PRIVACY POLICY

Last updated: June 2026

1. Who We Are

ClickTaxEasy ("we", "us", "our") is a tax education and tools platform for US-based 1099 workers. Our website is clicktaxeasy.com.

2. What Information We Collect

We collect the following information when you use ClickTaxEasy:

• Account information: Email address and password (encrypted) when you create an account
• Profile information: Worker type, filing status, state, and other tax-related preferences you choose to provide
• Income and expense data: Monthly income and expense figures you enter into the app
• Usage data: Number of questions asked, pages visited, features used
• Mileage logs: Trip dates, miles, and locations you enter manually

We do NOT collect your Social Security Number, bank account information, or credit card numbers (payments are handled by Lemon Squeezy).

3. How We Use Your Information

• To provide tax calculations, estimates, and educational content personalized to your situation
• To send quarterly tax deadline reminder emails (Pro users only)
• To improve the accuracy and relevance of our AI tax assistant
• To communicate with you about your account

4. How We Store and Protect Your Data

We have implemented multiple layers of security to protect your data:

Encryption & Transport Security

• All data is transmitted over HTTPS/TLS encryption
• HSTS (HTTP Strict Transport Security) enforced — browsers always use secure connections
• Passwords are hashed using bcrypt — we never store plain-text passwords

Database Security

• Row Level Security (RLS) enabled on all database tables — your data is only accessible by you, enforced at the database level
• Database hosted on Supabase (AWS infrastructure) with enterprise-grade security
• All API keys stored as environment variables — never exposed in code
• Service keys used only in server-side functions, never in the browser

Application Security

• Content Security Policy (CSP) headers — prevents cross-site scripting (XSS) attacks
• X-Frame-Options: DENY — prevents clickjacking attacks
• X-Content-Type-Options: nosniff — prevents MIME type sniffing
• Rate limiting on all API endpoints — prevents brute force and spam attacks
• Supabase built-in brute force protection on authentication

Data Backup

• Daily automatic backups of all user data
• Point-in-time recovery capability
• Geographic redundancy via AWS infrastructure

5. Who We Share Your Data With

We do NOT sell your personal data. We share data only with:

• Supabase, database hosting (AWS infrastructure)
• Vercel, website hosting and serverless functions
• Groq — AI processing for tax questions. Your questions are processed to generate answers but are not stored by Groq, not used for AI training, and not linked to your identity
• Brevo, transactional email delivery (deadline reminders only)
• Lemon Squeezy, payment processing (we never see your card details)

6. Your Rights

You have the right to:

• Access all data we hold about you
• Correct inaccurate data in your profile at any time
• Delete your account and all associated data directly from the app (Profile page)
• Opt out of reminder emails at any time from your profile settings
• Download your tax summary as PDF directly from the app

7. Data Retention

We retain your data for as long as your account is active. If you delete your account, all personal data is permanently deleted within 30 days. Anonymized, aggregated usage data may be retained for product improvement.

8. Children's Privacy

ClickTaxEasy is not intended for users under 18 years of age. We do not knowingly collect data from minors.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you by email or by posting a notice on the website. Continued use of the service after changes constitutes acceptance of the updated policy.

10. Contact Us

For any privacy-related questions or requests, contact us at: hello@clicktaxeasy.com

ClickTaxEasy provides tax education and estimates only. We are not a licensed CPA firm and this platform does not constitute professional tax advice.