Privacy Policy

Your tax and financial data stays in your browser. Documents are read on your device, results are computed on your device, and your files, amounts, and share counts are not sent to our servers unless you explicitly choose an AI feature. We run the smallest server side we can: sign-in, purchases, price lookups, and anonymous product analytics.

The only holdings data sent automatically is your ticker symbols, to look up prices.

Everything you import or type about your finances: brokerage files, W-2s, paystubs, share lots, income, and every calculated result. It lives in your browser's local storage. We cannot see it, and it is not transmitted when the app does its math. Backups you download from Settings are files on your machine, under your control.

Your account: the email address you sign in with, and sign-in records, held by our authentication provider (Supabase). Your purchases: which plan years you own and a Stripe customer reference. That is the whole list; there is no server-side copy of your tax data.

To show prices, the app sends the ticker symbols you hold to our server, which looks them up from Yahoo Finance.

Only the symbols and a date range are sent, never your share counts or amounts. The request is not tied to your account.

Searching for a ticker sends the text you type the same way.

If you ask for a company's acquisition terms, that one ticker symbol is sent to Anthropic while you are signed in.

Payments are processed by Stripe. Your card details go to Stripe, not to us. We receive confirmation of the purchase and a customer reference so we can honor your plan and refunds.

If a file cannot be read on your device, you can choose Read with AI. Nothing is sent until you choose it. When you do: Screenshots and scanned PDFs are sent as full images without masking. Document text goes to our server with SSNs and account numbers masked. One-time extraction by Claude.

Not used for training. Anthropic retains API inputs for up to 30 days, then deletes them.

We use PostHog to count anonymous product events (for example, that a calculation ran, or which of our pages was opened) so we can tell what is working. It runs without cookies, keeping an anonymous id in your browser's storage. Autocapture is off, session recording is off, and URLs are stripped of their query and fragment before sending, because scenario links can carry financial inputs there. Analytics events never include your tax numbers.

If you arrive from one of our ads or links, we keep a short label for where the visit came from (for example, "google" and the name we gave the campaign) so we can tell which ones are worth running. We do not keep ad click IDs or search terms.

If the app hits an error, a technical report (the error message and where in the code it happened, with URLs stripped the same way) can be sent to us so we can fix it. Crash reports never include your files or tax data.

Our server passes these reports to Sentry so we are told about them. Your browser never contacts Sentry.

We email you a one-click sign-in link when you sign in, and Stripe emails your purchase receipt. If you write to support we will have that correspondence. We do not send marketing email.

We never sell your data. The service providers that process limited data for us: Supabase (sign-in), Stripe (payments), PostHog (anonymous analytics), Anthropic (only the AI features you choose to use), Yahoo Finance (price lookups, ticker symbols only), Sentry (crash reports), and Vercel (hosting). Each receives only what its job requires.

Your local data is yours: the app's Settings page can clear it, and clearing browser storage removes it entirely. To delete your account records (email and purchase history), email us and we will remove them, keeping only what payment law requires Stripe to retain.

Material changes to this policy will be noted on this page with a new date. Questions: kyle@pretaxed.com. See also the Terms of Service.