INTRODUCTION

Tax Seeds Inc d/b/a TaxZero Club ("Company," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our tax planning software application (the "Service").

Please read this Privacy Policy carefully. By accessing or using the Service, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the Service.

This Privacy Policy is incorporated into and subject to our Terms of Service.

1. INFORMATION WE COLLECT

We collect information that you provide directly to us, information we obtain automatically when you use the Service, and information from third-party sources.

1.1 Information You Provide to Us

• Account Information:
• Full name
• Email address
• Phone number
• Mailing address
• Username and password
• Company name (for business accounts)
• Payment information (credit card details, billing address)
• Tax and Financial Information:
• Social Security Number or Tax Identification Number
• Income information (W-2s, 1099s, K-1s, etc.)
• Employment information
• Investment and asset information
• Deduction and credit information
• Prior year tax returns
• Dependent information
• Business financial records
• Any other information you choose to provide for tax planning purposes
• Communications:
• Information in emails, chats, or other communications with us
• Customer support inquiries and responses
• Survey responses and feedback

1.2 Information Collected Automatically

• Usage Data:
• Pages or features accessed
• Time and date of visits
• Time spent on pages
• Click-stream data
• Search queries within the Service
• Actions taken within the Service
• Device Information:
• IP address
• Browser type and version
• Operating system
• Device type and identifiers
• Screen resolution
• Time zone settings
• Language preferences
• Location Information:
• General location based on IP address
• Precise location (only with your permission)
• Cookies and Similar Technologies:
• Session cookies
• Persistent cookies
• Web beacons
• Pixel tags
• Local storage
• Analytics identifiers

1.3 Information from Third-Party Sources

• Financial Institutions:
• Bank account information (with your authorization)
• Transaction history
• Account balances
• IRS and Tax Authorities:
• Transcript data (with your authorization)
• Filing status information
• Prior year return information
• Identity Verification Services:
• Identity verification data
• Credit header information (name, address, etc.)
• Fraud detection data
• Employer and Payroll Providers:
• W-2 information
• Payroll data
• Benefits information
• Social Media Platforms:
• Profile information (if you connect social accounts)
• Authentication data
• Data Aggregators:
• Publicly available information
• Marketing and analytics data

2. HOW WE USE YOUR INFORMATION

We use your information for the following purposes:

2.1 Service Provision

• To create and manage your account
• To process tax calculations and provide tax planning recommendations
• To provide customer support
• To communicate with you about your account and the Service
• To process payments and prevent fraud
• To authenticate your identity

2.2 Service Improvement

• To analyze usage patterns and trends
• To improve Service functionality and user experience
• To develop new features and services
• To conduct research and analytics
• To test and monitor the effectiveness of the Service
• To diagnose technical problems

2.3 Marketing and Communications

• To send you promotional materials (with your consent)
• To inform you about new features or services
• To send newsletters and educational content
• To conduct surveys and request feedback
• To deliver targeted advertising (where permitted)

2.4 Legal and Compliance

• To comply with legal obligations
• To respond to lawful requests from public authorities
• To protect our rights and property
• To prevent fraud and enhance security
• To enforce our Terms of Service
• To resolve disputes

3. HOW WE SHARE YOUR INFORMATION

We do not sell your personal information. We may share your information in the following circumstances:

3.1 Service Providers

We share information with third-party service providers who perform services on our behalf:

• Payment processors
• Cloud hosting providers
• Customer support platforms
• Email service providers
• Analytics providers
• Security and fraud prevention services
• Identity verification services

Service providers are contractually obligated to:

• Use information only for specified purposes
• Maintain appropriate security measures
• Comply with applicable privacy laws
• Not use information for their own purposes

3.2 Tax Authorities

We share information with the IRS and state/local tax authorities:

• As required by tax laws and regulations
• In response to lawful requests

3.3 Financial Institutions

With your authorization, we share information with:

• Banks for processing payments
• Payment processors for subscription payments
• Financial institutions for account verification

3.4 Tax Professionals

If you engage a tax professional through our Service:

• We share your information with your designated tax professional
• The tax professional has independent obligations to protect your information
• You control what information is shared with your tax professional

3.5 Business Transfers

In connection with any merger, sale of company assets, financing, acquisition, or restructuring:

• Your information may be transferred to the acquiring entity
• We will notify you before your information is transferred
• The acquiring entity will be bound by this Privacy Policy

3.6 Legal Requirements

We may disclose information when we believe in good faith that disclosure is necessary to:

• Comply with legal obligations (subpoenas, court orders, legal processes)
• Protect and defend our rights or property
• Prevent or investigate possible wrongdoing
• Protect the safety of users or the public
• Respond to government requests
• Enforce our Terms of Service

3.7 With Your Consent

We may share information with third parties when you:

• Explicitly consent to sharing
• Direct us to share information
• Choose to use third-party integrations

3.8 Aggregated or De-Identified Data

We may share aggregated or de-identified information that cannot reasonably be used to identify you:

• For research and analysis
• For industry benchmarking
• For marketing purposes
• With business partners

4. DATA SECURITY

4.1 Security Measures

We implement appropriate technical and organizational measures to protect your information:

Technical Safeguards:

• 256-bit SSL/TLS encryption for data in transit
• AES-256 encryption for data at rest
• Multi-factor authentication options
• Intrusion detection and prevention systems
• Regular security audits and penetration testing
• Secure development practices
• Network firewalls and access controls

Organizational Safeguards:

• Employee background checks
• Confidentiality agreements
• Security awareness training
• Access controls based on need-to-know
• Regular privacy and security assessments
• Incident response procedures
• Vendor security requirements

Physical Safeguards:

• Secure data centers with 24/7 monitoring
• Biometric access controls
• Video surveillance
• Environmental controls

4.2 Security Limitations

Despite our efforts, no security measures are perfect or impenetrable:

• No method of transmission over the Internet is 100% secure
• No method of electronic storage is completely secure
• We cannot guarantee absolute security of your information
• You are responsible for maintaining the security of your account credentials

4.3 Security Breach Notification

In the event of a data breach:

• We will investigate and assess the incident
• We will notify affected users as required by law
• We will notify appropriate regulatory authorities
• We will take steps to mitigate harm
• We will implement measures to prevent future incidents

5. DATA RETENTION

5.1 Retention Periods

We retain your information for as long as necessary to fulfill the purposes outlined in this Privacy Policy:

• Account Information:
• Retained while your account is active
• Retained for 7 years after account closure (IRS recordkeeping requirements)
• Tax Returns and Related Data:
• Retained for at least 7 years (IRS statute of limitations)
• May be retained longer as required by state law
• Payment Information:
• Retained as required for accounting and tax purposes
• Credit card numbers are not stored
• Communications:
• Retained for as long as reasonably necessary
• Customer support records retained for 3 years
• Marketing Data:
• Retained until you opt-out or request deletion
• Automatically purged after 3 years of inactivity

5.2 Legal Hold

We may retain information longer than specified retention periods when:

• Required by law or regulation
• Needed for pending litigation or investigations
• Necessary to protect legal rights
• Subject to legal hold requirements

5.3 Deletion

Upon expiration of retention periods:

• We will securely delete or anonymize information
• Deleted data cannot be recovered
• Backup copies may persist for a limited time

6. YOUR PRIVACY RIGHTS

6.1 Access and Correction

You have the right to:

• Access your personal information
• Review the information we hold about you
• Request copies of your information
• Correct inaccurate or incomplete information
• Update your account information

How to exercise: Log into your account or contact us at support@taxzeroclub.com

6.2 Deletion

You have the right to request deletion of your personal information, subject to:

• Legal recordkeeping requirements (7-year IRS requirement)
• Ongoing transaction completion
• Legal obligations and claims
• Security and fraud prevention

How to exercise: Submit a deletion request to support@taxzeroclub.com

6.3 Data Portability

You have the right to:

• Receive your information in a portable format
• Request transmission to another service
• Export your tax returns and data

How to exercise: Use export features in your account or contact support@taxzeroclub.com

6.4 Opt-Out of Marketing

You have the right to:

• Unsubscribe from marketing emails (click "unsubscribe")
• Opt-out of promotional communications
• Limit certain data processing for marketing

Note: You cannot opt-out of service-related communications (account notifications, security alerts, etc.)

6.5 Do Not Track

• Our Service does not currently respond to "Do Not Track" signals
• We do not track users across third-party websites
• Third-party services may have their own tracking practices

6.6 Cookie Management

You can control cookies through:

• Browser settings (block or delete cookies)
• Opt-out tools provided by advertising networks
• Privacy settings in your account

Note: Disabling cookies may limit Service functionality

7. CALIFORNIA PRIVACY RIGHTS (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

7.1 Right to Know

You have the right to request:

• Categories of personal information collected
• Specific pieces of personal information collected
• Categories of sources from which information is collected
• Business or commercial purposes for collecting information
• Categories of third parties with whom we share information

7.2 Right to Delete

You have the right to request deletion of personal information, subject to exceptions for:

• Completing transactions
• Legal compliance
• Security and fraud prevention
• Internal uses reasonably aligned with expectations

7.3 Right to Opt-Out of Sale

• We do not sell personal information
• If our practices change, we will provide opt-out mechanisms

7.4 Right to Non-Discrimination

You have the right to not receive discriminatory treatment for exercising CCPA rights:

• We will not deny services
• We will not charge different prices
• We will not provide different quality of service

7.5 Authorized Agents

You may designate an authorized agent to make requests on your behalf:

• Provide written authorization
• Agent must verify identity
• We may require direct confirmation from you

7.6 Exercising CCPA Rights

Submit requests to:

• Email: support@taxzeroclub.com
• Phone: 845 682 3504
• Online Form: Privacy Request at www.taxzeroclub.com

We will respond within 45 days (may extend to 90 days with notice)

7.7 Verification Process

To protect your information, we will verify your identity:

• Match information provided with our records
• May request additional information
• Degree of verification depends on sensitivity and risk

7.8 California Shine the Light Law

California residents may request information about disclosures for direct marketing purposes (once per year, free of charge).

8. EUROPEAN UNION DATA PROTECTION RIGHTS (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have rights under the General Data Protection Regulation (GDPR):

8.1 Legal Basis for Processing

We process your information based on:

• Contract Performance:
• Providing the Service you requested
• Processing payments
• Managing your account
• Legal Obligation:
• Tax filing requirements
• Recordkeeping obligations
• Regulatory compliance
• Legitimate Interests:
• Service improvement
• Fraud prevention
• Security measures
• Direct marketing (where permitted)
• Consent:
• Marketing communications (where required)
• Cookies and tracking (where required)
• Sensitive data processing

8.2 Your GDPR Rights

• Right to Access: Obtain confirmation of processing and access to your data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure ("Right to be Forgotten"): Request deletion, subject to legal exceptions
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests or direct marketing
• Right to Withdraw Consent: Withdraw consent at any time (doesn't affect prior processing)
• Right to Lodge a Complaint: File complaints with your local data protection authority

8.3 Data Transfers

We are based in the United States. If you are located outside the U.S., your information will be transferred to the U.S.:

• We use Standard Contractual Clauses
• We implement appropriate safeguards for international transfers
• We comply with applicable data transfer regulations

8.4 Data Protection Officer

Contact our Data Protection Officer:

• Email: support@taxzeroclub.com

8.5 Supervisory Authority

You may contact your local supervisory authority:

• EU residents: Your national data protection authority
• UK residents: Information Commissioner's Office (ICO)
• Swiss residents: Federal Data Protection and Information Commissioner (FDPIC)

9. CHILDREN'S PRIVACY

9.1 Age Restrictions

• The Service is not intended for children under 18
• We do not knowingly collect information from children under 18
• We do not knowingly allow children under 18 to create accounts

9.2 Parental Consent

If you are under 18:

• You must have parental consent to use the Service
• Your parent or guardian must accept the Terms of Service
• Your parent or guardian is responsible for your use

9.3 Dependent Information

Parents may provide information about dependent children for tax purposes:

• This information is collected from the parent/guardian
• We treat dependent information with the same privacy protections
• Parents control access to dependent information

9.4 Discovery of Children's Information

If we learn we have collected information from a child under 18 without parental consent:

• We will delete the information as quickly as possible
• We will terminate the account
• We will notify the parent if possible

Report concerns to: support@taxzeroclub.com

10. INTERNATIONAL DATA TRANSFERS

10.1 Cross-Border Transfers

Your information may be transferred to and processed in:

• The United States (where we are based)
• Countries where our service providers operate
• Countries with different data protection laws than your jurisdiction

10.2 Safeguards

We ensure appropriate safeguards for international transfers:

• Standard Contractual Clauses (SCCs)
• Adequacy decisions by the EU Commission
• Privacy Shield certification (where applicable)
• Binding Corporate Rules
• Contractual obligations with service providers

10.3 Your Consent

By using the Service, you consent to the transfer of your information to countries outside your jurisdiction, including the United States.

11. THIRD-PARTY SERVICES

11.1 Third-Party Links

The Service may contain links to third-party websites, applications, or services:

• We are not responsible for third-party privacy practices
• Third-party services have their own privacy policies
• We encourage you to read third-party privacy policies

11.2 Third-Party Integrations

The Service may integrate with third-party services:

• Payment Processors:
• We use Stripe for payment processing
• Payment information is handled by the payment processor
• We receive limited transaction information
• Cloud Service Providers:
• We use Amazon Web Services, Google Cloud, or Microsoft Azure
• Data is stored on secure cloud infrastructure
• Service providers are contractually bound to protect data
• Analytics Services:
• We use Google Analytics, or similar services
• Analytics providers may collect usage information
• You can opt-out of analytics tracking

11.3 Social Media

If you connect social media accounts:

• We may receive profile information
• Review social media platform privacy policies

11.4 Advertising Networks

We may use advertising networks:

• To display targeted advertisements
• To measure advertising effectiveness
• To build advertising profiles (with consent where required)

Opt-out options:

• Network Advertising Initiative: www.networkadvertising.org/choices
• Digital Advertising Alliance: www.aboutads.info/choices
• European Digital Advertising Alliance: www.youronlinechoices.eu

12. COOKIES AND TRACKING TECHNOLOGIES

12.1 What Are Cookies

Cookies are small text files placed on your device to store information.

12.2 Types of Cookies We Use

• Strictly Necessary Cookies:
• Required for Service functionality
• Cannot be disabled without affecting Service
• Functional Cookies:
• Remember your preferences
• Provide enhanced features
• Improve user experience
• Analytics Cookies:
• Collect usage statistics
• Help us understand how the Service is used
• Improve Service performance
• Advertising Cookies:
• Deliver relevant advertisements
• Measure ad effectiveness
• Build advertising profiles (with consent)

12.3 Cookie Duration

• Session Cookies:
• Temporary cookies
• Deleted when you close your browser
• Persistent Cookies:
• Remain on your device for a set period
• Used to remember preferences

12.4 Other Tracking Technologies

• Web Beacons (Pixels):
• Small graphic images
• Track page views and email opens
• Local Storage:
• Stores data locally on your device
• Provides offline functionality
• Software Development Kits (SDKs):
• Third-party code in mobile apps
• Collects usage and performance data

12.5 Managing Cookies

• Browser Controls:
• Accept or reject cookies
• Delete existing cookies
• Set preferences for future cookies
• Opt-Out Tools:
• Use privacy settings in your account
• Use industry opt-out tools
• Install browser privacy extensions
• Impact of Disabling Cookies:
• May limit Service functionality
• May prevent login or account access
• May reset preferences

13. CHANGES TO THIS PRIVACY POLICY

13.1 Updates

We may update this Privacy Policy from time to time to reflect:

• Changes in our practices
• Changes in applicable laws
• New features or services
• Feedback from users

13.2 Notice of Changes

We will notify you of material changes by:

• Posting the updated Privacy Policy on our website
• Sending email notification to your registered address
• Displaying a notice within the Service
• Updating the "Last Updated" date

13.3 Effective Date

Changes become effective:

• Immediately upon posting for non-material changes
• 30 days after notice for material changes
• As specified in the notice

13.4 Your Acceptance

Your continued use of the Service after changes become effective constitutes acceptance of the updated Privacy Policy.

13.5 Review Previous Versions

We maintain archives of prior Privacy Policy versions upon request.

14. CONTACT US

14.1 Privacy Questions

For questions about this Privacy Policy or our privacy practices:

• Email: privacy@taxzeroclub.com
• Phone: 845 682 3504
• Mail:
• TaxZeroClub / Tax Seeds Inc
• Attn: Privacy Officer
• 99 Wall St, #385
• New York, NY 10005

14.2 Data Protection Officer (GDPR)

• Email: privacy@taxzeroclub.com
• Mail:
• Tax Seeds Inc
• Attn: Data Protection Officer
• 99 Wall St, #385
• New York, NY 10005

14.3 Privacy Rights Requests

To exercise your privacy rights:

• Email: privacy@taxzeroclub.com
• Online Form: at taxzeroclub.com
• Phone: 845 682 3504

14.4 Response Time

We will respond to privacy requests:

• Within 30 days (GDPR)
• Within 45 days (CCPA)
• As required by applicable law

15. CALIFORNIA "SHINE THE LIGHT" DISCLOSURE

California Civil Code Section 1798.83 permits California residents to request information about disclosures of personal information to third parties for direct marketing purposes.

To make a request:

• Email: privacy@taxzeroclub.com
• Subject line: "California Shine the Light Request"
• Include your name, address, and email

We will provide:

• Categories of information disclosed
• Names and addresses of third parties
• Free of charge, once per calendar year

16. NEVADA RESIDENTS

Nevada residents have the right to opt-out of the sale of certain covered information.

• We do not currently sell covered information as defined under Nevada law
• If our practices change, we will update this Privacy Policy
• Nevada residents may still submit opt-out requests to privacy@taxzeroclub.com

17. YOUR CONSENT

By using the Service, you consent to:

• This Privacy Policy
• Our collection, use, and disclosure of your information as described
• The transfer of your information to the United States
• Our use of cookies and tracking technologies

If you do not agree, please do not use the Service.

TaxZero Club Effective Date: November 1, 2025

APPENDIX: DATA PROCESSING ADDENDUM (For Tax Professionals)

Tax professionals who use the Service to process client data are considered "Controllers" under GDPR and similar laws. We act as a "Processor" of client data.

This Data Processing Addendum establishes:

• Scope of Processing: We process client data only as instructed by you
• Security Measures: We maintain appropriate technical and organizational measures
• Sub-Processors: We may use sub-processors with appropriate safeguards
• Data Subject Rights: We assist you in responding to client rights requests
• Data Breach Notification: We notify you of any data breaches without undue delay
• Audit Rights: You may audit our compliance upon reasonable notice
• Data Return/Deletion: We return or delete client data upon termination
• International Transfers: We use Standard Contractual Clauses for transfers outside the EEA

For the complete Data Processing Addendum, contact legal@taxzeroclub.com