Privacy Policy

1. Who We Are

TaxFlow ("TaxFlow," "we," "us," or "our") is an accounting software product designed to help self-employed individuals and small business owners organize their financial transactions for tax purposes. TaxFlow is operated by VonderLinden Group LLC.

If you have any questions about this Privacy Policy, you can contact us at: privacy@taxflow.app

2. What Data We Collect

2.1 Data You Provide Directly

• Account information: When you create an account, we collect your name and email address.
• Payment information: We use Stripe to process payments. We never store your credit card number — Stripe handles all payment data.
• Settings and preferences: User names, business names, and custom categorization rules you create.

2.2 Financial Data — Processed Locally

When you upload bank statements or enter transaction data, that information is processed entirely within your browser. Your bank statements and transaction data are never transmitted to our servers. This is a core design decision — your financial data stays on your device.

If you use our cloud sync feature (optional), your transaction data is encrypted before being sent to our servers using AES-256 encryption. The encryption key is derived from your password and is never stored on our servers, meaning we cannot read your financial data even if we wanted to.

2.3 Usage Data

• Pages visited and features used (no financial data included)
• Browser type, operating system, and device type
• IP address (anonymized after 30 days)
• Error logs to help us fix bugs

2.4 Cookies

We use only essential cookies required for the app to function (session authentication). We do not use advertising cookies or sell data to advertisers.

3. How We Use Your Data

• To provide, operate, and improve the TaxFlow service
• To send you account-related emails (receipts, password resets, important service updates)
• To respond to your support requests
• To detect and prevent fraud or abuse
• To comply with legal obligations

We will never use your data for advertising purposes or sell it to third parties.

4. How We Share Your Data

We do not sell, rent, or trade your personal information. We share data only with:

• Stripe: For payment processing. Subject to Stripe's Privacy Policy.
• Supabase: For secure data storage and authentication. Subject to Supabase's Privacy Policy.
• Law enforcement: When required by law or valid legal process.

5. Data Security

We take the security of your data seriously:

• All data in transit is encrypted using TLS 1.2 or higher
• Passwords are hashed using bcrypt and never stored in plain text
• Your financial data is processed locally in your browser and never sent to our servers in unencrypted form
• We conduct regular security reviews of our codebase and infrastructure

6. Data Retention

We retain your account information for as long as your account is active. If you cancel your account, we delete your personal data within 30 days, except where we are required by law to retain it longer.

7. Your Rights

You have the right to:

• Access: Request a copy of the personal data we hold about you
• Correction: Ask us to correct any inaccurate data
• Deletion: Ask us to delete your personal data (the "right to be forgotten")
• Portability: Receive your data in a portable format
• Objection: Object to our processing of your data

To exercise any of these rights, email privacy@taxflow.app.

8. Children's Privacy

TaxFlow is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children under 18. If you believe we have collected information from a child under 18, please contact us immediately.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by email or by displaying a prominent notice in the app. Your continued use of TaxFlow after any changes constitutes your acceptance of the updated policy.

10. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

• Email: privacy@taxflow.app
• Mail: VonderLinden Group LLC, 5811 Jackson St, Philadelphia, PA 19135