Effective Date: 06/17/2026
1. Secure Financial Information We Collect
When you use our upload feature, we collect highly sensitive financial and tax documents, which may include:
- Tax Documents: Forms W-2, 1099, 1040, or international tax returns.
- Banking and Income Files: Bank statements, pay stubs, investment portfolios, and credit reports.
- Identity Verification: Government-issued IDs or Social Security Numbers contained within uploaded financial records.
- File Metadata: We strip and discard user file metadata (e.g., location data) upon upload to maximize anonymity. [1, 2, 3]
2. Strict Limitations on How We Use Your Files
We process financial documents solely to perform the specific calculation, storage, or transmission services you request.
- No Data Mining: We never scan, analyze, or use your financial records for marketing, advertising, or profiling.
- Automated Security Scanning: Files undergo automated, isolated malware scanning upon upload to prevent system contamination.
3. Automated Data Retention and Permanent Deletion
Financial data carries high risk; we strictly minimize storage times.
- Active Session Processing: Documents processed for instant calculations are permanently purged from RAM and disk space within [e.g., 30 minutes] of session termination.
- Long-Term Storage Accounts: If you maintain a secure account, documents remain stored until you trigger deletion.
- Backup Erasure: Upon account deletion, files are instantly removed from active databases and fully overwritten in secure backups within [e.g., 30 days].
4. Absolute Ban on Data Sharing
We maintain a zero-monetization policy for financial data.
- No Third-Party Sales: Your tax and financial documents are never sold, traded, or shared with third-party brokers.
- Hosting Infrastructure: Files are stored exclusively using highly secure, enterprise-grade cloud partners bound by strict financial-grade data protection agreements.
- Subpoenas and Legal Requests: We strictly verify federal court orders or valid legal subpoenas before disclosing any stored financial documentation, notifying you first whenever legally permissible.
5. Institutional-Grade Data Security
We protect your data using security measures that mirror major banking institutions:
- End-to-End Encryption: Files are encrypted during transit via TLS 1.3 and at rest using AES-256 encryption.
- Access Control: Employees have zero visibility into your uploaded documents. Technical access is restricted via automated, permission-based keys. [1]
6. Contact and Compliance Officer
Privacy Officer Email: Kathy@kathyegancpa.com
Company Name: Kathy Egan CPA, LLC