TaxCue Privacy Policy

01Information you give us

Almost everything TaxCue holds is information you enter or capture yourself.

• Account information. Your email address and password. Your password is stored by our authentication provider only as a one-way hash.
• Business profile. Business name, legal entity form, how the business is taxed (including the owner of a disregarded entity), state, industry, business activities, tax year, accounting method, whether the business has an applicable financial statement, and the language you want answers in.
• Photos and documents. Photos of items you’re considering, receipt photos, and supporting documents you add to a Tax File — for example a lease agreement, proof of payment, a listing, messages or a photo of a serial number — with any note you add (up to 500 characters).
• Purchase and tax records. The item’s identity (brand, model, visible identifiers, observed price), what you type to describe it, how you’re acquiring it (new, used or lease), prices, sales tax, dates, business-use percentage and description, business purpose, seller type, lease terms, serial number, the treatments you choose, and the analyses TaxCue produces. Tax Files keep an unchangeable snapshot of each analysis.
• Receipt details. What TaxCue reads from a receipt image: merchant, date, subtotal, tax, total, line items and — when the receipt prints them — the payment method, card network and last four digits of the card.
• Private-sale purchase records. When you record a used purchase from a private seller: the buyer (business) name, the seller’s name and contact details you enter, the amount, payment method and item details, and, if the seller confirms the sale on your device, the seller’s typed name, finger signature and attestation. Only enter a seller’s details you’re allowed to share.
• Vehicle information. A vehicle identification number (VIN) and the vehicle facts decoded from it, if TaxCue needs to verify a vehicle.
• Product links. A link you paste is read for words in its address to help identify the item. TaxCue never opens the link and doesn’t store it.
• Ask TaxCue. The messages you send, TaxCue’s answers, the details of the situation you’re asking about — which can include a seller’s name, prices or an income estimate you give — and any purchase you ask TaxCue to prepare.

Voice input is not part of this version of TaxCue. The microphone feature is turned off, no audio is recorded, and no audio is sent anywhere. If we turn it on, we’ll update this policy first.

02Information collected automatically

• Account identifier. A random user ID created when you sign up. It also identifies your subscription with our subscription provider.
• Sessions. Sign-in tokens are stored in your device’s Keychain. Our authentication provider records the IP address and browser or device identifier of each sign-in session so you stay signed in.
• Subscription status. Whether you have TaxCue Pro, the store and product, the period type, and purchase, expiry, grace-period, billing-issue and refund dates, as reported by the App Store through our subscription provider. We never receive your payment card or Apple Account billing details.
• Activity records. A log of actions in your account — what was done, to which record, by which user, and metadata such as field names, states, provider names and hashes. It contains no amounts and no text you typed. You can see these records in your Tax Files and in your data export.
• Technical data. Our servers record the request method, the path requested (which contains record identifiers), the result, timing and a request identifier, so we can run and fix the service. The TaxCue API doesn’t log the contents of what you send, doesn’t log query strings and doesn’t log your IP address. Our hosting, authentication and subscription providers process IP addresses to deliver the service and protect it from abuse.

03How we use information

We use your information to run TaxCue: to create and secure your account; identify items and read receipts; apply tax rules to your purchase; answer your questions using official sources, your business profile and your Tax Files; keep your records and evidence; provide TaxCue Pro and restore purchases; let you export or delete your data; send password-reset emails; and keep the service secure and working.

We don’t use advertising or analytics SDKs, don’t track you across other companies’ apps or websites, don’t ask for location access — location data is removed from photos on your device and again on our server — and don’t sell or share your personal information for advertising.

AI processing

TaxCue uses Anthropic as its AI provider. To produce a result, TaxCue sends only what that request needs: item and receipt images, the text read from a receipt, the facts of the purchase, the business profile fields that affect the answer (including your business name), the names and summaries of relevant Tax Files, and your Ask TaxCue messages. Your email address and user ID are never sent with these requests. Your receipts, photos and documents are not sent when you chat with Ask TaxCue.

What the AI provider does with it. Anthropic states that inputs and outputs from its commercial and API products are not used to train its models by default, unless the customer explicitly opts in to that use or submits feedback that qualifies for it. TaxCue does neither — it uses the standard API and submits no feedback for training. Anthropic also states that inputs and outputs of standard API requests are generally deleted from its backend systems within 30 days, and that different contractual terms, enforcement of its usage policies or legal requirements can change how long data is kept. We can’t promise that data sent to an AI provider is never retained: it is held by the provider for a period and handled under that provider’s terms.

TaxCue provides tax information and organizes records. It does not provide tax, legal or accounting advice.

04Service providers

We share information only with the providers that process it for us so TaxCue can work. These are the providers active in the version of TaxCue being released.

• Supabase

  United States — West US (Oregon)

  Database, sign-in and private file storage. Receives everything TaxCue stores for you, your email address and password hash, and the IP address and browser or device identifier recorded with your sign-in sessions.

• Anthropic

  AI provider

  Recognizes item photos, reads receipts, produces tax explanations and answers Ask TaxCue questions. Receives the images, receipt text, purchase facts, business profile fields including your business name, summaries of relevant Tax Files and your messages — but not your email address or user ID.

• RevenueCat

  Subscriptions

  Manages TaxCue Pro entitlements and validates App Store purchases. Receives your user ID and your App Store purchase and subscription information.

• Apple

  App Store

  Takes payment and bills the subscription. You enter payment details in Apple’s own sheet; they never reach TaxCue. Apple’s handling of that information is covered by Apple’s privacy policy.

• National Highway Traffic Safety Administration (NHTSA)

  U.S. government, public API

  Decodes a vehicle identification number. Receives the VIN and nothing else.

• Render

  United States — Oregon

  Hosts the TaxCue API. Handles all API traffic in transit and keeps platform request logs, which can include your IP address.

• Resend

  Transactional email delivery — United States

  Sends password-reset and other account emails generated through Supabase Auth. Receives the recipient email address and the contents of the email, including a one-time reset code. TaxCue has open tracking and click tracking disabled for these account emails. Resend stores customer data in the United States.

TaxCue contains no advertising, analytics, attribution or crash-reporting services. We may also disclose information if required by law, to protect rights and safety, or in connection with a merger, acquisition or sale of assets, in which case this policy continues to apply to the information transferred.

05Where your data is stored and how it’s protected

Your account, records, photos and documents are stored with Supabase in the United States (West US, Oregon). The TaxCue API runs on Render in Oregon. Account emails are delivered by Resend, which stores customer data in the United States. Traffic between the app, our servers and our providers is encrypted in transit with HTTPS. Photos and documents are held in private storage, not on a public address, and are shown to you through links that stop working after five minutes. Database access rules limit every record to the account that owns it. No system is perfectly secure.

06How long we keep information, and how to delete it

TaxCue is a record-keeping tool, so we keep your account and records until you delete them. There is no automatic deletion and no scheduled purge.

• Delete a conversation. You can delete a single Ask TaxCue conversation at any time.
• Delete all data (Profile → Your data) removes your business profile, purchase checks, Tax Files, receipts, photos, documents, private-sale records, conversations, prepared transactions and activity records, including every stored file. Your sign-in and your subscription stay.
• Delete account (Profile → Your data, and also on the subscription screen) removes all of the above plus your sign-in with our authentication provider — email address, password hash, identities and sessions — your subscription entitlements and any complimentary grant, your customer record at our subscription provider, and the saved session, preferences and cached photos and PDFs on your device.

What can remain after you delete your account

• Sign-in security log

  Supabase

  Our authentication provider keeps its own record of authentication events — sign-up, sign-in, password recovery and account deletion — with the email address, user ID, timestamp and IP address. These entries are not removed when the account is deleted, and TaxCue never reads them. We have not set a retention period for this log.

• Subscription webhook records

  TaxCue

  An event identifier, event type, environment and timestamps are kept so a repeated subscription notification isn’t processed twice. Your user ID is removed from these records when you delete your account. We have not set a purge period for them.

• Backups

  Supabase

  Deleted data can persist in database backups until those backups expire. We don’t currently publish a backup retention period.

• AI provider request data

  Anthropic

  Requests already sent to Anthropic are held and deleted on Anthropic’s schedule, described in section 3. Deleting your TaxCue account does not delete them earlier.

• Server logs

  Render

  Platform request logs held by our hosting provider are not deleted with your account. We don’t currently publish a log retention period.

• RevenueCat customer record

  RevenueCat

  When you delete your account, TaxCue asks RevenueCat to delete your customer record. RevenueCat processes deletions asynchronously, so it may not be immediate.

• Account email records

  Resend

  Our email delivery provider processes the account emails it has sent for as long as our service agreement with it is active, and its data processing agreement provides for deletion of customer data within 90 days after that agreement ends. Deleting your TaxCue account doesn’t by itself remove an already-sent email from its records.

• Apple purchase history

  Apple

  Apple keeps its own record of your purchases and subscriptions under Apple’s policies. TaxCue can’t delete it.

Deleting your TaxCue account doesn’t cancel an App Store subscription. Cancel it in your Apple Account subscription settings. The app reminds you of this before you delete.

07Your choices and rights

• Access and export. Profile → Your data → Export your data gives you a copy of your profile, checks, Tax Files, conversations and activity records. Images are included as links that expire after five minutes.
• Correction. Edit your business profile and Tax File details in the app.
• Deletion. As described in section 6, in the app, or by emailing us.
• Permissions. Camera and photo library access are optional and can be turned off in iOS Settings. The features that use them won’t work without them.
• Password. Reset it from the sign-in screen with a one-time code sent to your email address.

Depending on where you live, you may have rights under your state’s privacy law to access, correct, delete or receive a copy of your personal information. Email us at hello@sereinventures.com and we’ll respond as applicable law requires. We may need to confirm that the request came from you.

08Children

TaxCue is made for business owners and isn’t directed to children. You must be 18 or older to use TaxCue. We don’t knowingly collect personal information from children.

09Where TaxCue applies

TaxCue is built for business owners in the United States. Its tax coverage is U.S. federal rules and California state rules. It doesn’t cover other states or countries.

10Changes to this policy

We’ll post changes on this page and update the effective date above. If a change is material, we’ll tell you in the app or by email before it takes effect.

11Contact

Serein Ventures LLC · hello@sereinventures.com. For help with the app, subscriptions or a data request, see TaxCue Support.