Privacy Policy

This Privacy Policy applies to all personal and financial data collected, processed, and stored by Tax Lens AI ("Tax Lens," "we," "our," or "us") through the website located at taxlensai.com and all associated services, tools, and platforms (collectively, the "Platform"). This Policy governs data collected from all users, including visitors, registered users, clients, and any individual who submits information through our contact forms, lead capture mechanisms, service request forms, or AI-powered analysis tools.

"Personal Data" means any information that identifies or can be used to identify a natural person, including but not limited to name, email address, phone number, company name, job title, and IP address.

"Financial Data" means any financial records, tax documents, expense reports, audit data, or other monetary information submitted to the Platform for analysis.

"Processing" means any operation performed on Personal Data or Financial Data, including collection, recording, storage, retrieval, use, disclosure, or deletion.

"Data Subject" means any identified or identifiable natural person whose Personal Data is processed by Tax Lens.

"Controller" means Tax Lens AI, the entity that determines the purposes and means of processing Personal Data.

We collect the following categories of data:

3.1 Information You Provide Directly:

• Contact information: full name, email address, phone number, company name, job title, and company size, submitted through contact forms, service request forms, ROI assessment forms, and lead capture mechanisms
• Service inquiry details: selected services, pain points, timeline preferences, industry, and estimated revenue

3.2 Information Collected Automatically:

• Device and browser information: browser type, operating system, screen resolution, and device identifiers
• Network information: IP address, approximate geographic location derived from IP
• Usage data: pages visited, time spent on pages, click patterns, referral sources, and navigation paths
• Cookie data: session identifiers and authentication tokens used to maintain your logged-in session

3.3 Information from Third Parties:

• Authentication data from OAuth providers when you sign in through third-party authentication services

We process your data for the following purposes, each supported by a lawful basis:

• Service Delivery (Contractual Necessity): To provide AI-powered tax analysis, expense auditing, savings identification, and advisory recommendations
• Communication (Legitimate Interest): To respond to inquiries submitted through contact forms and service request forms, and to provide requested information about our services
• Platform Security (Legitimate Interest): To detect, prevent, and respond to security incidents, fraud, and unauthorized access
• Analytics (Consent / Legitimate Interest): To analyze website usage patterns, improve platform performance, and optimize user experience
• Legal Compliance (Legal Obligation): To comply with applicable laws, regulations, court orders, and governmental requests

We do not sell, rent, or trade your Personal Data. We share data only in the following circumstances:

• Infrastructure Providers: Cloud hosting, database, and storage providers that process data on our behalf under strict contractual obligations
• Analytics Services: Website analytics tools that collect anonymized usage data to help us improve the Platform
• AI Processing Services: Third-party AI and machine learning services used to power our analysis features, subject to data processing agreements
• Legal Requirements: When disclosure is required by law, regulation, legal process, or enforceable governmental request
• Business Transfers: In connection with a merger, acquisition, reorganization, or sale of assets, where your data may be transferred as a business asset

All third-party processors are contractually bound to process data only as instructed by Tax Lens and to implement appropriate technical and organizational security measures.

We retain Personal Data for as long as necessary to fulfill the purposes described in this Policy, unless a longer retention period is required or permitted by law. Specific retention periods are as follows:

• Contact and lead data: Retained for 3 years from the date of last interaction, unless you request earlier deletion
• Financial analysis data: Retained for the duration of the service engagement plus 7 years, as required by applicable tax regulations
• Usage and analytics data: Retained in anonymized form for up to 2 years
• Authentication data: Retained for the duration of your account's existence

Upon expiration of the applicable retention period, data is securely deleted or irreversibly anonymized.

Depending on your jurisdiction, you have the following rights with respect to your Personal Data:

7.1 Rights Available to All Users:

• Right of Access: You have the right to request a copy of the Personal Data we hold about you
• Right to Rectification: You have the right to request correction of inaccurate or incomplete Personal Data
• Right to Deletion: You have the right to request deletion of your Personal Data, subject to legal retention obligations
• Right to Withdraw Consent: Where processing is based on consent, you have the right to withdraw consent at any time without affecting the lawfulness of prior processing

7.2 Additional Rights for EEA/UK Residents:

• Right to Data Portability: You have the right to receive your Personal Data in a structured, commonly used, machine-readable format
• Right to Restriction of Processing: You have the right to request restriction of processing in certain circumstances
• Right to Object: You have the right to object to processing based on legitimate interests
• Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority in your jurisdiction

7.3 Additional Rights for California Residents:

• Right to Know: You have the right to know what Personal Data we collect, use, disclose, and sell
• Right to Opt-Out of Sale: We do not sell Personal Data. If this changes, you will have the right to opt out
• Right to Non-Discrimination: You will not receive discriminatory treatment for exercising your privacy rights

To exercise any of these rights, submit a request through our Contact page. We will respond within 30 days, or within the timeframe required by applicable law.

We implement administrative, technical, and organizational safeguards designed to protect Personal Data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data at rest and in transit using industry-standard protocols
• Access controls that restrict data access to authorized personnel on a need-to-know basis
• Regular security assessments and monitoring of our systems and infrastructure
• Secure authentication mechanisms for platform access

No method of transmission over the Internet or method of electronic storage is completely secure. While we strive to use commercially reasonable means to protect your Personal Data, we cannot guarantee absolute security. In the event of a data breach that affects your Personal Data, we will notify affected individuals and relevant authorities as required by applicable law.

Your Personal Data may be transferred to and processed in countries other than the country in which you reside. These countries may have data protection laws that differ from the laws of your jurisdiction. When we transfer data internationally, we implement appropriate safeguards, including Standard Contractual Clauses approved by the European Commission, to ensure that your data receives an adequate level of protection regardless of where it is processed.

The Platform is designed for business professionals and is not directed at individuals under the age of 18. We do not knowingly collect Personal Data from individuals under 18 years of age. If we become aware that we have inadvertently collected Personal Data from a minor, we will take immediate steps to delete such data from our systems.

To the maximum extent permitted by applicable law, Tax Lens shall not be liable for any indirect, incidental, special, consequential, or punitive damages arising out of or related to any unauthorized access to, or use or disclosure of, your Personal Data. Our total aggregate liability for any claims arising under this Privacy Policy shall not exceed the greater of (a) the total fees paid by you to Tax Lens in the twelve (12) months preceding the event giving rise to the claim, or (b) one hundred United States dollars (USD $100).

This Privacy Policy shall be governed by and construed in accordance with the laws of the State of Delaware, United States, without regard to its conflict of law provisions. Any disputes arising under or in connection with this Privacy Policy shall be resolved through binding arbitration administered by the American Arbitration Association (AAA) under its Commercial Arbitration Rules, conducted in the English language. The arbitration shall take place in the State of Delaware, United States. Nothing in this section shall prevent either party from seeking injunctive or other equitable relief in a court of competent jurisdiction.

For Data Subjects located in the European Economic Area (EEA) or the United Kingdom, this provision does not affect your rights under applicable data protection laws, including the right to lodge a complaint with your local supervisory authority.

We reserve the right to update or modify this Privacy Policy at any time. When we make material changes, we will update the "Effective Date" at the top of this page and, where appropriate, provide additional notice through the Platform. Your continued use of the Platform after the posting of changes constitutes your acceptance of the updated Privacy Policy. We encourage you to review this Policy periodically.

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, including requests to exercise your data rights, please contact us through our Contact page.

We will acknowledge receipt of your request within 5 business days and provide a substantive response within 30 days, or within the timeframe required by applicable law.