Policies

This privacy policy explains how TaxDome d/b/a as www.taxdome.com (collectively, «TaxDome», «we,» «us,» and «our») collects, uses, shares, and processes information about you. This privacy policy describes our practices concerning your Personal Data that we process when we provide you with TaxDome’s services, including the services available through our website at www.taxdome.com (“Website”), our mobile, browser, and desktop applications, and other services where we link this Policy (collectively the «Services»).

It also tells you about your privacy rights. Our Terms of Service provide further terms governing your use of the Services. Together, along with this Privacy Policy, our Terms of Service, Data Processing Addendum («DPA»), Business Associate Agreement («BAA»), Refund Policy, Spam Guidelines, Partner Program Terms, Referral Program Terms, and any other electronic or written agreement as applicable between or applicable to TaxDome and Customer, which govern the provision of the Service to you, as may be updated from time to time, form our «Agreement.» By accessing, downloading, registering with, purchasing from, or otherwise using our Services, you agree to the Agreement.

Please read this Privacy Policy and all other applicable terms of our Agreement carefully before you start to use the Services. By using the Services or signing up for an account, you accept and agree to be bound and abide by the Agreement and consent to and agree that we may collect, process, use, retain, disclose, and transfer your Personal Data as described in this Privacy Policy. If you do not agree to the full Agreement, you must not access or use the Services.

We reserve the right to change this Privacy Policy at any time. We will alert you that changes have been made by indicating the «last updated» date of the current version. We encourage you to review this Privacy Policy from time to time to make sure that you understand how any Personal Data we collect will be used.

1. Contact information

If you have any questions, comments, requests, or concerns related to this privacy policy or our privacy practices or if you would like to opt-out of future communications or exercise your other privacy-related rights, please feel free to contact us at:

General contact info:

[email protected]
+1 (833) 829-3663 / 833-TAXDOME
1501 S Greeley HWY #30 Cheyenne, WY 82007

TaxDome has appointed a data protection officer (DPO). You may contact TaxDome’s DPO Victor Radzinsky at [email protected].

The EU-GDPR representative: 

In compliance with Article 27 of the General Data Protection Regulation (GDPR), we have appointed Rickert Rechtsanwaltsgesellschaft mbH as our representative in the European Union for matters concerning data protection. 

TaxDome is committed to protecting your Personal Data. If you have any inquiries regarding the processing of your Personal Data by our company, you may contact our EU-GDPR Representative directly using the following details:

Name: Rickert Rechtsanwaltsgesellschaft mbH

– TaxDome Co. –

Address: Colmantstraße 15, 53115 Bonn, Germany

Email: [email protected]

Telephone: +49 (0) 228 – 74 89 80 

This appointment demonstrates TaxDome’s compliance with GDPR requirements and dedication to protecting Personal Data.

2. Applicability and eligibility

We need to process your Personal Data to operate our organization and provide you with our Services. By accepting the Agreement, you are confirming that you have read and understood these policies, including how and why we use your Personal Data. If you don’t want us to collect or process your Personal Data in the ways described in this Privacy Policy, you may not use the Services. Please note we are not responsible for the content or the privacy policies or practices of any third party organization or service that interact with our Services. We encourage you to read the privacy policies of these third-party organizations before using any of the Services.

3. Personal data we collect

As used herein, the term «Personal Data» means any information relating to an identified or identifiable natural person including information that specifically identifies an individual (such as a name, address, telephone number, mobile number, e-mail address, credit card number, ACH bank information, identification number, location data, or an online identifier) and information about that individual or his or her activities that is directly linked to the individual. Personal Data does not include aggregate data, which is data we collect about the use of the Services or about a group or category of services or users, from which an individual’s identity cannot be discerned and all other Personal Data has been removed (“Aggregate Data”). This Privacy Policy in no way restricts or limits our use of Aggregate Data.

We rely on a number of legal bases to process the information we receive about you from your use of the Services, including where:

1. you have consented to the processing;
2. the processing is necessary to perform the contractual obligations in order to provide the Services to you have requested, including those of our Terms of Service;
3. necessary to comply with a legal obligation, a court order, or to exercise or defend legal claims;
4. necessary to protect your vital interests, or those of others;
5. necessary in the public interest;
6. necessary for the purposes of our or a third party’s legitimate interests, such as those of visitors, users, or partners; and
7. you have expressly made the information public.

Where we process your information on the basis of consent, we will clearly obtain your opt-in. Where we process your information on the basis of legitimate interests, we do so where the processing is necessary for your legitimate interests or the legitimate interests of a third party, unless there is a good reason to protect your Personal Data which overrides those legitimate interests. 

Personal Data we collect about you includes:

Account Information: you may register for an account with us (a «Services Account»). We do not require you to register to use our Services. However, if you do register a Services Account, you will gain access to those areas and features of the Services that require registration. We will collect certain information about you in connection with your registration for a Services Account, which may include your name, contact information, a username and password.

To register for a Services Account, we will ask you to provide the following:

1. Your first and last name, email, company size, password, phone (optional), and social media contact information (optional).
2. You may optionally upload your photo.

To register your organization for a Services Account, we will ask you to provide the following: your organization name, team size, currency, logo (optional), preferred settings, team member’s email, and role.

Documents: Depending on the parts of the Service you use, we will process information inside documents you submit to TaxDome. For example, if you use certain AI features, we will process and collect the language in any document you submit to the AI feature. We use that information to provide the Services you request. For example, when you use the Services, you may use or interact with features that utilize machine learning, large language models, or other artificial intelligence capabilities, including chatbots or similar interactive features (“TaxDome AI”). Information generated by TaxDome AI may not be unique. When you use certain TaxDome AI features, they may perform functions or operations on your behalf. Please review their functionality and permissions closely. You may need to provide additional permissions to enable TaxDome AI to operate properly. Any data originating from the Google Workspace API is instead ingested only by TaxDome’s and our third-party providers’ artificial intelligence tools to deliver Services and to ensure safety, not for AI model training.

Payment Transaction Information: We  collect information related to purchases made through the Services. You may provide certain information to complete payments via the Services, including your credit or debit card number, card expiration date, CVV code, billing address, and ACH bank information (collectively, «Payment Information»), along with your name and billing, delivery and shipping address, to complete payment transactions through certain services.

We do not collect or maintain your payment transaction information; this information is handled for us by our Service Providers. You are subject to the privacy policies and terms and conditions of our Service Providers when utilizing a third-party service through our Services. Please review the Service Providers’ privacy policies and terms and conditions before using their services.

Task Information: When you use the Services, we collect certain information about your inputs into the Services which could contain Personal Data, such as comments, attachments, and daily stand-ups entered by users of the Services.

Correspondence Information: If you sign up, email us, subscribe to our blog, newsletters, or mailing lists, we keep your message, email address, and contact information to respond to your requests, provide the requested products or Services, and provide notifications or other correspondences to you. We do not share or sell any Personal Data to third parties for commercial purposes.

If you do not want to receive communications from us in the future, please let us know by sending us an e-mail requesting the same to [email protected] or by following the unsubscribe instructions found in any e-mail we send. If you supply us with your postal address, you may receive periodic mailings from us with information on new products and Services or upcoming events. If you do not wish to receive such mailings, please let us know by contacting us at [email protected].

Please note requests to remove your email address from our lists may take some time to fulfill. We may also still contact you as needed to provide important announcements or notifications regarding the Services.

Support Information: You may provide information to us via a support request submitted through the Services at [email protected]. We will use this information to assist you with your support request. Please do not submit any information to us via a support submission, including confidential or sensitive information that you do not wish for our Service Providers to have access to or use in the future.

Form Information: We may use forms to request certain information from you on the Services, such as your contact information to assist with contacts or service requests. This information may include Personal Data.

User contributions: You also may provide information to be posted on public areas of the Services, or transmitted to other users of the Services or third parties (collectively, «User Contributions»). Do not include any information or Personal Data in your user contributions that you do not want to be made public. Your User Contributions are posted on and transmitted to others at your own risk. We cannot and do not guarantee that your User Contributions will not be viewed by unauthorized persons.

Some of the Personal Data that we collect may be considered ‘Sensitive Personal Information’ under the applicable law. We collect Sensitive Personal Information for the purposes allowed by law or with your consent. We only use Sensitive Personal Information as necessary for our (1) Service delivery and operations, (2) compliance and protection, (3) research and development, or (4) Service improvement and analytics purposes in accordance with applicable law. If we use Sensitive Personal Information outside these permitted purposes, we will provide you with the right to limit processing of Sensitive Personal Information.

4. Information collected automatically

We use automatic data collection and analytics technologies to collect Aggregate Data and user-specific information about your equipment, domain name, patterns of use, communication data, and the resources that you access and use on the Services, including your IP address, browsing, and navigation patterns. This information is used to improve our Services, including without limitation to develop insights about you, your needs, and your preferences, so we can make better predictions and recommendations for you.

We generally process information collected automatically on the legal basis of our legitimate interests in assessing the use of our Services. Where appropriate, we may rely on alternate legal bases, such as your consent to certain types of processing.

Information we collect automatically through your use of the Services includes:

Internet browser: Your Internet browser automatically transmits certain anonymous information when you use certain Services. As you navigate through our Services, we and our partners who include third-party Service Providers (as defined below) we engage to help provide our Services, may use automated means to collect various types of information about you, your computer, or other device used to access our Services.

A representative, non-exhaustive list of the types of automatically collected information may include:

1. network or Internet protocol address and type of browser you are using (e.g., Chrome, Safari, Firefox, Internet Explorer);

1. the type of operating system you are using (e.g., Microsoft Windows or Mac OS), the name of your Internet service provider (e.g., Comcast, Verizon, or AT&T) and domains used by such providers, mobile network, device identifiers (such as an Apple IDFA or an Android Advertising ID);
2. device settings;
3. browser settings;
4. the web pages of the Services you have visited;
5. Services visited before and after your visit a Service, the type of handheld or mobile device used to view the Service (e.g., iOS, Android); or
6. location information, and the content and advertisements you have accessed, seen, forwarded, and/or clicked on.

We use this information to customize your experience with our Services. You may set your browser to notify you when a cookie is sent or to refuse cookies altogether, but certain features of this Website may not work without cookies. For more information, see our Cookie Policy. 

Information collected by and from social media services and other third-party platforms: Our users can engage with our content on or through social media services or other third-party platforms, such as Facebook, or other third-party social media plug-ins, integrations, and applications. When you engage with our content on or through social media services or other third-party platforms, plug-ins, integrations, or applications, you allow us to have access to certain information in your profile. This may include your:

1. name;
2. email address;
3. photo;
4. gender;
5. birthday;
6. location; and
7. ID associated with the applicable third-party platform or social media account user files, like photos and videos, your list of friends or connections, people you follow and/or who follow you, or your posts or «likes.»

For a description on how social media services and other third-party platforms, plug-ins, integrations, or applications handle your information, please refer to their respective privacy policies and terms and conditions, which may permit you to modify your privacy settings.

When we interact with you through our content on third-party websites, applications, integrations, or platforms, we  obtain any information regarding your interaction with that content, such as content you have viewed and information about advertisements within the content you have been shown or  have clicked on.

Information collected via LMS

When you interact with our Learning Management System (LMS) hosted on Intellum, we collect certain information to enhance your learning experience and track progress. This information includes:

• Personal Data: Your name, email address, and any other details you provide during registration or course participation.

• Usage data: Course progress, quiz results, time spent on modules, and interaction with course materials.

We collect this data to monitor learning outcomes, improve course content, and ensure compliance with our training requirements.

Data sharing and storage

The data collected through our LMS is stored on Intellum’s secure servers. Intellum implements industry-standard security measures to protect your information. We do not share your LMS data with third parties, except as necessary to provide the LMS services or as required by our Terms of Service. 

User rights and choices

You have the right to access, correct, or delete your personal information collected through the LMS. To exercise these rights, please contact our support team at [email protected].

Analytics information: We use data analytics to ensure Website functionality and improve the Services. We use mobile analytics software to allow us to understand the functionality of the Services on your phone. This software may record information such as how often you use the Services, what happens within the Services, Aggregate Data, performance data, app errors and debugging information, and where the Services were downloaded from. We do not link the information we store within the analytics software to any Personal Data that you submit within the mobile application.

Log file information: When you use our Services, we may receive log file information such as your

1. IP address;
2. browser type;
3. access times;
4. domain names operating system;
5. the referring web page(s);
6. pages visited;
7. location;
8. your mobile carrier;
9. device information (including device and application IDs);
10. search terms;
11. and cookie information.

We receive log file data when you interact with our Services, for example, when you visit our Website, sign in to our Services, or interact with our email notifications. We use log file data to provide, understand, and improve our Services, and to customize the content we show you. We may link this log file to other information we collect about you via the Services.

Information collected by the TaxDome mobile app (iOS and Android): TaxDome may use information about your mobile device operating system.

Other web technologies: Our Service Providers (defined below) may also use other standard web-based technologies to analyze your movements while accessing our Services. The technologies include web «beacons,» «pixel tags,» and «clear gifs.» These technologies help us ascertain the effectiveness of our product and service campaigns and marketing programs, allow us to customize the Services offered on or through our Websites, and help determine the best use for Website content, and product and service offerings. Some of this information, including the IP address, may be stored on our Service Provider’s server logs and may be available for extended periods of time. For more information, see our Cookie Policy.

5. How TaxDome shares your Personal Data

We use the information we receive about you for the purposes described in this Privacy Policy. We generally process Personal Data received about you through our Services on the legal basis of our legitimate interests in providing the Services and their functionality to you where such processing is necessary for the purposes of the legitimate interests pursued by us or by our Service Providers related to the Services. Where appropriate, we may rely on alternate legal bases, such as your consent to certain types of processing or pursuant to the performance of a contract. We do not sell your Personal Data, as “sell” is defined by the California Consumer Privacy Act (“CCPA”). Should we need to use your Personal Data for a new purpose that is materially different from the purpose for which the Personal Data was originally collected, or share it with an external party not covered by this Privacy Policy (i.e., not our processor), TaxDome will offer you the opportunity to opt out or collect your opt in consent before engaging in the new use or sharing, as required by applicable law.

We will share your information in the following circumstances on the legal basis of the legitimate interests of providing the requested Services:

Service Providers: We use third parties to support our business and provide Services such as receiving, processing and fulfilling orders, encrypting credit card data as a further measure of securing the data, processing payments, processing product reviews, technical support, providing AI features, and providing comparative performance information relative to our Website («Service Providers»). These third parties have only limited access to your information and may use your information only to perform these tasks on our behalf. Information we share with our Service Providers may include both information you provide to us and information we collect about you, including Personal Data and information from data collection tools like cookies, web beacons, and log files.

We  disclose the Personal Data that you have provided to us to Service Providers that we have engaged to perform business-related functions on our behalf, but only:

• to contractors we use to support our business or assist in providing the Services, in which case we will require such third parties to agree to treat your Personal Data in accordance with this policy and use it for the same purposes; or
• in connection with the sale, assignment, merger, or other transfer of the business of this Website to which the information relates, in which case we will require any such buyer to agree to treat your Personal Data in accordance with this privacy policy and use it for the same purposes; or
• to respond to law enforcement requests or where required by applicable laws, court orders, or government regulations.

An updated list of our Service Providers may be found here: https://taxdome.com/policies/sub-processors 

Business transactions: We may purchase other businesses or their assets, sell our business assets, or be involved in a bankruptcy, merger, acquisition, reorganization, or sale of assets (a «Business Transaction»). Your information, including Personal Data, may be among assets sold or transferred as part of a Business Transaction. In some cases, we may choose to buy or sell assets. Such transactions may be necessary and in our legitimate interests, particularly our interest in making decisions that enable our organization to develop over the long term.

Safety and Lawful Requests: We may be required to disclose Services user information pursuant to lawful requests, such as subpoenas or court orders, or in compliance with applicable laws. We generally do not disclose user information unless we have a good faith belief that an information request by law enforcement or private litigants meets applicable legal standards. We may share your information when we believe it is necessary to comply with applicable laws, to protect our interests or property, to prevent fraud or other illegal activity perpetrated through the Services or using our name, or to protect the safety of any person. This may include sharing information with other companies, lawyers, agents, or government agencies. Nothing in this Privacy Policy is intended to limit any legal defenses or objections that you may have to a third party, including a government’s or request to disclose your information.

Other purposes: TaxDome may also disclose your Personal Data as is necessary to:

1. establish or exercise our legal rights;
2. protect the property or safety of our company and employees, contractors, vendors, suppliers, and customers;
3. defend against legal claims;
4. help with internal and external investigations; or
5. as otherwise required by law or permitted by law.

We may disclose your information in connection with the sale or merger of TaxDome or any transaction that involves the sale or assignment of some or all of our assets.

Non-Personal Data: We create, disclose, commercialize, and otherwise use Aggregate Data and Anonymized Data received or created from providing the Services. We may share Aggregate Data and Anonymized Data for any legal purpose, including with our business partners.

6. Your rights and choices

We seek to ensure all individuals are provided with the rights mandated by their governing jurisdiction. Not all of the rights discussed in this Privacy Policy will apply to each individual data subject and may not apply to you depending upon your jurisdiction.

You may benefit from a number of rights in relation to the information that we process. Some rights apply only in certain limited cases, depending on your location. If you would like to manage, change, limit, or delete your Personal Data, you can do so by contacting us at [email protected]. In certain cases where we process your information, you may also have a right to restrict or limit the ways in which we use your Personal Data.  For information on your EU rights, please see here. We may provide you with additional rights depending on your jurisdiction; please see our jurisdiction-specific privacy policies for more.

Where you have provided consent to certain data processing, you have the right to withdraw that consent at any time by contacting us at [email protected]. A withdrawal of consent will not affect the validity of our use of your Personal Data up until the point you have withdrawn your consent.

If you no longer wish to use the Services or receive service-related messages (except for legally required notices), then you may contact us using the information above.

Access to the information we have collected about you: We provide certain tools and settings within the Services to help you access, correct, delete, or modify your Personal Data associated with the Services. You may also contact us regarding the information we have collected about you, including regarding the nature and accuracy of the data that has been collected about you, to request an update, modification, or deletion of your information, to opt-out of certain Services uses of your information, or to withdraw any consent you may have granted to us. Please note that if you choose to delete your information or opt-out of the collection and use of your information, you understand that certain features, including but not limited to access to the Services, may no longer be available to you.

Data retention: Generally, we will retain your information only for as long as is necessary for the purposes set out in this policy, for as long as the relevant Services Account is active or as needed to provide the Services to you. We will retain and use your information to the extent necessary to comply with our legal obligations (for example, if we are required to retain your information to comply with applicable tax/revenue laws), resolve disputes, enforce our agreements, and as otherwise described in this policy. We also retain log files for internal analysis purposes. These log files are generally retained for a brief period of time, except in cases where they are used for Website safety and security, to improve Website functionality, or we are legally obligated to retain them for longer time periods. We may delete some of your Personal Data from our systems as part of a data retention plan. Following termination or deactivation of a Services Account, we may retain your information and content for a commercially reasonable time for backup, archival, and audit purposes.

Opting-out of communications from us: Users may opt-out of receiving certain communications from us by following the unsubscribe process described in email communication, or by contacting us using the contact information provided above. However, please note you may not opt-out of certain Services-related communications, such as account verification, changes or updates to features of the Services, or technical and security notices.

7. Data security

The security of your Personal Data is important to us. We take reasonable efforts to secure and protect the privacy, accuracy, and reliability of your information and to protect it from loss, misuse, unauthorized access, disclosure, alteration, and destruction. We implement security measures as we deem appropriate and consistent with industry standards. As no data security protocol is impenetrable, we cannot guarantee the security of our systems or databases, nor can we guarantee that Personal Data we collect about you will not be breached, intercepted, destroyed, accessed, or otherwise disclosed without authorization. Accordingly, any information you transfer to or from Services is provided at your own risk.

Please do your part to help us keep your information secure. Services Account information is protected by a password. It is important that you protect against unauthorized access to your account and information by choosing your password carefully and by keeping your password and computer secure, such as by signing out after using the Services. You are responsible for maintaining the confidentiality of your password and Services Account and are fully responsible for all activities that occur under your password or Services Account. We specifically reserve the right to terminate your access to the Services and any contract you have with us related to the Services in the event it learns or suspects you have disclosed your Services Account or password information to an unauthorized third party.

We make reasonable efforts to ensure that our other Service Providers have implemented physical, electronic, and procedural security measures to assist with safeguarding your Personal Data and to help protect against unauthorized access and disclosure. Only our authorized personnel and our Service Providers who perform legitimate business functions for TaxDome are authorized to access your Personal Data. Notwithstanding our efforts, the Internet has inherent security risks. TaxDome cannot promise, and you should not expect, that your Personal Data, personal searches, and other communications will always remain secure. You should take care with regard to how you handle and disclose your Personal Data or any username or password that you are required to use to access Services on our Websites.

8. Data protection responsibilities

Where you act for a company processing Personal Data, or where you provide us the Personal Data of individuals, you are acting as a data controller, and TaxDome is the data processor. As a data controller, you are responsible for protecting the Personal Data you process and complying with all relevant legal requirements when you use the Services. This includes applicable data protection and privacy laws that govern the ways in which you can use Personal Data. Data controllers are also responsible for protecting Personal Data they provide to their data processors and must have a written agreement in place governing the details of the processing. TaxDome’s Data Processing Amendment is available at this link.

9. Data integrity

TaxDome will only process Personal Data in a way that is compatible with and relevant for the purpose for which it was collected or authorized by you. To the extent necessary for those purposes, TaxDome will take reasonable steps to ensure that Personal Data is accurate, complete, current, and reliable for its intended use.

TaxDome Operates from the United States: The United States, European Economic Area («EEA») Member States, and other countries all have different laws relating to privacy and data protection. When your information is moved from your home country to another country, the laws and rules that protect your Personal Data in the country to which your information is transferred may be different from those in the country in which you live. For example, the circumstances in which law enforcement can access Personal Data may vary from country to country. In particular, if your information is in the United States, it may be accessed by government authorities in accordance with U.S. law.

International data transfers

Please be advised that information we collect about you via the Services may be transferred, processed, and/or accessed by us in the United States, the European Union, or other countries where we or our Service Providers operate. In such cases, we take steps to ensure appropriate safeguards are in place to protect your Personal Data. TaxDome relies on mechanisms such as the EU Standard Contractual Clauses (SCCs), transfer impact assessments (TIAs), and other legally recognized safeguards to ensure that your Personal Data receives an adequate level of protection consistent with applicable law. In certain circumstances, additional supplementary measures may be implemented to ensure the protection of your data. By using our Services, you consent to such international transfers under these safeguards. You can view the SCCs here and the DPF list here.

To request to limit the use and disclosure of your Personal Data, including transfers outside your country, please submit a written request to [email protected] or our DPO Victor Radzinsky at [email protected].

10. Your California privacy rights

Each capitalized term used, but not defined, in this section shall have the meaning given to such term in the CCPA or the Agreement. «Personal Information» includes Personal Data as defined in other sections of this Privacy Policy.

Consistent with the principles of the CCPA, if you are a resident of California, you may access the Personal Information we hold about you, ask that your Personal Information be corrected, updated, ported, or erased, and opt out of the further sale of your Personal Information (collectively, «Requests»). If you would like to make one of these Requests, follow the procedure described in the «Making Access, Data Portability, Correction, and Deletion Requests» section below. If you would like to designate an authorized agent to submit these Requests on your behalf, please contact us through the means indicated at the end of this Policy.

Access to Specific Information Requests: you may request that we disclose certain information to you about our collection and use of your Personal Information over the past 12 months. Once we receive and confirm your verifiable consumer request (“Consumer Request”), we will disclose to you:

• The categories of Personal Information we collected about you;
• The categories of sources for the Personal Information we collected about you;
• Our business or commercial purpose for collecting, sharing, or selling that Personal Information;
• The categories of third parties with whom we share that Personal Information;
• The specific pieces of Personal Information we collected about you (also called a data portability request) and provide a copy to you in an electronic or paper format; and
• The categories of Personal Information, if any, we disclosed for a business purpose to a third party.

Deletion Request: you may request that we delete any of your Personal Information that we collected from you and retained, subject to certain exceptions. Once we receive and confirm a verifiable Consumer Request from you, we will delete (and direct our Contractors and Service Providers to delete) your Personal Information from our (and their) records, unless an exception applies (as described below).

As described in the CCPA we may delete your Personal Information by (a) permanently and completely erasing the Personal Information on our existing systems with the exception of archived or back-up systems; or (b) anonymizing the Personal Information.

To make a request under your rights above, please email [email protected]. Only you, an authorized agent, or an entity registered with the California Secretary of State that you authorize to act on your behalf, may make a verifiable Consumer Request related to your Personal Information. To be verifiable, the Consumer Request must:

• Provide sufficient information that allows us to reasonably verify you are the person about whom we collected Personal Information or an authorized representative of that person and
• Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

We cannot respond to your Request or provide you with Personal Information if we cannot verify your identity or authority to make the request and confirm that the Personal Information relates to you. Making a verifiable Consumer Request does not require you to create an account with us. We will only use Personal Information provided in a verifiable Consumer Request to verify the requestor’s identity or authority to make the Request.

Upon receiving a Request from you, we will verify your identity based on the information we have on file for you. Upon verification of your identity, we will proceed to process your request (subject to the exceptions stated above).

We endeavor to confirm receipt of your request within ten (10) days of receiving it. We will respond to a verifiable Consumer Request within forty-five (45) days of its receipt. If we require more time (up to an additional forty-five (45) days), we will inform you of the reason and extension period in writing.

We will deliver our written response via email to the email address associated with you or, if we are unable to determine your email address, via mail, if you provided that information to us.

Any disclosures we provide will only cover the 12-month period preceding the verifiable Consumer Request receipt. If applicable our response to your Request will explain any reason we cannot comply with the Request. For data portability requests, we will select a format to provide your Personal Information that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance.

We do not charge a fee to process or respond to your verifiable Consumer Request unless it is excessive, repetitive, or manifestly unfounded. If we determine that your Request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your Request.

Non-Discrimination: We will not discriminate against you simply for making a Request pursuant to this section of the Policy.

Under California Civil Code Section 1798.83 (known as the Shine the Light law), our Services users and customers who are residents of California may request certain information about our disclosure of Personal Data during the prior calendar year to third parties for their direct marketing purposes. To make such a request, please write to us at [email protected] with «Request for California Privacy Information» on the subject line and in the body of your message. We will comply with your request within thirty (30) days or as otherwise required by the statute. Please be aware that not all information sharing is covered by the «Shine the Light» requirements and only information on covered sharing will be included in our response.

11. Nevada disclosures

If you are a Nevada resident who wishes to exercise your sale opt-out rights under Nevada Revised Statutes Chapter 603A, you may submit a request to the contact information listed at the end of this Privacy Policy. However, please know we do not currently sell Personally Identifiable Information triggering that statute’s opt-out requirements.

12. Children and data collection

TaxDome’s Website is a general audience website. The Services are not directed toward children who are under the age of 18. You may not use the Services if you are under the age of 18. If you are under the age of 18, you should not provide any information on our Services.

We do not knowingly collect Personal Data from children or minors. If TaxDome or its Service Providers become aware that a child or minor has provided us with Personal Data without parental consent, that information may be deleted from our databases. If you have questions about Personal Data that may have been submitted by a child, please email us at [email protected].

13. Enforcement

TaxDome uses a self-assessment approach to assure compliance with this Privacy Policy and periodically verifies that the Privacy Policy is accurate, comprehensive for the information intended to be covered, prominently displayed, completely implemented and accessible, and in conformity with the EU and Swiss privacy principles. We encourage interested persons to raise any concerns using the contact information provided and we will investigate and attempt to resolve any complaints or disputes regarding the use and disclosure of Personal Data in accordance with the principles.

If a complaint or dispute cannot be resolved through our internal process, we agree to dispute resolution using (an independent resourced mechanism) as a third-party resolution provider.

14. TaxDome AI features

AI features within TaxDome are powered by technology provided by third parties as set forth in our sub-processor list, which may change from time to time. .

To protect your data during processing, TaxDome implements the following safeguards:

• Enterprise services: TaxDome relies on the enterprise-grade services of OpenAI, AWS, and Google, which are designed for sensitive business workloads.
• Encryption: All data transfers are encrypted using industry-standard practices.
• Minimal data transmission: Only the essential amount of data is transmitted to OpenAI’s, AWS, and Google’s secure endpoints.
• No AI Model Training on Personal Data: TaxDome AI models do not train on Personal Data; TaxDome only uses anonymized data with Personal Data removed and from which no Personal Data may be derived (“Anonymized Data”) and Aggregate Data to provide, support, maintain, secure, analyze, and improve Services. 
• No public model training: Personal Data will not be used to train commercial third-party AI models.
•  Zero retention: Data sent to third-party LLMs  is not stored on those providers’ AI servers beyond the processing of your request. See more at: OpenAI’s Privacy Policy, AWS’ Privacy Policy, and Google’s AI Privacy Policy.
• Safety monitoring: In accordance with Google’s safety standards, certain processed data may be temporarily stored for up to 30 days in a secure monitoring environment for the sole purpose of detecting and preventing abusive content. Further information regarding Google’s safety and abuse monitoring can be found here: Google Abuse Monitoring.

15. Updates

TaxDome may update this Privacy Policy from time to time, and you should take the time to review it each time that you visit one of our Services. The most current version of this Privacy Policy will govern our use of your information and will be located at https://taxdome.com/policies/privacy. You may contact us to obtain prior versions. We will notify you of material changes to this Privacy Policy by posting a notice at the Services, updating the “Last Updated” date above, or by emailing you notifying you of the changes.