Privacy Policy

TAXMD™: TAX PLANNING SOFTWARE LLC ("TaxMD™," "we," "us," or "our") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, retain, and protect information when you access or use our website, software platform, applications, and related services (collectively, the "Services").

TaxMD™ is a subscription-based tax planning and financial optimization software platform. The Services may use automation, rules engines, algorithmic logic, and AI-assisted features to generate calculations, projections, scenarios, reports, and other informational outputs. TaxMD™ does not undertake to provide legal representation, IRS or state tax authority representation, or other professional services beyond the software-enabled services described in our Terms and applicable customer agreements.

Because the Services may involve the collection and processing of financial and tax-related information, certain aspects of our operations may be subject to privacy, tax-information, and data-security laws and guidance applicable to financial and tax-related data handling.

For certain users, including users who access TaxMD™ through a CPA firm, employer, or other business customer, a separate written agreement such as a Master Services Agreement, Data Processing Addendum, Order Form, or similar contract may apply. If this Privacy Policy conflicts with such an agreement, the separate written agreement will control the extent of the conflict.

This Privacy Policy applies to personal information we collect through the TaxMD™ website; the TaxMD™ software platform, applications, and related tools; communications with current, prospective, and former users or customers; support, billing, onboarding, and account administration activities; and other interactions that reference this Privacy Policy.

"Personal Information" means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular individual or household. Depending on applicable law, this may include "personal data" or "sensitive personal information."

"Sensitive Personal Information" may include financial account information, tax-related information, government-issued identifiers, login credentials, and other information that may be considered sensitive under applicable law.

"User Content" means information, documents, data, files, tax planning inputs, financial figures, assumptions, notes, uploaded records, and other content that you or your authorized users submit, upload, import, generate, or store through the Services.

This Privacy Policy does not apply to information processed solely on behalf of a business customer where TaxMD™ acts as a service provider or processor under a separate written agreement, except as required by applicable law; information collected by third parties through services they operate independently of TaxMD™; or employment-related information of TaxMD personnel, applicants, and contractors, except where required by law.

TaxMD™ may process personal information in different roles depending on how you use the Services.

If you use TaxMD™ directly as an individual subscriber or website visitor, TaxMD™ generally acts as the business or controller with respect to the personal information described in this Privacy Policy.

If you access TaxMD™ through a CPA firm, employer, or other business customer, TaxMD™ may process certain personal information on behalf of that customer as a service provider or processor under applicable law. In those circumstances, the customer organization generally controls the account, determines how and why certain information is processed, and may manage your access to the Services. Where applicable, the customer’s agreement with TaxMD™ governs that processing and controls to the extent of any conflict with this Privacy Policy.

If you are an end user of a customer organization account and wish to exercise rights relating to information submitted to TaxMD™ by that organization, you may need to direct your request to the applicable organization first.

A. Account and Profile Information:

We may collect information you provide when you create an account, subscribe, request a demo, use the Services, or communicate with us, including name, email address, phone number, company or firm name, job title or role, mailing address, account credentials or authentication-related information, subscription or account preferences, and user identifiers and account settings.

B. Payment and Billing Information:

If you purchase a subscription or pay fees, billing and payment information may be collected and processed by us and/or by third-party payment processors on our behalf. This may include billing name and address, business name, transaction details, subscription plan details, limited payment card information or payment method descriptors, and records related to invoicing, payment history, refunds, and collections. We generally do not store full payment card numbers or full card verification values when payments are processed through third-party processors.

C. Financial, Tax, and Uploaded Information:

We collect the information that you or your authorized users choose to enter, upload, import, connect, or otherwise provide through the Services. Depending on how you use TaxMD™, this may include income, deductions, expenses, entities, elections, and planning assumptions; financial, accounting, and tax-related figures; taxpayer or household profile data; business ownership and structural information; uploaded documents, spreadsheets, statements, tax documents, and reports; exported or generated reports and projections; notes, comments, and scenario planning information; information imported through integrations or connectors you enable; and government-issued identifiers such as a Social Security number, Individual Taxpayer Identification Number, or Employer Identification Number, where required for particular features or services. We do not collect government-issued identifiers for marketing purposes.

D. Device,Usage,Log, and Technical Information:

When you access or use the Services, we may automatically collect certain technical and usage information, such as IP address, browser type and version, device type and identifiers, operating system, internet service provider, referral URLs, pages viewed and features used, dates and times of access, clickstream or session information, crash logs, diagnostics and performance data, and approximate location inferred from IP address.

E. Cookies, Analytics, and Similar Technologies:

We and our service providers may use cookies, pixels, SDKs, local storage, and similar technologies to operate the Services, remember preferences, understand usage, improve functionality, and support analytics, security, and communications. This may include essential cookies, authentication and session cookies, performance and analytics cookies, and functional preference cookies.

F. Communications and Support Information:

If you contact us, request support, submit a form, attend a demo, respond to surveys, or otherwise communicate with us, we may collect your contact details, the content of your communications, support tickets and case history, recordings or notes of support interactions where permitted, attachments and screenshots you provide, and feedback, survey responses, and product requests.

G. Information from Third Parties:

We may receive information from payment processors, identity or authentication providers, analytics providers, cloud hosting and infrastructure vendors, CRM, email, and support tools, firms or organizations that administer your access, and integration providers and financial or tax data connectors you authorize.

We may collect personal information directly from you; automatically from your device or browser when you interact with the Services; from your employer, CPA firm, or other organization that sponsors or administers your access; from service providers acting on our behalf; from integrations, connectors, and third-party services you enable; and from other parties where you direct them to share information with us or where disclosure is otherwise permitted by law.

We may use personal information to create, maintain, and administer accounts; authenticate users and manage access; provide subscription functionality; process financial and tax-planning inputs and generate informational outputs, reports, and projections; enable collaboration features and administrative controls; facilitate imports, exports, downloads, and integrations; and process payments and manage subscriptions.

We may use information to analyze usage and performance, troubleshoot and debug issues, maintain and improve features, develop new tools and workflows, and understand user needs and product adoption. Where appropriate, service improvement activities may rely on aggregated, de-identified, anonymized, or synthetic data rather than directly identifiable tax-return information.

We may use information for security, integrity, fraud prevention, and enforcement, including detecting and preventing unauthorized access, monitoring for security incidents, protecting our systems and users, and enforcing our Terms and policies.

We may use information for communications and customer support, including responding to inquiries, sending service-related notices and security alerts, onboarding materials, product updates, and marketing communications where permitted by law.

We may use information for legal, compliance, and business operations, including complying with legal and contractual obligations, maintaining records, exercising or defending legal claims, supporting audits and investigations, and evaluating business transactions or reorganizations.

We may use aggregated, anonymized, or de-identified information for analytics, benchmarking, product improvement, security analysis, and business operations, provided such information is not reasonably identifiable to you.

We do not sell your personal information. We do not use tax return information to serve targeted advertising. We do not share tax return information with data brokers or advertising networks. If applicable law requires consent for a particular use or disclosure of tax return information, we will obtain that consent before proceeding.

We use cookies and similar technologies to help operate the Services, keep you signed in, remember preferences, understand traffic and usage patterns, measure performance, and improve functionality. The types of cookies we may use include strictly necessary cookies, functional cookies, and analytics cookies.

You may be able to manage cookies through your browser settings or through available cookie preference tools. Disabling some cookies may affect functionality.

Some browsers offer a "Do Not Track" setting. Because there is not yet a universally accepted standard for responding to browser-based Do Not Track signals, TaxMD™ does not respond to them. Where required by applicable law, TaxMD™ will process legally recognized opt-out preference signals in accordance with applicable law.

We may disclose personal information only as reasonably necessary to service providers and contractors that perform services on our behalf, such as hosting and cloud infrastructure providers, payment processors, customer support vendors, email delivery providers, analytics providers, security and monitoring providers, authentication and access management providers, identity verification vendors, document storage and collaboration vendors, and professional advisors.

If you choose to connect third-party services, import data from external sources, or enable integrations, we may share or receive information as necessary to provide those integration features. Information shared with third-party integrations is subject to the privacy practices and terms of those third parties.

If your access to the Services is provided through a CPA firm, employer, business customer, or enterprise account, certain account information, usage information, and User Content may be accessible to administrators or authorized personnel of that organization, subject to applicable agreements and permissions.

We may disclose information if we believe in good faith that doing so is necessary or appropriate to comply with applicable law, regulation, legal process, or governmental request; enforce our agreements, policies, or terms; detect, prevent, or address fraud, security, or technical issues; or protect the rights, property, safety, or operations of TaxMD™, our users, or others.

We may disclose or transfer information in connection with a proposed or actual merger, acquisition, financing, reorganization, sale of assets, bankruptcy, dissolution, or similar business transactions.

We may share aggregated, anonymized, or de-identified information that cannot reasonably be used to identify you, and we may share information for other purposes disclosed to you at the time or with your consent or direction.

TaxMD™ does not sell personal information and does not share personal information for cross-context behavioral advertising as those terms may be defined under applicable U.S. state privacy laws. If TaxMD™ processes tax return information in circumstances governed by applicable tax-information confidentiality laws, disclosures and uses of that information will be limited to what is permitted by law or authorized by the taxpayer’s consent.

TaxMD™ may use automation, rules engines, algorithmic logic, machine learning, and AI-assisted features in connection with the Services to process data inputs, generate calculations, projections, scenarios, summaries, recommendations, or reports, identify patterns or planning opportunities, and improve workflow efficiency and user experience.

TaxMD™ does not use individually identifiable tax return information to train publicly available AI models. Where model training or improvement occurs, it may rely on aggregated, de-identified, anonymized, or synthetic data, as appropriate.

Outputs may be generated automatically and may not be reviewed by a human unless separately engaged under a written agreement.

Generated outputs depend on the accuracy, completeness, and timeliness of the data provided, may contain errors, omissions, inconsistencies, or assumptions, are informational only, and should be reviewed carefully by you and, where appropriate, by a qualified professional. You should not rely solely on automated outputs for legal, tax, financial, accounting, or compliance decisions.

Nothing in this Privacy Policy creates a professional-client, fiduciary, tax advisor, accounting, or legal advisory relationship.

We retain personal information for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide the Services, maintain your account, fulfill contractual obligations, comply with legal, tax, accounting, audit, and regulatory requirements, resolve disputes, enforce agreements, and maintain security, backup, fraud prevention, and business continuity records.

Retention periods may vary depending on the nature and sensitivity of the information, whether the information is needed to provide active Services, legal and contractual requirements, applicable limitation periods, and security and fraud prevention needs.

After account termination or expiration, we may retain certain information for a period of time as necessary for legitimate business and legal purposes, including account administration records, billing and transaction records, customer support records, security logs, backup copies, and records needed to comply with legal obligations, resolve disputes, and enforce agreements. After the applicable retention period, we may delete, anonymize, or securely dispose of personal information.

Residual copies may remain for a limited time in backups, archives, or disaster recovery systems, subject to our retention and deletion processes.

We implement reasonable administrative, technical, and organizational safeguards designed to protect personal information, including sensitive financial and tax-related information, against unauthorized access, disclosure, alteration, loss, or destruction. These safeguards may include encryption in transit, encryption at rest where appropriate, access controls, authentication measures, logging, monitoring, vendor oversight, and incident-response processes.

Where Social Security numbers or similar government identifiers are collected, we apply heightened safeguards designed to limit access, reduce exposure, and protect such information during storage, use, and transmission.

However, no method of transmission over the internet or method of electronic storage is completely secure. As a result, we cannot guarantee absolute security.

You are responsible for maintaining the confidentiality of your account credentials, using strong passwords and appropriate access controls, restricting access to authorized users only, ensuring that data you submit is accurate and lawfully provided, reviewing exported reports and generated outputs before use or distribution, and notifying us promptly of suspected unauthorized use or security incidents involving your account.

If we determine that a security incident involving personal information requires notice under applicable law, we will investigate, contain, and remediate the incident and provide notice to affected individuals and regulators as required by applicable U.S. law. Timing and content of any notice will depend on the facts of the incident and the legal requirements that apply.

Depending on your location and applicable law, you may have certain rights regarding your personal information.

You may be able to access, update, or correct certain account information through your account settings or by contacting us.

You may opt out of marketing or promotional emails by using the unsubscribe link in those emails or by contacting us. Even if you opt out of marketing messages, we may still send you service-related, transactional, or administrative communications.

You may control cookies through browser settings and, where available, through our cookie preference tools.

Subject to applicable law and verification requirements, you may request that we confirm whether we process your personal information, provide access to personal information, correct inaccurate information, delete personal information, provide a portable copy of certain information, and limit or opt out of certain processing where applicable.

We may need to verify your identity before acting on your request. We may also deny or limit a request where permitted by law, such as when an exception applies or where we cannot verify your identity.

If your information was submitted to TaxMD™ by a CPA firm, employer, or other business customer, you may need to submit your request directly to that organization first, especially where TaxMD™ processes the information on that organization’s behalf. Authorized agents may submit requests on behalf of individuals where permitted by law, subject to verification and proof of authority.

This section supplements the rest of this Privacy Policy and applies where required by applicable U.S. state privacy laws, including the California Consumer Privacy Act, as amended by the California Privacy Rights Act, and similar laws in Virginia, Colorado, Connecticut, and Utah.

In the preceding 12 months, we may have collected identifiers; personal information categories described in California Civil Code section 1798.80(e); commercial information; internet or other electronic network activity information; geolocation data such as approximate location derived from IP address; audio, electronic, visual, or similar information such as support recordings or screenshots if provided; professional or employment-related information; and sensitive personal information such as account credentials, financial information, government-issued identifiers if collected, tax-planning inputs, and other sensitive data included in User Content.

We collect and use these categories for the business and commercial purposes described in this Privacy Policy, including providing and administering the Services, processing transactions, customer support, analytics and improvement, security and fraud prevention, legal compliance, and communications. We may disclose these categories to service providers and contractors, integration partners at your direction, customer organizations that administer business accounts, legal authorities or other parties where required by law, transaction counterparties in a business transfer, and professional advisors.

California residents may have the right to request access to categories and specific pieces of personal information, deletion, correction, portability of certain information, information about disclosures to third parties, to opt out of the sale or sharing of personal information if applicable, to limit certain uses of sensitive personal information where applicable, and non-discrimination for exercising privacy rights.

TaxMD™ does not sell personal information and does not share personal information for cross-context behavioral advertising.

Residents of certain states may have rights to confirm whether we process personal information, access personal information, correct inaccuracies, delete personal information, obtain a portable copy of personal information, and opt out of targeted advertising, sale of personal data, or certain profiling activities where applicable. TaxMD™ does not engage in profiling in furtherance of decisions that produce legal or similarly significant effects concerning consumers as defined by applicable law.

If we deny your privacy rights request, you may appeal the decision by contacting us using the contact information provided below and stating that you are submitting a privacy rights appeal. We will review and respond to appeals in accordance with applicable law. We will not unlawfully discriminate against you for exercising any privacy rights available to you under applicable law.

The Services are not directed to children under the age of 13, and we do not knowingly collect personal information directly from children under 13 through the Services. If we learn that we have collected personal information from a child in a manner prohibited by law, we will take reasonable steps to delete that information. If you believe a child has provided personal information to us in violation of this section, please contact us using the contact information provided below.

TaxMD™ is based in the United States and is intended primarily for users located in the United States. If you access the Services from outside the United States, your information may be transferred to, stored in, and processed in the United States and other jurisdictions where we or our service providers operate. Where required, we will take steps designed to provide appropriate safeguards for cross-border transfers.

The Services may contain links to third-party websites, integrations, applications, tools, or services that are not operated or controlled by TaxMD™. We are not responsible for the privacy, security, content, or practices of those third parties. When you interact with third-party services, their own terms and privacy policies will apply. We encourage you to review those policies before providing information or enabling integrations.

If you access TaxMD™ through a CPA firm, employer, enterprise customer, or other organization, that organization may control your access to the Services and may be able to access, manage, or export certain account data and User Content associated with your use of the Services, subject to applicable law and contractual terms.

Where TaxMD™ processes personal information on behalf of a bussiness customer under a separate written aggrement, that agreement may govern Where TaxMD™ processes personal information on behalf of a business customer under a separate written agreement, that agreement may govern TaxMD™’s processing obligations and may control over this Privacy Policy in the event of a conflict.

If you are an end user whose information has been submitted to TaxMD™ by or on behalf of a CPA firm, employer, or other organization, you may wish to direct certain privacy questions first to that organization.

We may update this Privacy Policy from time to time to reflect changes in our Services, legal obligations, technologies, business practices, or other operational needs. When we do, we will revise the Effective Date at the top of this Privacy Policy.

If changes are materially adverse or otherwise legally required to be communicated differently, we may provide additional notice, such as by posting a notice on the website, notifying account holders, or taking other steps required by law.

Your continued use of the Services after the updated Privacy Policy becomes effective is subject to the revised Privacy Policy, to the extent permitted by law.

If you have questions about this Privacy Policy or want to submit a privacy request, you may contact us at:

Privacy Officer TAXMD™: TAX PLANNING SOFTWARE LLC 5020 Clark Rd, #202 Sarasota, FL 34233 Email: Privacy@taxmd.com Website: www.taxmd.com