RoboTax

RoboTax Platform Privacy Policy

1. Overview

This Privacy Policy describes how RoboTax, Inc., a Delaware C Corporation (“RoboTax,” “we,” “our”) collects, uses, and discloses information when you use the RoboTax Platform (“Platform”). It also explains your rights regarding your information. This Privacy Policy is governed by the laws of the State of Florida, without regard to conflict-of-law principles. The internal affairs of RoboTax, Inc. as a Delaware corporation are governed by the Delaware General Corporation Law (8 Del. C. §§ 101–398). Any dispute arising out of or related to this Privacy Policy is subject to the dispute resolution procedures set forth in the Terms of Service, including mandatory mediation followed by binding arbitration administered by the American Arbitration Association (AAA), both conducted in Pinellas County, Florida.

Core commitment: Any data RoboTax shares with any third party is anonymized before disclosure. We never sell, license, or share your identifiable personal information with third parties for their own purposes.

2. Information We Collect

2.1 Information You Provide Directly

  • Account information: name, email address, phone number.
  • Tax documents: W-2s, 1099s, K-1s, prior returns, and other tax return information as defined by IRC §7216.
  • Financial records uploaded manually: profit and loss statements, balance sheets, asset schedules.

2.2 Information from Connected Accounts

  • Bank and brokerage accounts (via third-party data aggregation service, e.g., Plaid, MX, or Finicity): account holder name, account type, masked account number, routing number, transaction descriptions and counterparties, transaction dates and amounts, balances, income deposits, and interest and dividend payments.
  • Accounting software (e.g., QuickBooks Online, Xero, FreshBooks): revenue, expenses, payroll summaries, asset schedules, and entity classification.
  • Payroll systems: compensation data, employee count, benefit elections, retirement contributions.
  • Development platforms (GitHub): repository metadata, contribution history, project classification (for IRC §41 R&D credit analysis). We do not access source code.
  • Other third-party platforms or services you choose to connect: data collected from any additional connected accounts will be limited to the same categories of financial and operational information described above.

2.3 Information Collected Automatically

  • Device and usage data: IP address, browser type, operating system, pages visited, features used, timestamps.
  • Cookies and similar technologies as described in Section 9.

3. How We Use Your Information

3.1 To Provide the Platform

We use your financial and tax data to analyze it against IRC provisions, identify potential tax strategies, and generate modeled estimates of potential tax impact.

3.2 To Improve the Platform

We use anonymized and de-identified data to train our AI models, improve strategy detection accuracy, and develop new features. This data cannot reasonably be used to identify any individual. We do not use your identifiable personal information or tax return information to train AI or machine learning models. The Platform uses artificial intelligence and machine learning technologies to analyze your data and identify potential tax strategies. These technologies process your data only within the Platform’s secure environment. All AI-generated output is subject to review by qualified tax professionals before being presented as a Tax Plan.

3.3 To Communicate With You

We use your contact information to send account notifications, security alerts, and (with your consent) marketing communications.

4. How We Share Your Information

RoboTax never shares your identifiable personal information with third parties for their own commercial purposes. Any data disclosed externally is anonymized.

4.1 Service Providers

We share information with service providers who perform services on our behalf, including cloud hosting, data aggregation, payment processing, and customer support. These providers are contractually prohibited from using your data for any purpose other than providing services to RoboTax.

4.2 Anonymized and Synthetic Data Program

We may create anonymized datasets by permanently removing all personally identifiable information from user data. We may further create synthetic datasets — artificial data generated from statistical patterns that does not represent any real individual. These anonymized and synthetic datasets may be licensed to third parties including financial institutions, research firms, and tax industry participants for market analysis, product development, and research.

De-identification includes the removal or irreversible transformation of: (a) names and taxpayer identification numbers; (b) addresses and geographic identifiers more specific than state; (c) telephone numbers, email addresses, and other direct contact information; (d) account numbers and financial institution identifiers; (e) dates more specific than year; and (f) any other data element that would permit identification.

4.3 Legal Requirements

We may disclose your information if required by law, regulation, legal process, or governmental request.

4.4 Business Transfers

In connection with a merger, acquisition, or sale of assets, your information may be transferred. We will provide notice before your information becomes subject to a different privacy policy.

5. Data Security

RoboTax maintains a Written Information Security Plan (“WISP”) in compliance with IRS Publication 4557 and the FTC’s Safeguards Rule under the Gramm-Leach-Bliley Act (16 CFR Part 314). Security measures include: encryption in transit (TLS 1.3) and at rest (AES-256); role-based access controls; regular security assessments; employee training on data handling protocols; and physical access controls. Multi-factor authentication (MFA) is required for all user account access.

Data Breach Notification. In the event of a data breach affecting your personal information, RoboTax will notify affected users within thirty (30) days of confirming the breach, consistent with Fla. Stat. §501.171 and other applicable state breach notification laws.

6. Data Retention

We retain your identifiable personal information for the duration of your active account plus ninety (90) days after account closure, after which it is permanently deleted unless retention is required by law. For clients engaged under a RoboTax engagement agreement, client records may be retained for up to seven (7) years. Anonymized and synthetic data (which cannot identify you) may be retained indefinitely.

7. Your Rights

7.1 All Users

Regardless of where you reside, you may:

  • Access and review the personal information we hold about you.
  • Request a copy of your data in machine-readable format (JSON or CSV).
  • Correct inaccurate information.
  • Delete your account and associated personal data.
  • Disconnect any external data source at any time.
  • Opt out of marketing communications at any time.

To exercise any of these rights, contact us at privacy@gorobotax.com or by mail at: RoboTax, 160 16th St. N. #1130, St. Petersburg, FL 33705.

7.2 Financial Data Privacy (All Users)

Under the Gramm-Leach-Bliley Act (GLBA), you have the right to opt out of the sharing of your nonpublic personal information with nonaffiliated third parties. Because RoboTax anonymizes all data before any third-party disclosure, identifiable nonpublic personal information is never shared with nonaffiliated third parties.

7.3 California Residents

California residents have additional rights under the California Consumer Privacy Act as amended by the California Privacy Rights Act (Cal. Civ. Code §§1798.100–1798.199.100), including: Right to Know, Right to Delete, Right to Correct, Right to Opt Out of Sale/Sharing, Right to Non-Discrimination, and Right to Limit Use of Sensitive Personal Information. RoboTax does not sell or share your personal information as defined by CCPA.

7.4 California Financial Information Privacy (SB-1)

Under the California Financial Information Privacy Act (Cal. Fin. Code §4050 et seq.), sharing of financial information with nonaffiliated third parties requires your affirmative opt-in consent. Because RoboTax anonymizes all data before any third-party disclosure, your identifiable financial information is never shared with nonaffiliated third parties.

7.5 Florida Residents

RoboTax is incorporated in Delaware and maintains its principal place of business in Florida. Data breach notification complies with the Florida Information Protection Act (Fla. Stat. §501.171).

7.6 Texas Residents

Texas residents have rights under the Texas Data Privacy and Security Act (TDPSA), including the right to confirm processing, access, correct, delete, and obtain portable copies of personal data. RoboTax does not sell personal data as defined by the TDPSA.

7.7 Residents of Other U.S. States with Privacy Laws

If you reside in a state with a comprehensive consumer privacy law, you may have additional rights. The rights described in Section 7.1 meet or exceed the requirements of all currently enacted U.S. state privacy laws. Contact privacy@gorobotax.com to exercise any state-specific right.

8. Tax Return Information (IRC §7216)

RoboTax is not a “tax return preparer” as defined in 26 U.S.C. §7701(a)(36). However, RoboTax voluntarily treats all tax return information as protected and follows §7216 consent and disclosure practices. Before processing any tax return information, RoboTax will present you with a standalone IRC §7216 Consent Form. You may revoke your consent at any time by contacting privacy@gorobotax.com.

9. Cookies and Tracking Technologies

We use the following categories of cookies:

  • Strictly Necessary Cookies: Required for core Platform functionality, authentication, session management, and security.
  • Analytics and Performance Cookies: Used to understand how users interact with the Platform and improve performance.
  • Preference Cookies: Used to remember your settings and preferences.

You can manage non-essential cookie preferences through the Cookie Preference Center.

10. Children’s Privacy

The Platform is not directed at individuals under eighteen (18). We do not knowingly collect personal information from minors.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or in-Platform notification at least thirty (30) days before taking effect.

12. Contact

For questions about this Privacy Policy or to exercise your rights, contact:

Email: privacy@gorobotax.com
Mail: RoboTax, 160 16th St. N. #1130, St. Petersburg, FL 33705

© RoboTax 2026 — All rights reserved