TaxFormatter

Privacy Policy

Last updated: November 2, 2026

1. Introduction

TaxFormatter ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our CSV formatting and tax preparation service.

2. Information We Collect

Account Information

When you create an account, we collect:

  • Email address
  • Password (encrypted)
  • Account preferences
  • A security activity log: sign-ins, failed sign-ins and security changes, each with your browser and operating system, a shortened IP address (for example 73.162.x.x) and the time. It never holds passwords, codes or file contents. You can see it under Security in your dashboard, and each entry is deleted after 30 days.
  • When your account signs in from a browser it hasn't used before, we email you the time, browser, approximate location (city and country, worked out from the IP address by our hosting provider) and a shortened IP address. The location is only used for that email and isn't stored.

File Data

When you upload CSV files for processing:

  • Uploaded files, processed outputs, and parsed data are stored encrypted and deleted within 30 days (sooner if you delete them from your dashboard)
  • We do not analyze, sell, or share the contents of your files
  • We never request or store exchange API keys, private keys, or wallet seed phrases
  • Anonymized processing metadata (exchange detected, row count, error types) is retained to improve our service

Usage Data

We automatically collect certain information when you use our service, including:

  • IP address
  • Browser type and version
  • Pages visited and time spent
  • Device information

3. How We Use Your Information

We use the information we collect to:

  • Provide and maintain our CSV formatting service
  • Process your transactions and send related information
  • Send you technical notices and support messages
  • Respond to your comments and questions
  • Analyze usage patterns to improve our service
  • Detect, prevent, and address technical issues

4. Data Retention

Everything you send us is deleted within 30 days:

  • Uploaded files: Deleted within 30 days of upload, or immediately when you delete them from your dashboard
  • Processed output files and parsed data: Deleted on the same 30-day schedule as the upload they came from
  • API requests: Processed in memory and never stored; only request metadata is logged
  • Anonymized metadata: Source detected, row count, column headers, processing duration, and error type are retained to improve our service (no transaction amounts, wallet addresses, or PII)
  • AI providers: We never train on your data, and neither do our AI providers; they retain inputs only for abuse monitoring (Anthropic up to 30 days, Google up to 55 days)
  • Account data: Retained until you delete your account (Settings → Delete account). Deleting it signs out every device, deletes your files and results at once, and removes the rest of your account record within a day. Our database's restore history keeps deleted records for 7 more days.
  • Payment records: Retained as required by law for tax and accounting purposes

5. Data Security

We implement industry-standard security measures to protect your data:

  • AES-256 encryption for stored files
  • TLS 1.3 encryption for all data in transit
  • Hosted on AWS, whose infrastructure is SOC 2 audited (TaxFormatter itself has not been independently audited)
  • Automated dependency and code security audit in CI on every change
  • Access controls and audit logging

6. Third-Party Services

We use the following third-party services:

  • Stripe: Payment processing
  • AWS: Cloud infrastructure and file storage
  • Google Analytics: Website analytics

Each of these services has their own privacy policy governing their use of your data.

7. Cookies

We use cookies and similar tracking technologies to:

  • Keep you signed in to your account
  • Recognize browsers you've signed in on before, so failed sign-in attempts from other devices can't lock you out
  • Remember your preferences
  • Understand how you use our service
  • Improve our service based on usage patterns

You can control cookies through your browser settings. Disabling cookies may affect the functionality of our service.

8. Your Rights

You have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data
  • Object to processing of your data
  • Request data portability
  • Withdraw consent at any time

To exercise these rights, please contact us at privacy@taxformatter.com.

9. Children's Privacy

Our service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

11. Contact Us

If you have any questions about this Privacy Policy, please contact us at:

  • Email: privacy@taxformatter.com
  • Website: taxformatter.com/contact