Legal

Privacy Policy

Last updated: August 21, 2026

TaxFlow Labs LLC (“we,” “us,” or “our”) respects your privacy and is committed to protecting the personal and business information you entrust to us. This policy explains what data we collect, how we use it, who we share it with, and the choices you have.

Information We Collect

We collect the information necessary to deliver accounting, tax, and compliance services to your business.

**Business Information**: Company name, EIN, entity type, registered address, DBA names, ownership details, state tax ID numbers, and resale certificate details.

**Contact Information**: Name, email address, phone number, and mailing address of authorized representatives.

**Financial & Transactional Data**: Bank and accounting records, revenue by U.S. state, connected sales channel reports, payroll summaries, filing histories, and state and IRS account transcripts. This is processed solely to deliver our services and is never used for marketing.

**Identity Documents**: Where required for formation, EIN, or ITIN applications, government-issued identification and supporting documents, handled under strict confidentiality.

**Website & Communication Data**: IP address, browser type, pages visited, and support correspondence. We use this to maintain security and improve our services.

How We Use Your Information

Your information is used strictly for the following purposes:

  • Preparing and filing federal, state, and sales tax returns
  • Forming entities and obtaining EINs, ITINs, and state registrations
  • Bookkeeping, monthly close, and financial reporting
  • Monitoring nexus thresholds, annual reports, and account transcripts
  • Responding to agency notices and audit inquiries on your behalf
  • Communicating filing deadlines, notice alerts, and compliance updates
  • Internal recordkeeping, billing, and account administration
  • We do not sell, rent, or share your data with third parties for advertising or marketing purposes.

    Data Sharing & Subprocessors

    We share information only with parties essential to delivering our services:

  • **Government Agencies**: The IRS, state revenue departments, and secretaries of state — filed returns, registrations, and supporting documentation as required by law.
  • **Cloud Infrastructure**: Hosted on secure cloud providers with SOC 2 Type II and ISO 27001 certifications.
  • **Payment Processors**: For billing and subscription management only.
  • **Accounting & Sales Channel Integrations**: When you authorize a connection to a platform such as your accounting system or online store to sync financial data.
  • All subprocessors are bound by confidentiality obligations and data protection terms at least as protective as this policy.

    We do not sell, rent, lease, or otherwise share your personal information with third parties for their own marketing or promotional purposes. All of the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

    SMS / Text Messaging & Mobile Opt-In

    If you provide your mobile phone number and opt in to receive SMS / text messages from TaxFlow Labs, the following applies:

    **No Sharing of Mobile Opt-In Data**: No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All categories of data described in this Privacy Policy exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

    Mobile opt-in data — including phone numbers, SMS opt-in status, and consent records — is not sold, rented, leased, or transferred to any third party, affiliate, partner, lead generator, or marketing service under any circumstances. This commitment applies regardless of any other data-sharing language in this policy.

    **Limited Subprocessor Use**: Phone numbers may be shared only with our SMS delivery provider (e.g., our telephony platform) strictly for the purpose of transmitting the messages you requested. These providers are contractually prohibited from using your information for any other purpose.

    **Message Types**: Messages may include filing deadline reminders, state notice alerts, appointment confirmations, account updates, and replies from your account team.

    **Frequency & Cost**: Message frequency varies based on your account activity. Message and data rates may apply from your mobile carrier.

    **How to Opt In**: On our website contact form, you opt in by entering your mobile phone number in the Phone field, checking the optional SMS consent box, and submitting the form. You may also opt in by replying START to a message from us or by providing written or recorded consent to a TaxFlow Labs representative. Opt-in is never a condition of purchasing any service.

    **How to Opt Out**: Reply STOP to any message at any time to unsubscribe. Reply HELP for assistance, or contact hello@taxflowlabs.io.

    Data Security

    We protect your data with industry-standard measures:

  • AES-256 encryption at rest and TLS 1.3 in transit
  • Role-based access controls with least-privilege principles
  • Regular vulnerability scanning and penetration testing
  • Multi-factor authentication on all administrative accounts
  • Annual security training for all team members
  • Incident response plan with 24-hour breach notification commitment
  • While we take every reasonable precaution, no system is completely immune to risk. We commit to transparency and rapid response in the unlikely event of a security incident.

    Data Retention & Deletion

    We retain your data for as long as you maintain an active account, plus the period required by applicable state tax recordkeeping laws (generally 4–7 years depending on the state).

    Upon account closure, we delete or anonymize your data within 90 days, except where retention is required for legal compliance, tax authority obligations, or the resolution of disputes.

    You may request a full data export or deletion at any time by contacting hello@taxflowlabs.io.

    Your Rights

    Depending on your location, you may have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate or incomplete information
  • Request deletion of your data (subject to legal retention requirements)
  • Object to or restrict certain processing activities
  • Withdraw consent where processing is based on consent
  • Lodge a complaint with a data protection authority
  • To exercise any of these rights, email us at hello@taxflowlabs.io. We respond to all requests within 30 days.

    Contact Us

    For privacy-related questions, data requests, or concerns:

    **Email**: hello@taxflowlabs.io

    **Address**: TaxFlow Labs LLC, 1250 Ave Ponce De Leon PMB 2013, San Juan, PR 00907

    We take privacy seriously. If you have any concern about how your data is handled, we want to hear about it.

    This privacy policy may be updated from time to time. We will notify you of material changes via email or a prominent notice on our website.