Privacy Policy
Learn how Docuzard collects, uses, and protects your personal information.
Table of Contents
Docuzard Inc. ("Docuzard," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Docuzard Pro Portal ("Service"), including our website, mobile applications, and related services.
By using our Service, you consent to the data practices described in this policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the Service.
1. Data Collection
1.1 Information You Provide
We collect information you voluntarily provide when using our Service:
Account Information (via Google Authentication)
- Full name
- Email address
- Google profile picture (optional)
- Google account identifier
Professional Information
- Business/Firm name and address
- EFIN (Electronic Filing Identification Number)
- PTIN (Preparer Tax Identification Number)
- Phone number
- Professional credentials and certifications
Payment Information (via Stripe)
- Billing name and address
- Credit/debit card details (processed and stored by Stripe, not us)
- Transaction history
Client Data (You as Data Controller)
When you input your clients' tax information, you are acting as the Data Controller for that information. We act solely as a Data Processor on your behalf. Client data includes names, SSNs, income information, and other tax-related PII.
1.2 Information Collected Automatically
- Device Information: Browser type, operating system, device identifiers.
- Log Data: IP address, access times, pages viewed, referring URLs.
- Usage Data: Features used, actions taken, time spent on pages.
- Location Data: General geographic location based on IP address.
2. How We Use Your Data
We use the information we collect to:
- Provide Services: Process tax returns, manage client records, enable e-filing.
- Account Management: Create and manage your account, authenticate access.
- Payment Processing: Process subscription fees and credit purchases via Stripe.
- Communication: Send transactional emails, security alerts, and service updates.
- Support: Respond to inquiries and provide customer support.
- Improvement: Analyze usage patterns to improve our Service.
- Security: Detect and prevent fraud, abuse, and security threats.
- Legal Compliance: Meet regulatory requirements and respond to legal requests.
We do NOT sell your personal information to third parties for marketing purposes. We do NOT use client tax data for any purpose other than providing our Service to you.
3. Third-Party Sharing
We share your information with the following categories of third parties:
3.1 Service Providers
Google Cloud Platform / Firebase
Infrastructure & Authentication
Hosts our application, databases, and provides authentication services. Data is stored in secure, SOC 2 compliant data centers.
Stripe
Payment Processing
Processes all payment transactions. Stripe is PCI DSS Level 1 certified. We do not store your full credit card numbers on our servers.
CrossLink
IRS E-Filing Transmission
Transmits completed tax returns to the IRS. Tax return data is encrypted in transit and processed in accordance with IRS security requirements.
DocuSign
Electronic Signatures
Provides electronic signature services for engagement letters and client consent forms. DocuSign is ISO 27001 and SOC 2 Type II certified.
SendGrid
Email Delivery
Sends transactional emails including password resets, notifications, and receipts.
3.2 Legal Requirements
We may disclose your information when required to:
- Comply with applicable laws, regulations, or legal processes.
- Respond to lawful requests from government authorities (including IRS).
- Enforce our Terms of Service and other agreements.
- Protect our rights, privacy, safety, or property.
- Investigate potential violations of our policies.
3.3 Business Transfers
In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you via email and/or prominent notice on our Service of any change in ownership.
4. Data Retention
We retain your data for the following periods:
| Data Type | Retention Period | Reason |
|---|---|---|
| Tax Return Data | 7 years | IRS regulatory requirement |
| Account Information | Duration of account + 90 days | Service provision |
| Payment Records | 7 years | Financial record-keeping |
| Communication Logs | 3 years | Customer support |
| Usage Analytics | 2 years | Service improvement |
Upon account termination, you have 90 days to export your data. After this period, non-required data is permanently deleted from our systems.
5. Data Security
We implement industry-standard security measures to protect your data:
Encryption
- • 256-bit TLS for data in transit
- • AES-256 for data at rest
- • End-to-end encryption for sensitive fields
Access Control
- • Multi-factor authentication (MFA)
- • Role-based access controls
- • Session timeout policies
Monitoring
- • 24/7 security monitoring
- • Intrusion detection systems
- • Comprehensive audit logging
Compliance
- • SOC 2 Type II certified
- • IRS Publication 4557 compliant
- • Annual penetration testing
While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.
6. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you.
- Correction: Request correction of inaccurate or incomplete data.
- Deletion: Request deletion of your personal data (subject to legal retention requirements).
- Portability: Receive your data in a structured, commonly used format.
- Objection: Object to certain types of data processing.
- Restriction: Request restriction of processing in certain circumstances.
- Withdraw Consent: Withdraw consent where processing is based on consent.
California Privacy Rights (CCPA)
California residents have additional rights under the California Consumer Privacy Act:
- Right to know what personal information is collected and how it's used.
- Right to delete personal information (with certain exceptions).
- Right to opt-out of the "sale" of personal information (we do not sell personal data).
- Right to non-discrimination for exercising your privacy rights.
To exercise any of these rights, please contact us at privacy@docuzard.com or use the data management tools in your account settings.
8. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Privacy Team:
Docuzard Privacy Team
Email: privacy@docuzard.com
Address: 123 Tax Professional Way, Suite 400, Wilmington, DE 19801
Phone: (800) 555-TAX1
We will respond to your request within 30 days. For CCPA requests, we will verify your identity before processing your request.
Policy Updates
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. We encourage you to review this Privacy Policy periodically.