, large language models, rules engines, and other automated systems to summarize inputs, identify possible planning considerations, generate educational explanations, classify documents, or support workflows. Inputs and outputs may be processed by vetted providers. Automated outputs can be incomplete, outdated, or incorrect and must not be treated as professional advice or a final decision. We do not intend to make solely automated decisions that produce legal or similarly significant effects unless separately disclosed and permitted by law. See the AI Disclosure and Responsible AI Policy.
Tax identifiers, financial account information, precise financial circumstances, authentication credentials, and uploaded tax records may qualify as sensitive information. Users should provide only information reasonably necessary for the requested feature. We use sensitive information only for permitted purposes, such as providing requested Services, preventing fraud, maintaining security, complying with law, and other purposes disclosed at collection. Do not upload medical records, protected health information, or third-party tax records unless the Platform expressly supports the use case and you have lawful authority and an applicable agreement.
We retain Personal Information for the period reasonably necessary to provide the Services, fulfill the purposes described in this Policy, comply with tax, accounting, legal, and regulatory obligations, resolve disputes, enforce agreements, maintain security records, and preserve evidence. Retention depends on account status, data type, legal requirements, customer instructions, backup cycles, and risk. After deletion, limited copies may remain in backups or logs until overwritten, isolated, or deleted through ordinary cycles. The Company should adopt and document a data-retention schedule before launch.
We use administrative, technical, and physical safeguards designed to protect information in light of its sensitivity, volume, and context. Measures may include access controls, encryption in transit, encryption at rest where appropriate, logging, backups, vendor review, vulnerability management, incident-response procedures, and workforce training. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Users are responsible for strong credentials, account confidentiality, authorized-device security, and promptly reporting suspected compromise to the support contact method published in the Legal Center.
Submit requests through the privacy request form available through the Legal Center or the privacy contact method published in the Legal Center. We may verify identity, request authorization documentation for agents, and deny or limit requests where permitted. We will not unlawfully discriminate against individuals for exercising privacy rights.
Depending on residence and legal thresholds, residents of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, Virginia, and other states may have rights described above. Applicability changes over time and depends on factors such as revenue, data volume, nonprofit status, and processing activities. The Company must assess each state before launch and update this section as laws and operations change.
In the preceding 12 months, we may have collected identifiers; customer records information; protected classification information if voluntarily provided; commercial information; internet or electronic activity; approximate geolocation; audio or visual information from recorded webinars or support calls; professional or employment information; education information; inferences; and sensitive Personal Information. Sources, business purposes, and recipient categories are described above. Retention is described in Section 9. We do not knowingly sell or share Personal Information of consumers under 16 without affirmative authorization.
We may process information in the United States and other countries whose laws may differ from those of the user’s jurisdiction. Where required, we will use an approved transfer mechanism, such as Standard Contractual Clauses, the UK International Data Transfer Addendum, an adequacy decision, or another lawful mechanism. We do not claim participation in the EU–U.S. Data Privacy Framework unless and until the Company is formally certified and listed.
The Services are intended for business users and adults and are not directed to children under 13. We do not knowingly collect Personal Information directly from children under 13. If we learn that such information was collected without required parental consent, we will take reasonable steps to delete it. Users must not create accounts for minors or upload minors’ information unless legally authorized and supported by the Services.
The Services may link to or integrate with third-party websites, payment processors, professional tools, social networks, or data sources. Their privacy practices are governed by their own notices. We are not responsible for independent third-party practices, and a link or integration does not imply endorsement.
Transactional communications are necessary for account administration and cannot always be opted out of while an account remains active. Marketing emails may be stopped using the unsubscribe link. SMS messages require the disclosures and consent described in the SMS and Email Communications Policy. Message and data rates may apply. Consent to marketing texts is not a condition of purchase.
We may update this Policy to reflect changes in law, technology, Services, or business practices. We will post the updated version and revise the “Last Updated” date. If changes materially affect rights or uses of information, we will provide additional notice as required. Continued use after the effective date of an update constitutes acknowledgment, but not a waiver of any consent requirement imposed by law.
Privacy inquiries: the privacy contact method published in the Legal Center. Legal notices: the legal notice contact method published in the Legal Center. Mailing address: The Tax Truths Technologies, Inc., the business mailing address published in the Legal Center. Telephone: the telephone number published in the Legal Center. For EEA/UK users, representative and data-protection contact information, if legally required, must be inserted here: the applicable representative contact details published in the Legal Center, if required.