AutoFileTax.com Privacy Policy

Last updated: September 7, 2026

1. Information We Collect

Account Information

When you create an account, we collect your email address and password (hashed). If you sign in with Google, we receive your name and email from Google.

Tax Documents

When you use our AI tax preparation service, you may upload tax documents (W-2s, 1099s, etc.) containing sensitive information including your name, Social Security Number, income, and employer details. These documents are processed by our AI to extract tax data.

CPA Registration

CPAs registering to advertise on our platform provide: full name, email, phone, CPA license number, licensed state, last 4 digits of SSN (for identity verification), license image, resume, education details, and LinkedIn profile. Listings are advertising. We do not process CPA client fees.

Payment Information

PDF checkout is processed by PayPal. We do not store your PayPal password or full card number on our servers.

Usage Data

We collect analytics data including pages visited, features used, and interaction patterns via Google Analytics (ID: G-CRXH0BCD2C).

2. How We Use Your Information

• Tax Filing: To generate your IRS Form 1040 packet using AI
• CPA Directory: To list verified CPAs you can contact directly
• Payments: To process PDF download payments
• Communication: To send transactional emails (verification, receipts)
• Analytics: To improve the Service
• Security: To detect and prevent fraud

3. AI Processing

Your uploaded tax documents are sent to a third-party AI provider (Google) for data extraction. The AI never sees credentials you type — Social Security number, account password, PayPal login, or card number. SSNs are stripped from AI prompts and only inserted directly into your PDF locally, then dropped before we save the return. Google processes those documents under their Privacy Policy.

4. Data Storage & Security

• Database: User data is stored in Supabase (PostgreSQL) with row-level security
• Files: Uploaded documents and generated PDFs are stored in Google Cloud Storage with encryption at rest
• Authentication: JWT tokens verified server-side via Supabase Auth
• Encryption: All data transmitted over HTTPS (TLS 1.3)
• SSN Storage: We do not store or hash full filer SSNs. Hashing is the wrong tool here: Form 1040 needs the real number on the PDF, and SSNs are too small a space to hash safely. Instead the SSN is used only during PDF generation, then stripped before any database write. The AI never sees it. CPA registrations store only the last 4 digits for identity verification (not sent to the license-check model).

5. Data Sharing

We do not sell your personal information. We share data only with:

• PayPal: PDF checkout
• Google: Document data extraction. Credentials you type (SSN, passwords, PayPal) are never sent.
• Google Cloud: File storage
• Supabase: Database hosting
• Law enforcement: If required by law, subpoena, or court order

6. Your Rights

You have the right to:

• Access: Request a copy of your personal data
• Correction: Update inaccurate information
• Deletion: Request deletion of your account and data
• Portability: Export your tax data in CSV format
• Opt-out: Unsubscribe from marketing emails (transactional emails cannot be opted out)

To exercise these rights, contact support@autofiletax.com.

7. Cookies & Tracking

We use:

• Essential cookies: Authentication session (Supabase)
• Analytics: Google Analytics (G-CRXH0BCD2C) for usage tracking

You can disable cookies in your browser settings, but this may affect Service functionality.

8. Data Retention

We retain your data for as long as your account is active. Tax documents and generated PDFs are retained for 7 years (consistent with IRS record-keeping requirements). You may request earlier deletion by contacting support.

9. Children's Privacy

The Service is not intended for users under 18. We do not knowingly collect data from minors.

10. California Privacy Rights (CCPA)

California residents have additional rights under the CCPA, including the right to know what personal information is collected, request deletion, and opt out of data sales. We do not sell personal information.

11. Changes to This Policy

We may update this Privacy Policy at any time. We will notify you of material changes via email or a notice on the Service.

12. Contact

For privacy questions or data requests, contact:
support@autofiletax.com