Privacy Policy

Last Updated: March 13, 2026 | Effective Date: March 13, 2026

Agentic Tax Solutions LLC (“AgentTax,” “we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy describes how we collect, use, disclose, retain, and protect your personal information when you use our platform, API, SDKs, website, and related services (collectively, the “Service”).

This Privacy Policy applies to information we collect through the Service and does not apply to information collected through other sources unless specifically stated. This Privacy Policy, together with our Terms of Service (available at agenttax.io/terms) and Disclaimer (available at agenttax.io/disclaimer), governs your use of the Service.

By accessing or using the Service, you acknowledge that you have read, understood, and agree to the collection and use of your information as described in this Privacy Policy. If you do not agree, please do not use the Service.

1. Information We Collect

1.1 Account Information

When you create an account, we collect your email address, entity name, and any organization information you provide (such as company name, state of incorporation, and estimated transaction volume). If you are registering on behalf of an organization, we may also collect your name and role.

1.2 Transaction Data

When you use the API, we collect the data you submit in API requests, including transaction amounts, jurisdictions, asset details, trade information, withholding parameters, and agent identifiers. This data is necessary to provide tax calculations and compliance tracking services.

1.3 Usage Data

We automatically collect technical and usage data, including API call counts, request timestamps, endpoint usage patterns, error logs, and basic request metadata (IP address, user agent, HTTP headers) for the purposes of rate limiting, billing, security monitoring, and service improvement.

1.4 Payment Information

Payment processing is handled by Stripe, Inc. (“Stripe”). We do not store your credit card numbers, bank account numbers, or other sensitive payment credentials on our servers. We receive only limited payment information from Stripe (such as the last four digits of your card and billing address) for record-keeping and customer support purposes. Stripe’s privacy policy (available at stripe.com/privacy) governs their handling of your payment data.

1.5 Communications

If you contact us via email or support channels, we collect the content of your communications and any information you choose to provide.

1.6 Information We Do NOT Collect

We do not collect Social Security numbers, tax identification numbers (TINs), bank account details, or other sensitive financial identifiers through the API. The Service is designed to calculate tax obligations based on transaction data you provide, without requiring personally identifiable taxpayer information.

2. How We Use Your Information

We use the information we collect for the following purposes and legal bases:

We will not use your personal information for purposes materially different from those described above without providing you notice and, where required, obtaining your consent.

3. How We Share Your Information

We do not sell your personal information or transaction data. We do not rent, trade, or otherwise make available your personal information to third parties for their marketing purposes. We may share information only in the following limited circumstances:

3.1 Service Providers (Sub-Processors)

We use the following third-party service providers to operate the Service. These providers process data on our behalf under appropriate data processing agreements:

We will provide you with at least thirty (30) days’ notice before adding any new sub-processor that will process your personal data, allowing you the opportunity to object.

3.2 Legal Requirements

We may disclose your information if required to do so by law, regulation, legal process, subpoena, court order, or governmental request, or when we believe in good faith that disclosure is reasonably necessary to protect the rights, property, or safety of AgentTax, our users, or the public.

3.3 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your information may be transferred as part of the transaction. We will notify you via email and/or a prominent notice on our website of any change in ownership or uses of your personal information, as well as any choices you may have.

3.4 With Your Consent

We may share your information with third parties when you have given us your explicit consent to do so.

4. Data Retention

We retain your information for as long as necessary to fulfill the purposes described in this Privacy Policy:

• Account Information: Retained for as long as your account is active and for a reasonable period thereafter to allow for reactivation or comply with legal obligations.
• Transaction Data: Tax transaction records are retained for a minimum of seven (7) years to support tax compliance requirements and audit obligations. This retention period aligns with IRS record-keeping recommendations.
• Usage Data: Retained for up to twenty-four (24) months for operational purposes, then aggregated and anonymized.
• Communications: Retained for as long as necessary to resolve your inquiry and for a reasonable period thereafter.

You may request deletion of your account and associated data by contacting us at Beardsley@agenttax.io, subject to our legal retention obligations. We will respond to deletion requests within thirty (30) days.

5. Data Security

We implement appropriate technical and organizational measures to protect your data, including:

• Encryption in transit using TLS 1.2 or higher for all API communications
• Encryption at rest for stored data
• Hashed API keys and session tokens using SHA-256
• Role-based access controls limiting employee access to personal data
• Regular security assessments and vulnerability scanning
• Secure development practices including code review and dependency monitoring

However, no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your API keys and account credentials.

6. Data Breach Notification

In the event of a data breach that affects your personal information, we will: (a) notify affected users via email within seventy-two (72) hours of becoming aware of the breach, to the extent feasible; (b) notify applicable regulatory authorities as required by law; and (c) provide information about the nature of the breach, the data affected, and the steps we are taking to address it.

7. Your Privacy Rights

Depending on your jurisdiction, you may have certain rights regarding your personal data. We honor these rights regardless of where you are located, to the extent commercially practicable:

7.1 General Rights

• Right to Access: You may request a copy of the personal information we hold about you.
• Right to Correction: You may request that we correct inaccurate or incomplete personal information.
• Right to Deletion: You may request that we delete your personal information, subject to legal retention requirements.
• Right to Data Portability: You may request your data in a structured, commonly used, machine-readable format (JSON or CSV).
• Right to Object: You may object to certain processing of your personal information based on legitimate interests.
• Right to Restrict Processing: You may request that we limit how we process your personal information in certain circumstances.

To exercise any of these rights, contact us at Beardsley@agenttax.io. We will respond to verified requests within thirty (30) days (or forty-five (45) days for CCPA requests, with the possibility of an extension as permitted by law). We will not discriminate against you for exercising your privacy rights.

7.2 California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (“CCPA”) as amended by the California Privacy Rights Act (“CPRA”):

• Categories of Personal Information Collected: Identifiers (email address, IP address); commercial information (transaction data, billing records); internet or electronic network activity (API usage, request metadata); and professional or employment-related information (company name, role).
• Categories Disclosed for a Business Purpose: We disclose identifiers and internet activity to our service providers (Vercel, Neon, Stripe) solely for the purpose of operating the Service.
• Categories Sold or Shared: We do not sell or share (as defined by the CCPA/CPRA) your personal information. We have not sold or shared personal information in the preceding twelve (12) months.
• Sensitive Personal Information: We do not collect sensitive personal information as defined by the CCPA/CPRA.

Your California Rights: You have the right to: (1) know what personal information we collect, use, disclose, and sell; (2) request deletion of your personal information; (3) opt-out of the sale or sharing of personal information (though we do not sell or share); (4) correct inaccurate personal information; (5) limit use of sensitive personal information (though we do not collect sensitive PI); and (6) non-discrimination for exercising your rights.

You may exercise your rights by contacting us at Beardsley@agenttax.io. You may also designate an authorized agent to make a request on your behalf, provided the agent has written authorization signed by you.

7.3 European Privacy Rights (GDPR)

If you are located in the European Economic Area (“EEA”), United Kingdom, or Switzerland, you have rights under the General Data Protection Regulation (“GDPR”) including the rights described in Section 7.1 above, plus:

• Right to Lodge a Complaint: You have the right to lodge a complaint with your local data protection supervisory authority.
• Right to Withdraw Consent: Where we process your data based on consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.

Our legal bases for processing are described in the table in Section 2 above. For questions about GDPR compliance, contact us at Beardsley@agenttax.io.

8. Cookies and Tracking Technologies

The AgentTax website and dashboard may use essential cookies for session management and authentication. We do not use advertising, tracking, or analytics cookies. The API does not use cookies.

If we add non-essential cookies in the future, we will update this policy and implement a cookie consent mechanism before deploying them.

We do not respond to Do Not Track (“DNT”) signals at this time, as there is no uniform standard for DNT compliance. However, because we do not use tracking or advertising cookies, our practices are consistent with the intent of DNT signals.

9. International Data Transfers

The Service is hosted in the United States. If you access the Service from outside the United States, your data will be transferred to and processed in the United States.

For transfers of personal data from the EEA, UK, or Switzerland to the United States, we rely on: (a) the EU-U.S. Data Privacy Framework and/or its UK and Swiss extensions, to the extent applicable; (b) Standard Contractual Clauses (“SCCs”) as approved by the European Commission; or (c) other valid transfer mechanisms as may be recognized under applicable data protection law. We ensure that any third-party service providers who process personal data outside the EEA maintain adequate data protection safeguards.

If you have questions about international data transfers, please contact us at Beardsley@agenttax.io.

10. Children’s Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to promptly delete such information. If you believe we have collected information from a child under 18, please contact us at Beardsley@agenttax.io.

11. Links to Third-Party Services

The Service may contain links to third-party websites or services that are not operated by us. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services. We strongly advise you to review the privacy policy of every site you visit.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by: (a) posting the updated Privacy Policy on our website with a new “Last Updated” date; and (b) sending an email notification to the address associated with your account at least thirty (30) days before the changes take effect.

We will update this Privacy Policy at least annually, even if no material changes have occurred, to ensure it remains current.

Your continued use of the Service after the effective date of the updated Privacy Policy constitutes your acceptance of the changes. If you do not agree to the updated policy, you must stop using the Service.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Agentic Tax Solutions LLC
Privacy Inquiries: Beardsley@agenttax.io
Website: agenttax.io

For CCPA requests, please include “CCPA Request” in the subject line of your email. For GDPR requests, please include “GDPR Request” in the subject line.