Legal

Privacy policy

Learn how we collect, use, and protect your personal information.

Last updated: November 2, 2026

Who we are

Taxomate, Inc. runs the Taxomate website (taxomate.com) and the Taxomate app and service. This policy covers both. Taxomate, Inc. is the data controller.

Taxomate, Inc.
333 West Brown Deer Road, Unit G - 956
Milwaukee, WI 53217, United States
Email: support@taxomate.com

Data we collect

We collect data in two ways. You give some of it to us. Your browser or device sends the rest.

Data you give us

  • Your first name, last name, and email address when you create an account.
  • Data you send us when you fill in a form or contact support.
  • Payment details. You enter these with our payment provider, Stripe. We do not see or store your full card details. We only learn whether the payment worked.

Data we collect automatically

  • Usage data: pages viewed, clicks, browsing path, session statistics, and number of users.
  • Device and browser information, and your IP address.
  • Approximate location, at city level (city, latitude, longitude, and country).
  • Data from cookies and similar technologies. See our cookie policy.
  • System logs that record how the site and app are used, kept for operation and maintenance.

We need most of the data we ask for to provide the service. If you do not give it, we may not be able to serve you. We will say so when a field is optional.

You are responsible for any data about other people that you add, publish, or share through Taxomate.

Why we use data

We use data to:

  • provide and run the website and the Taxomate service;
  • create accounts and sign you in;
  • take payments;
  • host and deliver the site and app, and keep them fast;
  • monitor the site and app and fix errors;
  • measure how people use the site and app, so we can improve them;
  • answer your support and feedback requests;
  • measure and run our advertising;
  • follow the law, respond to lawful requests, protect our rights, and detect fraud and abuse.

If you are in the EEA, the UK, or Switzerland, we process your data only when we have a legal basis. We rely on these:

  • Consent. We use it for analytics, the support widget, and advertising cookies. You can withdraw consent at any time.
  • Contract. We use it when we need your data to provide the service you asked for, or to take steps before you sign up.
  • Legal obligation. We use it when the law requires us to process or keep data.
  • Legitimate interests. We use it for things like security, fraud prevention, and keeping our systems running, when your rights do not outweigh our interest.

Contact us if you want to know which basis applies to a specific use of your data.

Who we share data with

We use trusted providers to run Taxomate. Some staff and contractors who work on administration, sales, marketing, legal, and system operations can also access data when their work needs it. You can ask us for the current list of processors.

Provider What it does for us Where it processes data
StripePaymentsUnited States
Google Firebase AuthenticationSign-up and sign-inUnited States, Ireland
Microsoft AzureHosting and infrastructureUnited States
MongoDB CloudDatabase hostingUnited States
VercelWebsite hostingUnited States
CloudflareTraffic delivery and securityUnited States
Sentry (Functional Software, Inc.)Error and performance monitoringUnited States
Google Analytics 4 (Google LLC)Website analyticsUnited States
Google Ads (Google LLC)Advertising measurement (ad click IDs and trial or payment events, no email or phone number)United States
PostHog, Inc.Product analyticsUnited States
Microsoft AdvertisingAdvertisingUnited States
Google Fonts (Google LLC or Google Ireland Limited)FontsUnited States, Ireland
GleapSupport and feedback widgetNot stated

The Taxomate app also sends account-level product data to PostHog from our servers: your plan, your country, the services you connected, your setup progress, when an import or posting runs, and errors you see. We do not send Amazon order or settlement details, such as IDs, amounts or dates, to PostHog. If you allow analytics, the app in your browser also sends the screens you open, presses on its main buttons, and a session replay with all text and form inputs hidden.

We also may share data when the law requires it, when a public authority asks for it, or when we need it for a legal claim.

Cookies and similar technologies

We use cookies and local storage on our website. Our cookie policy lists them, explains what each does, and tells you how to change your choices.

Where we process data

We process data at our offices and wherever our providers operate. Most of our providers are in the United States. If you live outside the United States, your data will move to the United States and possibly other countries.

How long we keep data

We keep personal data only as long as we need it for the purpose we collected it for. In practice:

  • We keep data we use to provide a contract until the contract ends.
  • We keep data we use for our legitimate interests as long as that interest lasts.
  • We keep data we use on the basis of your consent until you withdraw consent.
  • We keep data longer when the law requires it or an authority orders it.

After that, we delete the data. Access, deletion, correction, and portability requests cannot apply once the data is gone.

How we protect data

We take reasonable security measures to prevent unauthorized access, disclosure, change, and destruction of data. We process data with computers and IT tools, and we follow internal procedures that limit use to the purposes in this policy.

Your rights

Depending on where you live, you may have the right to:

  • access the data we hold about you and get a copy;
  • correct data that is wrong or incomplete;
  • ask us to delete your data;
  • ask us to limit how we use your data;
  • object to our use of your data, including for direct marketing;
  • receive your data in a portable format and move it to another service;
  • withdraw consent at any time, where we rely on consent;
  • complain to your local data protection authority.

To use a right, email support@taxomate.com. It is free. We may need to verify your identity first. We answer within one month, or within the time your local law sets. If we cannot do what you ask, we tell you why.

When we correct, delete, or limit data, we tell the recipients we shared it with, unless that is impossible or takes disproportionate effort. You can ask us who those recipients are.

US state privacy rights

If you live in a US state with a privacy law, you can ask us to confirm whether we process your data, give you access to it and a copy, correct it, and delete it. You can also opt out of the sale of your data, of sharing it for cross-context behavioral advertising, and of targeted advertising. We do not treat you worse for using these rights.

Some states add rights. For example, you can limit our use of sensitive personal information, or ask for a list of the third parties that received your data.

Sharing for advertising measurement. When you arrive from a Google ad, we may share the ad click ID, the time you started a trial or made your first subscription payment, and the amount of that payment with Google LLC, so we can measure which ads work. California and some other states may treat this as "sharing" for cross-context behavioral advertising or as targeted advertising. We do not send your name, email, or phone number to Google for this, and ad personalization stays off. In the United States this measurement is on by default; everywhere else it runs only if you choose it.

To opt out of this sharing and of targeted advertising, use the "Your Privacy Choices" link in the footer of the site or the Taxomate app and turn off advertising measurement. You do not need an account. We also treat a Global Privacy Control signal from your browser as an opt-out. If you already have a Taxomate account, the app passes your choice to our servers the next time you open it in the same browser. We then stop sending your later events and remove the ones we have not sent. You can also email us to opt out. For other requests, email support@taxomate.com. A parent or guardian can make a request for a child.

Users in Brazil

If you are in Brazil, the LGPD gives you rights similar to those above. You can also ask for anonymization or blocking of unnecessary data, ask about the consequences of refusing consent, ask which third parties receive your data, and ask for review of decisions made only by automated means. You can complain to the ANPD. Email us to make a request.

Children

Taxomate is a business service. We do not knowingly collect personal data from children. If you think a child gave us personal data, email us and we will look into it.

Changes to this policy

We may change this policy. When we do, we post the new version on this page and update the date at the top. If a change affects processing that relies on your consent, we ask for your consent again where the law requires it.

Contact us

Questions or requests? Email support@taxomate.com, or write to Taxomate, Inc., 333 West Brown Deer Road, Unit G - 956, Milwaukee, WI 53217, United States.