Privacy Policy

Our role

Tax Plan OS is a business-to-business platform. Your firm is the controller of the client and taxpayer information it uploads; we process that information on your instructions to provide the service.

Information we collect

Account information: name, work email, organization, role assignments, and authentication metadata.

Workspace content: clients, deals, documents, checklist items, notes, calculator inputs and outputs, and the audit events generated as work progresses.

Billing information: plan selection, subscription status, and invoice records. Card data is collected and stored by our payment provider, not by Tax Plan OS.

Operational data: log entries, security events, and diagnostic information used to keep the service reliable.

Sensitive tax information

Do not upload full Social Security numbers or full EINs where a partial identifier will do; the platform is designed to store only the last four digits of an EIN on professional and entity records.

Uploaded documents are stored in private buckets, are only reachable through short-lived signed links, and are visible to a client only after they are finalized, scanned, and approved.

How we use information

To operate the workspace, enforce role-based access, generate audit trails, process payments, deliver notifications you trigger, secure the platform, and support your team.

We do not sell personal information, and we do not use your client content to advertise to you or to anyone else.

Service providers

We rely on infrastructure, database, storage, authentication, email, and payment subprocessors to deliver the service. Each is bound to confidentiality and security obligations and may only process data to provide their service to us.

Security

Access is tenant-isolated and enforced at the database layer with row-level security. Privileged actions are audited and can require step-up authentication. Documents are private by default and versioned. No system is perfectly secure; report suspected issues to security@taxplanos.com.

Retention

Workspace content is retained while your account is active and for a reasonable period afterward so you can export it. Certain audit and financial records are retained longer where required for legal, accounting, or dispute-resolution purposes.

Your choices and rights

Administrators can manage members, revoke invitations, and request export or deletion of workspace data. Individuals whose information appears in a workspace should contact the firm that uploaded it; we will support that firm in responding to a valid request.

Contact

Privacy questions can be sent to privacy@taxplanos.com.