Privacy Policy

1. Information We Collect

We collect different categories of information depending on how you interact with the TaxAside platform.

Account Information

Name, email address, and phone number, collected when you create an account via Clerk authentication.

Business Information

Business name, Employer Identification Number (EIN), state tax registration numbers, filing frequencies, and business addresses.

POS Data

Daily sales totals, tax amounts collected, and transaction counts, accessed via OAuth integration with your POS provider. We do not access customer personally identifiable information from your POS system.

Bank Account Information

Routing and account numbers provided for ACH set-aside transfers. This information is tokenized via our banking partner, Increase. We store only the last four digits of your account number.

Usage Data

Pages visited, features used, IP address, browser type, device information, and referring URLs.

Billing Data

Payment information is processed by Stripe. We do not store full credit card numbers. Stripe provides us with the last four digits and expiration date for display purposes only.

2. How We Use Your Information

We use the information we collect to:

• Calculate and set aside sales tax based on daily POS data
• Prepare and file sales tax returns with state and local tax authorities
• Process ACH debit transfers for daily set-asides and tax payments
• Send notifications including filing confirmations, deadline reminders, and account alerts
• Improve the platform through aggregated, anonymized usage analytics
• Comply with legal obligations including tax record-keeping requirements

3. How We Share Your Information

We share your information only with the following parties and only as necessary to provide the Service:

• State and local tax authorities — filing returns and remitting payments on your behalf
• Increase — ACH payment processing for daily set-asides and tax payments
• Stripe — subscription billing and payment processing
• Clerk — authentication and identity management
• POS providers — OAuth token refresh only. We do not send your data back to your POS provider.

We do NOT sell your personal or business data. Ever.

We do not share data with advertising networks or data brokers. All third-party service providers are contractually obligated to protect your information and use it only for the purposes for which it was disclosed.

4. Data Security

We implement industry-standard security measures to protect your information:

• All data encrypted in transit (TLS 1.3) and at rest (AES-256)
• OAuth tokens from POS integrations are encrypted with application-level envelope encryption
• Bank account numbers are tokenized through Increase — only the last four digits are stored in our systems
• Access controls with role-based permissions and audit logging
• SOC 2 Type II compliance on our roadmap

While we strive to protect your data, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

5. Data Retention

• Tax filing records — retained for seven (7) years per IRS record-keeping guidelines
• Account data — retained while your subscription is active plus 90 days after cancellation

You may request a full data export at any time through your dashboard or by contacting support. Deletion requests are honored subject to legal retention requirements — tax records must be maintained for the full retention period.

6. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Access — request a copy of all personal data we hold about you
• Correction — request updates to inaccurate information
• Deletion — request deletion of your data, subject to our legal retention obligations for tax records
• Data Portability — receive your data in a structured, machine-readable format

To exercise these rights, contact privacy@taxaside.com. We will respond within 30 days.

7. Cookies

We use minimal cookies: authentication cookies managed by Clerk (essential for login) and basic analytics cookies to understand how our website is used.

We do not use third-party advertising cookies. We do not participate in ad networks or retargeting programs.

You can control cookie preferences through your browser settings. Disabling essential cookies may prevent you from logging in.

8. Children's Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that a child under 18 has provided us with personal information, we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will provide at least 30 days' notice of material changes by posting the updated policy and, where appropriate, emailing you. Your continued use of the Service after the effective date of the revised policy constitutes acceptance.

10. Contact

If you have questions about this Privacy Policy or our data practices, contact us at privacy@taxaside.com.

Incline Labs LLC, Atlanta, GA.