Privacy Policy
Last updated: June 16, 2026
This policy explains how [Insert the firm's registered legal entity name and address](“the Firm”) processes information within Editax, an internal accounting and tax-preparation tool. The Firm is the controller of client data entered into the Service; clients should contact the Firm directly to exercise their rights.
Information we process
- Client tax information uploaded or entered by staff — documents, transactions, income, and identifiers needed to prepare returns.
- Account information — staff name, email, and role used to sign in and attribute actions.
- Usage data — actions taken in the app, run history, and an audit log of administrative changes.
How we use it
- To provide the Service: intake, document handling, AI-assisted analysis, review, and draft reports.
- To maintain security, prevent misuse, and keep an audit trail.
- To operate credit/billing for AI runs.
AI processing & third parties
To analyze documents, relevant content may be transmitted to a third-party AI model provider, and data is stored and hosted by third-party cloud and database providers. We use these providers to operate the Service; their processing is subject to their own terms and data-protection commitments. Where client financial data is involved, the Firm should ensure an appropriate data-processing agreement and retention setting is in place with each provider.
Storage & security
Workspace data is stored in a managed database, with access controlled by authentication and row-level security once enabled. Access is limited to authorized staff. No safeguards are perfect, and the Firm is responsible for configuring access controls appropriately before processing real client data.
Retention
Information is retained for as long as needed to provide the Service and to meet the Firm's professional, legal, and recordkeeping obligations, then deleted or archived per the Firm's retention policy.
Confidentiality of client tax information
Client tax information is handled as confidential in accordance with applicable professional standards and law. It is used only to prepare and review the client's engagement and is not sold or used for advertising.
Data subject rights
Depending on jurisdiction, individuals may have rights to access, correct, or delete their information. Because the Firm controls client data, such requests should be directed to the Firm, which will respond as required by law.
Cookies
Editax uses only essential cookies and local storage. See the Cookie Policy.
Changes & contact
We may update this policy; the “Last updated” date will reflect changes. Questions or requests: support@editax.com.