TaxRock LLC

Privacy Policy

TaxRock LLC (“TaxRock,” “Company,” “we,” “us,” or “our”) respects your privacy and is committed to protecting your personal information. This Privacy Policy describes how we collect, use, disclose, and protect information when you use our website, services, and platform (collectively, the “Services”).

This Privacy Policy applies to information collected from Customers, authorized users, visitors to our website, and other individuals who interact with the Services.

TaxRock provides the Services in two distinct relationships, and our role with respect to your information depends on which applies. Where the Services are provided to a business Customer — including tax professionals, accounting firms, payroll providers, and financial institutions — TaxRock acts as a service provider and processor on that Customer’s behalf, as described in BUSINESS CUSTOMER RELATIONSHIP below. Where an individual uses the Services directly for their own tax matters, TaxRock has a direct relationship with that individual and determines the purposes and means of processing their information, as described in CONSUMER USERS below. References in this Privacy Policy to “you” should be read accordingly.

INFORMATION WE COLLECT

Information You Provide Directly

We collect information you provide when you:

  • create an account
  • submit forms
  • request information
  • communicate with us
  • subscribe to Services
  • submit taxpayer authorization information

This information may include:

  • name
  • email address
  • phone number
  • business name
  • billing information
  • account credentials
  • IRS authorization forms
  • taxpayer identifying information submitted by Customers

IRS Transcript and Taxpayer Information

When authorized by Customer and the applicable taxpayer, TaxRock retrieves IRS transcript and tax-related information necessary to provide the Services.

Taxpayer Information may include:

  • taxpayer name
  • taxpayer identification number
  • transcript information
  • filing history
  • tax balances
  • IRS account status

TaxRock accesses and processes Taxpayer Information solely at the direction of the Customer and within the scope of authorizations provided by the Customer. TaxRock does not independently access, review, or use Taxpayer Information except as necessary to provide the Services.

TaxRock does not determine the purposes or legality of Customer access to Taxpayer Information and relies on Customer authorizations.

TaxRock does not access, view, or use Taxpayer Information except as necessary to provide the Services at the direction of the Customer and does not access Taxpayer Information for its own independent business purposes.

Bank Account Information

Where the Services are used to prepare or transmit tax forms containing direct deposit or direct debit instructions, we collect the bank account number and bank routing number for the account designated to receive or send those funds (“Bank Account Information”).

Bank Account Information is obtained exclusively through Plaid Inc. (“Plaid”). It is treated as Taxpayer Information for purposes of this Privacy Policy. See BANK ACCOUNT INFORMATION AND PLAID below.

Information Collected Automatically

We automatically collect certain technical information when you use the Services, including:

  • IP address
  • browser type
  • device information
  • operating system
  • usage data
  • pages viewed
  • timestamps
  • referring URLs

This information helps us operate, maintain, and improve the Services.

Cookies and Tracking Technologies

We use cookies and similar technologies to:

  • operate the website
  • remember preferences
  • analyze usage
  • improve user experience

You may disable cookies through your browser settings.

HOW WE USE INFORMATION

We use information to:

  • provide and operate the Services
  • retrieve IRS transcript information as authorized
  • authenticate users
  • process payments
  • communicate with Customers
  • provide customer support
  • improve the Services
  • ensure security
  • comply with legal obligations
  • populate direct deposit and direct debit fields on tax forms prepared or transmitted through the Services

HOW WE SHARE INFORMATION

We do not sell personal information.

We may share information with:

  • service providers
  • payment processors (such as Stripe)
  • cloud hosting providers
  • analytics providers
  • communication providers
  • legal authorities when required by law
  • bank account connection providers (such as Plaid)
  • the Internal Revenue Service and state taxing authorities, as part of any tax form prepared or transmitted through the Services

TaxRock acts as a service provider and processor of information on behalf of its Customers. Customers remain responsible for the information they submit and authorize through the Services.

Where an individual uses the Services directly rather than through a business Customer, the two preceding sentences do not apply and TaxRock acts on its own behalf. See CONSUMER USERS below.

TaxRock does not control or determine the legality, scope, or validity of taxpayer authorizations provided by Customers.

TaxRock does not sell, rent, trade, or otherwise monetize Taxpayer Information or IRS transcript data. TaxRock uses Taxpayer Information solely to provide the Services as directed by Customers and authorized users.

TaxRock engages service providers only where necessary to operate the Services, and such providers are subject to contractual confidentiality and data protection obligations.

BUSINESS CUSTOMER RELATIONSHIP

This section applies only where the Services are provided to a business Customer. It does not apply where an individual uses the Services directly for their own tax matters; see CONSUMER USERS below.

TaxRock provides Services to business customers, including tax professionals, accounting firms, and financial institutions.

TaxRock processes taxpayer information solely on behalf of such Customers and does not determine the purposes or means of processing taxpayer information submitted by Customers.

Customers act as the data controller with respect to Taxpayer Information and personal information submitted to the Services. TaxRock acts solely as a service provider and data processor and processes such information only on behalf of and in accordance with Customer instructions.

Customers are responsible for obtaining all required taxpayer authorizations and complying with applicable laws.

Where TaxRock provides the Services to a business Customer, it does not have a direct relationship with the individual taxpayers whose information that Customer submits.

CONSUMER USERS

Individuals may use the Services directly for their own tax matters. Where they do, TaxRock has a direct relationship with the individual, and no business Customer stands between the individual and TaxRock.

In that relationship, TaxRock determines the purposes and means of processing the individual’s personal information and is responsible for it under applicable privacy law, including as a business under the California Consumer Privacy Act and California Privacy Rights Act. The provisions of this Privacy Policy that describe TaxRock as a service provider or processor acting at the direction of a Customer do not apply.

Individual users are responsible for the accuracy of the information they provide and for the authorizations they grant through the Services, including authorization to retrieve IRS transcript information relating to their own tax accounts.

Where required by applicable federal law, TaxRock provides individual users with a separate privacy notice describing its collection and sharing of nonpublic personal financial information. That notice is provided in addition to this Privacy Policy and controls to the extent of any conflict.

Individual users may exercise the rights described in CALIFORNIA PRIVACY RIGHTS below, and any comparable rights available under the law of their state, by contacting TaxRock directly at the address in CONTACT INFORMATION.

PAYMENT PROCESSING

Payments are processed by third-party payment processors such as Stripe.

TaxRock does not store full credit card numbers.

Payment processors handle payment information in accordance with their privacy policies.

BANK ACCOUNT INFORMATION AND PLAID

Bank Account Information is collected for a single purpose: to populate direct deposit or direct debit fields on federal and state tax forms prepared or transmitted through the Services. We do not use Bank Account Information for marketing, analytics, product development, or any other purpose, and we do not sell, rent, or license it.

How it is collected. We use Plaid to obtain Bank Account Information, and this is the only method by which we collect it. Bank Account Information cannot be typed into the Services directly. When an account is linked, you are directed to Plaid’s interface, where you select your financial institution and authenticate directly with that institution. Online banking credentials are provided to Plaid and not to TaxRock. We do not receive, view, or store online banking usernames, passwords, or multi-factor authentication codes at any point.

By linking an account, you authorize Plaid to collect Bank Account Information from your financial institution and share it with us. Plaid handles that information in accordance with the Plaid End User Privacy Policy, available at plaid.com/legal. Plaid is an independent company and we do not control its practices or retention. We request only the information necessary to identify the account for use on tax forms.

We do not move money. TaxRock does not initiate transfers to or from any bank account. We do not debit accounts for fees and do not deposit funds. Any deposit or withdrawal associated with a tax return is initiated by the applicable taxing authority based on the information reported on the return. Linking an account through Plaid does not authorize TaxRock or Plaid to transfer funds; it authorizes retrieval of account details only.

Who it is shared with. Bank Account Information is disclosed to the Internal Revenue Service and, where applicable, state taxing authorities as part of any tax form prepared or transmitted through the Services. It is otherwise shared only with service providers that require access to operate the Services, subject to contractual confidentiality and data protection obligations.

How it is protected. Bank Account Information is encrypted at rest and in transit, and access is restricted to authorized personnel and systems that require it to provide and support the Services.

Disconnecting an account. A linked account may be disconnected through the Services, and Plaid connections may separately be managed or revoked through Plaid’s consumer portal. Disconnecting an account does not remove information already reported on a transmitted tax form or contained in records we are required to retain, and does not terminate any relationship between the account holder and Plaid.

Whose account it is. Where an individual uses the Services directly, Bank Account Information is collected from that individual for their own tax matters. Where a business Customer links an account on behalf of a taxpayer, the Customer is responsible for obtaining the taxpayer’s authorization to do so, and TaxRock does not verify the existence or scope of that authorization.

DATA SECURITY

We implement reasonable administrative, technical, and physical safeguards to protect information.

These safeguards include:

  • access controls
  • authentication requirements
  • encryption in transit
  • restricted access to sensitive information
  • encryption at rest for Bank Account Information

Access to Taxpayer Information is restricted to authorized personnel and systems that require such access to provide and support the Services.

However, no system can be guaranteed to be completely secure.

Information transmitted over the internet or retrieved from third-party systems, including the Internal Revenue Service, may be subject to interruption, delay, or unauthorized access. TaxRock cannot guarantee the security, availability, or accuracy of information transmitted through external systems beyond its control.

In the event of a security incident affecting Customer information, TaxRock will notify affected Customers as required by applicable law.

DATA RETENTION

We retain information for as long as necessary to:

  • provide the Services
  • comply with legal obligations
  • resolve disputes
  • enforce agreements

We may retain information longer if required by law.

Because Bank Account Information appears on tax forms prepared or transmitted through the Services, it is retained as part of records we are required to retain under applicable law and Internal Revenue Service requirements, notwithstanding any request for deletion. Outside of those required records, Bank Account Information is removed from our active systems following acceptance of the associated return by the taxing authority. Information held by Plaid is retained in accordance with Plaid’s own policies.

BUSINESS TRANSFERS

Information may be transferred as part of a merger, acquisition, financing, asset sale, or other business transaction. TaxRock will ensure that any successor entity continues to protect information consistent with this Privacy Policy.

CALIFORNIA PRIVACY RIGHTS

California residents have rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including the right to:

  • request access
  • request correction
  • request deletion
  • request information about data use

TaxRock does not sell personal information.

Bank Account Information constitutes sensitive personal information under the CPRA. We collect and use it only for the purpose described in BANK ACCOUNT INFORMATION AND PLAID above, and we do not use or disclose it for any purpose that would require us to offer a right to limit its use. California residents may request that we limit the use of sensitive personal information by contacting us at the address below. Certain information may be exempt from these rights where it is subject to the Gramm-Leach-Bliley Act or other federal law.

To exercise your rights, contact: support@taxrock.com

SMS COMMUNICATIONS

If you provide your phone number, you may receive SMS messages related to:

  • account access
  • service notifications
  • support

Message and data rates may apply.

You may opt out at any time.

CHILDREN’S PRIVACY

The Services are not intended for children under 13.

We do not knowingly collect information from children under 13.

CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time.

Changes will be posted on this page.

Continued use of the Services constitutes acceptance.

CONTACT INFORMATION

If you have questions about this Privacy Policy, contact: support@taxrock.com