Privacy

Privacy requests

For privacy questions or requests, see our contact page.

Google sign-in

Google supplies your verified email address, name, account identifier, and, when available, profile picture. We use this information to verify your identity, keep research associated with your account, and apply usage limits. We do not request access to your Gmail, Google Drive, contacts, or calendar. We do not receive your Google password.

The browser keeps a short-lived Taxterity session and workbench state in session storage. Signing out clears that browser state; it does not delete saved research on our server. Google may use its own cookies and storage when you use Google sign-in.

Research and uploaded documents

We store questions, saved research threads, generated responses, uploaded files and extracted text, and source references to provide your research history. Removing an attachment from a draft does not delete its stored copy. Only submit material you have permission to use, and remove unnecessary personal or confidential information before uploading it.

Taxterity is not a confidential legal-advice service. Do not upload passwords, access tokens, Social Security numbers, payment-card details, or highly sensitive client information. Using the service does not establish an attorney-client relationship or privilege.

Guest questions

When guest access is available, a necessary, signed cookie remembers your browser for up to 30 days so we can enforce the trial allowance. Our guest limit records use a keyed hash of your IP address, not a browser fingerprint. Clearing cookies does not reset the separate network limit. Normal server security logs may still contain IP addresses as described below.

Guest questions, answers, and source references are stored separately from signed-in research and expire after 30 days. Cleanup runs hourly while the service is operating and resumes after downtime, including when new guest access is disabled. Browser usage hashes expire after 30 days; network hashes are cleared after their 24-hour limit window, apart from a request still in progress. Recovery copies may remain under our backup retention policy. Drafts and the sign-in handoff may use this tab’s session storage. Guest conversations are not automatically saved to your account when you sign in.

Guest questions use the same AI providers described below. Do not include confidential or personal client information. Trial allowances are shared by devices on the same network and may be unavailable when service or spending limits are reached.

AI providers and hosting

Our service is hosted on Amazon Web Services. To answer a request, relevant question text, source excerpts, and selected document text may be processed by OpenAI for generation, DeepInfra for query embeddings, and Google Cloud Vertex for ranking search results. The amount sent depends on the workflow. Google passwords and Taxterity session credentials are not part of these AI requests.

These providers process requests under their applicable service terms and retention settings. We do not promise zero retention by providers. We do not sell your Google account information or research content, use it for advertising, or use it to train our own general-purpose AI model.

Automated operations tools help maintain the service. Access to private research for support, security, or troubleshooting is limited to what is needed for that purpose. Ordinary marketing reports use aggregate information, not private research content.

Sharing

Research is not publicly shared by default. Creating a share link makes that artifact snapshot available to anyone who has the link, including its text and cited excerpts. Review it for confidential information first. You can revoke the link, but revocation cannot remove copies someone has already downloaded or forwarded.

Logs, usage, and security

We keep operational records such as request times, IP addresses, errors, account usage, credit reservations, and provider-cost records to run the service, prevent abuse, investigate failures, and enforce spending limits. We do not use advertising trackers or require Google Analytics. Search-engine reporting, when connected, supplies aggregate search-performance information.

HTTPS protects data in transit. Access controls separate account data and restrict server access. No service can guarantee absolute security. Data is processed on our US-hosted service and by the providers described above, which may operate in other locations.

Retention and your choices

Saved research and uploads remain available until deleted through a verified support request or removed as part of service maintenance. There is no automatic short-term expiration for uploaded files. Operational and backup copies may remain after active data is deleted where needed for recovery, security, accounting, or legal obligations; we will explain the applicable handling when responding to your request.

You can export research through the workbench. To request access, correction, deletion of your account or uploads, or information about processing, use the contact page. We may ask you to verify your identity. Revoking Google sign-in permission does not itself delete research already stored by Taxterity.

Changes

We will update this page when data practices change and give notice of material changes. If we seek additional Google permissions or new uses of Google account data, we will explain them and request consent before that access or use. Taxterity is intended for adults researching professional tax matters, not for children.