Privacy Policy

The short version

Your filing data is for your filing. We use it to provide TaxCurb, not to sell it or build advertising audiences.

Some information is sensitive. Tax identifiers in saved filing data are encrypted, and generated forms are kept in private storage.

Optional W-2 scanning is different. It sends the document to our scanning provider, Reducto. Do not use it if you do not want the document sent there.

Scope and who we are

This Privacy Policy applies to TaxCurb’s website, tax-preparation tools, and related services (together, the “Service”). In this policy, “TaxCurb,” “we,” “us,” and “our” mean the operator of the Service. It does not cover websites or services that we do not control, including the websites of third-party providers.

The Service helps users prepare tax forms and related materials. It does not itself submit returns to the IRS or a state tax authority unless we clearly introduce that capability in the Service and update this policy as appropriate.

Information we collect

We collect information in the following categories.

• Account information: your email address and the credentials needed to create, secure, and recover your account. Authentication credentials are processed through our authentication provider; we do not display your password to TaxCurb staff.
• Filing information: information you enter to prepare forms, such as your name, address, date of birth, tax residency and visa history, travel and presence information, passport details, taxpayer identification number, income, withholding, and information from tax documents.
• Generated forms: the PDFs and other materials the Service generates from your filing information.
• Payment information: when you purchase a package, payment is processed by Stripe. We receive transaction information such as the checkout-session identifier, payment status, amount, currency, package, and tax year. We do not receive or store your full payment-card number.
• Communications: information you include when you email us or otherwise contact us.
• Technical and security information: IP address, browser and device information, request timestamps, and diagnostic or security logs generated when you use the Service.
• Essential cookies: cookies used for sign-in, session management, CSRF protection, and security. We do not use advertising cookies or sell information for targeted advertising.
• Tax tools: if you use our vehicle tax tool, we send the VIN and the requested model year to the National Highway Traffic Safety Administration’s vPIC service to return vehicle data.

Sensitive tax identifiers and W-2 scanning

Taxpayer identification numbers, passport numbers, and similar identifiers require extra care. When you save filing progress, TaxCurb encrypts those sensitive fields before storing them in our filing database. When saved information is returned to your browser, identifiers are masked rather than returned in full. Generated tax PDFs may contain the full information needed for the form and are stored in private, access-controlled storage.

If you choose “Upload W-2,” the image or PDF is sent to Reducto, our document-extraction provider, to read form fields. TaxCurb holds the uploaded file in server memory only for the request and does not save the uploaded file to its own storage. We instruct the extraction flow not to return the employee SSN and require you to enter it yourself.

The uploaded W-2 itself can contain an SSN, name, address, employer, and wage information. Reducto receives and stores that file under its own service terms and retention practices. TaxCurb’s current integration does not have a documented deletion capability for files stored by Reducto. Do not use W-2 scanning if you do not want your document sent to Reducto. You can enter the W-2 information manually instead. Reducto’s privacy information is at https://reducto.ai/privacy.

How we use information

• Provide, operate, troubleshoot, and improve the Service.
• Create, save, retrieve, and generate your tax forms and filing materials.
• Authenticate users, protect accounts, prevent fraud and misuse, and maintain the security of the Service.
• Process purchases, verify entitlements, and maintain payment records.
• Respond to your messages and send service, security, account, or legally required notices.
• Comply with applicable law, resolve disputes, and enforce our agreements.
• We do not use your tax-return information to make decisions about you for employment, housing, insurance, credit, or similar purposes.

When we disclose information

We do not sell or rent your personal information. We disclose information only as needed to operate the Service, as described below, or with your direction.

• Service providers: Supabase provides authentication, database, and private storage infrastructure; Stripe processes payments; Reducto processes W-2 scans when you use that optional feature; and NHTSA’s vPIC service provides vehicle information when you use the vehicle tool. These providers receive information needed to perform their functions.
• Legal, safety, and enforcement: we may disclose information when we reasonably believe disclosure is required by law or needed to protect the rights, safety, security, or property of TaxCurb, our users, or others.
• Business changes: information may be transferred as part of a merger, financing, acquisition, reorganization, bankruptcy, or sale of all or part of our business, subject to applicable law.
• With your instruction or consent: we may disclose information when you ask us to or otherwise direct us to do so.

Security

We use safeguards designed to protect the information we handle. These include encryption for sensitive saved filing fields, encryption in transit, authenticated access controls, private generated-form storage, HTTP-only authentication cookies, CSRF protections, and rate limits on sensitive endpoints. Access is limited to what is reasonably needed to run and support the Service.

No online service can eliminate every security risk. Please use a unique, strong password, keep your devices secure, and contact us promptly if you believe your account has been accessed without authorization.

Retention

We keep information for as long as reasonably necessary to provide the Service, maintain your account and filing history, meet legal, accounting, tax, and security obligations, resolve disputes, and enforce agreements. The appropriate period depends on the type of information and the reason we collected it.

Saved filing information and generated forms may remain available while your account is active; payment records may be retained as required for financial records; and security logs may be retained for a shorter operational period. If you request deletion, we will delete or de-identify information that we no longer need, subject to lawful exceptions. A W-2 uploaded for optional scanning is also subject to Reducto’s retention practices, which TaxCurb does not control.

Your privacy choices and rights

Depending on where you live, you may have the right to request access to, correction of, deletion of, or a copy of certain personal information, or to ask us to limit certain processing. To make a request, email rojan@taxcurb.net or sanjog@taxcurb.net with the subject line “Privacy Request.”

We may need to verify your identity before acting on a request, and some information may be retained where the law allows or requires it. We will respond as required by applicable law. We do not sell or share personal information for cross-context behavioral advertising, so we do not offer a separate sale or targeted-advertising opt-out.

You can also control cookies through your browser. Blocking essential cookies may prevent you from signing in or using parts of the Service.

International users

TaxCurb is operated from the United States. If you use the Service from another country, your information may be processed in the United States and other locations where our providers operate. Those locations may have privacy laws different from those in your country of residence.

Children’s privacy

The Service is intended for adults and is not directed to children under 18. We do not knowingly collect personal information from children under 18. If you believe a child has provided us personal information, please contact us so we can review and address the issue.

Changes to this policy

We may update this policy as the Service or applicable law changes. We will post the updated version here and change the effective date. If a change is material, we will take additional steps to notify you when appropriate.

Contact us

TaxCurb. Privacy questions or requests: rojan@taxcurb.net or sanjog@taxcurb.net. Website: https://taxcurb.net.