1. Introduction

FileJoy ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our tax preparation service.

2. Information We Collect

Personal Information

Name, email address, and contact information
Social Security Numbers (encrypted with AES-256)
Tax identification numbers (EIN, TIN)
Financial information (income, expenses, withholdings)
Employment information from W-2s and 1099s
Business information for self-employment

Technical Information

IP address and browser type
Device information
Usage patterns and session data

3. How We Protect Your Data

Security Measures: We implement industry-standard security measures to protect your sensitive information.

Encryption: SSNs and other sensitive data are encrypted using AES-256-CBC encryption
Secure Storage: Documents are stored in encrypted AWS S3 buckets
Access Controls: Data is only accessible to you and authorized systems
Session Security: Sessions are secured with HttpOnly, Secure, and SameSite cookies
Rate Limiting: Login attempts are rate-limited to prevent brute force attacks
Audit Logging: Security-sensitive operations are logged for monitoring

4. How We Use Your Information

To provide and maintain our tax preparation service
To calculate your tax liability and potential refunds
To extract data from uploaded tax documents
To improve our service and user experience
To communicate with you about your account
To comply with legal obligations

5. Data Sharing

We do not sell your personal information. We may share your information only in the following circumstances:

Service Providers: With third-party services that help us operate (e.g., cloud hosting, payment processing)
Legal Requirements: When required by law or to protect our rights
With Your Consent: When you explicitly authorize us to share

6. Third-Party Services

We use the following third-party services:

MongoDB Atlas: Database hosting (encrypted at rest)
AWS S3: Document storage (server-side encryption)
OpenAI: Document text extraction (data not used for training)
Stripe: Payment processing (PCI compliant)
Sentry: Error monitoring (PII is scrubbed)

7. Data Retention

We retain your tax data for as long as your account is active or as needed to provide you services. Tax records are kept for 7 years to comply with IRS recommendations. You may request deletion of your account and data at any time.

8. Your Rights

Depending on your location, you may have the following rights:

Access: Request a copy of your personal data
Correction: Request correction of inaccurate data
Deletion: Request deletion of your data
Portability: Request a portable copy of your data
Opt-out: Opt out of marketing communications

9. California Privacy Rights (CCPA)

California residents have additional rights under the California Consumer Privacy Act, including the right to know what personal information is collected and the right to request deletion. We do not sell personal information to third parties.

10. Children's Privacy

Our Service is not intended for use by children under 18. We do not knowingly collect personal information from children under 18.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us at: privacy@filejoy.app