Privacy Policy
Last updated: May 5, 2026
Note: This policy template is aligned with PIPEDA and GLBA Safeguards Rule requirements. Have legal counsel review before publishing.
Information We Collect
We collect information you provide directly (name, email, firm details), information generated through your use of the Service (usage logs, document metadata), and technical information (IP address, browser type, device identifiers). We do not read or process the contents of documents uploaded by your clients.
How We Use Your Information
We use your information to provide and improve the Service, send transactional communications, maintain security and audit records, comply with legal obligations, and resolve disputes. We do not sell personal information to third parties.
Data Residency
Files are stored in Cloudflare R2 (eastern North America) and the database runs on Neon in US East (N. Virginia). idutax does not currently offer storage in Canada, the UK or the EU. If that matters for your firm, ask us before you sign up. For UK and EU firms this means client data is transferred outside the UK and EU; contact us for details of the safeguards we rely on and for a data processing agreement.
Your Rights (PIPEDA)
Under PIPEDA, you have the right to: access your personal information, correct inaccurate information, withdraw consent for certain uses, and request deletion of your account and associated data. To exercise these rights, use Settings → Data & Privacy or contact privacy@idutax.com.
Data Retention
Account data is retained for the duration of your subscription plus 30 days following cancellation. Audit logs are retained for 7 years to support tax compliance requirements. After the retention period, data is permanently and securely deleted.
Contact
Privacy inquiries: privacy@idutax.com. For data subject requests, use the in-app export tool or contact us directly.