Privacy Policy

At Taxy, Inc. ("Taxy," "we," "us," or "our"), we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, applications, and services (collectively, the "Services").

Please read this Privacy Policy carefully. By using our Services, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

1.1 Information You Provide to Us

We collect information you provide directly to us, including:

• Account Information: When you create an account, we collect your name, email address, company name, and password.
• Financial Information: When you connect your accounting software, bank accounts, or payment processors, we collect financial data necessary to provide our Services.
• Payment Information: When you subscribe to our Services, our payment processor collects your payment card details. We do not store your full payment card numbers.
• Communications: When you contact us, we collect the information you provide in your messages, including any personal information you choose to share.

1.2 Information We Collect Automatically

When you use our Services, we automatically collect certain information, including:

• Usage Data: Information about how you use our Services, including pages viewed, features used, and actions taken.
• Device Information: Information about your device, including IP address, browser type, operating system, and device identifiers.
• Cookies and Similar Technologies: We use cookies, pixels, and similar technologies to collect information and improve our Services.

1.3 Information from Third Parties

We may receive information about you from third parties, including:

• Integration Partners: When you connect third-party services (like QuickBooks, Stripe, or GitHub), we receive data from those services as authorized by you.
• Analytics Providers: We use third-party analytics services to help us understand how our Services are used.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our Services
• Process transactions and send related information
• Send you technical notices, updates, and support messages
• Respond to your comments, questions, and requests
• Analyze usage patterns to improve our Services
• Detect, investigate, and prevent fraudulent transactions and other illegal activities
• Personalize and improve your experience
• Send you marketing communications (with your consent where required)
• Comply with legal obligations

3. How We Share Your Information

We may share your information in the following circumstances:

• Service Providers: We share information with vendors and service providers who perform services on our behalf, such as hosting, analytics, and customer support.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.
• Legal Requirements: We may disclose information if required by law or in response to valid legal process.
• Protection of Rights: We may disclose information when we believe it is necessary to protect our rights, your safety, or the safety of others.
• With Your Consent: We may share information with your consent or at your direction.

We do not sell your personal information to third parties.

4. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• 256-bit AES encryption for data at rest and in transit
• SOC 2 Type II certified infrastructure
• Regular security audits and penetration testing
• Employee access controls and training
• Incident response procedures

However, no method of transmission over the Internet or electronic storage is completely secure, and we cannot guarantee absolute security.

5. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements.

When you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain certain information for legal or regulatory purposes.

6. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to:

• Remember your preferences and settings
• Authenticate users and prevent fraud
• Analyze traffic and usage patterns
• Deliver targeted advertising (with your consent)

You can control cookies through your browser settings. Note that disabling cookies may affect the functionality of our Services.

Types of Cookies We Use

• Essential Cookies: Required for the basic functioning of our Services.
• Analytics Cookies: Help us understand how visitors interact with our Services.
• Functional Cookies: Remember your preferences and settings.
• Marketing Cookies: Used to deliver relevant advertisements (with your consent).

7. Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information:

• Access: Request access to your personal information.
• Correction: Request correction of inaccurate personal information.
• Deletion: Request deletion of your personal information.
• Portability: Request a copy of your personal information in a portable format.
• Opt-Out: Opt out of marketing communications at any time.
• Withdraw Consent: Where we rely on consent, you may withdraw it at any time.

To exercise these rights, please contact us at privacy@taxy.io or through your account settings.

8. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including:

• The right to know what personal information we collect, use, and disclose
• The right to request deletion of your personal information
• The right to opt out of the sale of personal information (note: we do not sell personal information)
• The right to non-discrimination for exercising your privacy rights

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers, including Standard Contractual Clauses approved by relevant authorities.

10. Children's Privacy

Our Services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically.

12. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us at:

Taxy, Inc.
548 Market St, Suite 95879
San Francisco, CA 94104
Email: privacy@taxy.io

For data protection inquiries in the European Union, you may also contact our Data Protection Officer at dpo@taxy.io.