Legal

Privacy Policy

This Privacy Policy explains how TaxSOP collects, uses, discloses, and safeguards information when you use our website, application, and related services.

Last updated: March 6, 2026

1. Scope

This Privacy Policy applies to TaxSOP, including our public website, account registration flows, hosted application, and related support interactions. It does not apply to third-party services that may be linked from our product or integrated at your direction.

2. Information We Collect

We may collect the following categories of information:

  • Account information, such as your name, email address, authentication provider identity, and login metadata.
  • Company and filing information, such as entity name, EIN, owner details, addresses, filing profile data, and filing status records.
  • Financial and operational information, such as transaction imports, related-party review decisions, uploaded documents, and generated filing packets.
  • Technical information, such as IP address, browser type, device information, application events, request logs, and security telemetry.
  • Communications, such as support requests, account notices, and operational messages.

3. How We Collect Information

We collect information directly from you, automatically through your use of the service, and from third-party providers you choose to connect.

  • Directly from you when you create an account, complete setup, review transactions, or upload files.
  • Automatically when you use the service, including session and security events.
  • From third parties such as Supabase for authentication and Mercury when you enable transaction sync.

4. How We Use Information

We use information to operate, secure, and improve TaxSOP, including to:

  • Authenticate users and manage accounts.
  • Provide tax compliance workflows, filing readiness checks, and filing packet generation.
  • Process transaction synchronization, classification, review, and reporting.
  • Store and serve user-uploaded documents and generated artifacts.
  • Detect misuse, investigate incidents, and maintain auditability.
  • Send service notices, deadline reminders, and support communications.
  • Analyze product performance, reliability, and usage patterns.
  • Comply with legal obligations and enforce our contractual terms.

5. Legal Bases

Depending on your location, we may process information based on one or more of the following: performance of a contract, legitimate interests in operating and securing the service, your consent where required, and compliance with applicable law.

6. How We Share Information

We do not sell personal information. We may disclose information in the following circumstances:

  • To infrastructure, authentication, storage, hosting, analytics, or support vendors acting on our behalf.
  • To integrations you explicitly authorize, such as banking or identity providers.
  • To professional advisors, auditors, or acquirers in connection with financing, diligence, or corporate transactions.
  • To law enforcement, regulators, or other third parties when required by law or to protect rights, safety, and security.

7. Data Security

We use administrative, technical, and physical safeguards designed to protect information against unauthorized access, loss, misuse, or alteration. These measures include encryption for certain sensitive fields, access controls, audit logging, transport encryption, and environment separation. No system is completely secure, and we cannot guarantee absolute security.

8. Data Retention

We retain information for as long as needed to provide the service, maintain required records, resolve disputes, enforce agreements, and comply with law. Tax and filing records may be kept for longer periods where operationally necessary or legally required.

9. Cookies and Similar Technologies

We use cookies and similar technologies for session management, authentication, security, and product performance. You may be able to manage cookie settings through your browser, but disabling certain cookies may affect service functionality.

10. International Transfers

TaxSOP is operated from the United States and may process information in the United States and other jurisdictions where our service providers operate. By using the service, you understand that information may be transferred to and processed in countries outside your home jurisdiction.

11. Your Rights and Choices

Subject to applicable law, you may have rights to access, correct, delete, restrict, or export certain information.

You may also be able to update some profile and company information directly within the product. To request assistance with privacy rights, contact us using the information below.

12. Children

TaxSOP is intended for business users and is not directed to children under 18. We do not knowingly collect personal information from children.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the last updated date above. Material changes may also be communicated through the product or by email.

14. Contact Us

If you have questions about this Privacy Policy or our data practices, contact:

Lebit, LLC

Privacy contact: [email protected]

Legal contact: [email protected]