Privacy Policy
The short version
- Your tax return never leaves your device. The scan and all the math happen right in your browser. We never receive, upload, or store your return or the dollar figures on it.
- We only receive what you choose to give us — your first name and email when you open your full report — plus a general, non-dollar profile (like your profession and income range) that helps us understand who we serve.
- Marketing emails are your choice. Your report opens whether you say yes or no. We only email people who opt in, and you can unsubscribe anytime.
- When you share or email your plan, we transmit and store that plan — the strategies and estimates you generated, never your return — so we can deliver it and power your link. We also log anonymous, non-identifying usage (like which step you reached) to improve the tool.
- We don't sell your personal information. Ever.
This Privacy Policy explains how Scan My Taxes LLC (“ScanMyTaxes,” “we,” “us,” or “our”) collects, uses, and protects information when you use our website and tool at scanmytaxes.com (the “Service”). By using the Service, you agree to this policy.
1. Our core privacy promise
The part that matters most for your privacy runs entirely inside your web browser: when you enter numbers or upload a copy of a tax return, that information is read and analyzed on your own device. Your tax return, and the specific dollar amounts on it, are never uploaded to us or to anyone else. Your report is generated on your device. If you choose to email it to yourself or share it with an accountant or advisor, we transmit and store that plan (the strategies and estimates you generated — never your return or its dollar figures) so we can deliver it and provide your link. We also record limited, non-identifying usage data as described below.
2. Information we collect
Information that stays on your device (we never receive it)
- The tax return you scan or type in.
- Your exact dollar figures — income, wages, adjusted gross income, business profit, deductions, tax owed, home values, contributions, and any other specific amounts.
- Your finished report.
Information we receive (only when you choose to open your full report)
To open your full report, you provide your first name and email address. Along with these, your browser sends us a general profile made of ranges and categories, not exact numbers, so we can understand and improve who the Service helps. This includes:
- Your profession or field, work type, business entity type, tax filing status, and U.S. state.
- Banded ranges only: an income range (for example, “$200k–$500k”), an estimated-savings range, and an age range. We do not receive your exact income, savings, or age.
- A summary of which tax strategies apply to you and whether you already use them, are missing them, or they don't apply — expressed as simple category flags, with no dollar amounts.
- Your answers to the on-screen questions (for example, whether you own real estate or have a health savings account) — again, with every dollar figure removed before it is sent.
- How you heard about us (if you tell us), and basic marketing attribution such as the referring website and campaign tags (UTM parameters) from the link you arrived through.
- A one-way hashed version of your IP address (a scrambled fingerprint we cannot reverse into your actual IP), used only to prevent spam and abuse.
- Whether you opted in to marketing emails (your yes/no choice).
We collect this information only after you enter your name and email and submit the form; we do not track or fingerprint you before that.
3. What we never collect
To be explicit: we never collect your tax return, and we never collect any raw dollar figure from it — including income, wages, adjusted gross income, business profit, deductions, credits, or tax owed. These stay on your device. This is enforced in the software itself, not just by policy.
4. How we use your information
- To let you open and re-open your full report.
- To understand who uses the Service and improve the strategies and experience we offer (using the ranges and category flags described above).
- To send you tax-saving emails and important updates — only if you opt in.
- To respond to your questions and requests.
- To protect the Service against spam, fraud, and abuse.
5. Marketing emails and your consent
When you open your report, we ask a simple yes/no question about whether you'd like to receive occasional tax-saving emails. Your report opens either way — saying no does not prevent you from using the Service. We only send marketing emails to people who say yes, and every email includes an unsubscribe link. You can also email us at privacy@scanmytaxes.com to opt out at any time.
6. How your information is shared
We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We share the limited information above only with service providers who help us run the Service, and only for that purpose:
| Provider | Purpose | What it receives |
|---|---|---|
| Supabase | Our secure database and sign-in system, which stores the lead profile you submit | Everything in Section 2 (“Information we receive”) |
| Resend | Sending your report by email and other service (transactional) messages you request | Your name, email, and your report link and summary |
| Cloudflare | Serverless functions that deliver your report, plus content delivery and security | Information from Section 2 as it passes through to be stored or emailed |
| GoDaddy | Website hosting | Standard web-server request logs (such as the pages requested) |
| PostHog (only if we turn it on) | Aggregate, privacy-preserving usage analytics | The banded profile and category flags — no exact numbers |
| Kit / ConvertKit (only if we turn it on) | Sending the marketing emails you opted in to | Name, email, and profile fields — only for people who opted in |
We keep this list current. If we add or change a service provider that handles personal information, we will update this table. As of the “Last updated” date above, the providers marked “only if we turn it on” are not active.
We may also disclose information if required by law, to comply with legal process, or to protect the rights, safety, and security of our users or the Service.
7. Cookies and local storage
ScanMyTaxes uses only strictly necessary storage — no third-party advertising or cross-site tracking cookies. The tool may save your progress and preferences locally in your own browser (using local storage) so the experience works smoothly; that information stays on your device. We read marketing attribution tags (UTM parameters) and the referring page only from the link you used to reach us. Because we use only essential storage, no cookie-consent choice is required to use the Service; if we ever add optional analytics or advertising technologies, we will ask for your consent first through an on-site notice.
7a. Subscriptions and billing
If you purchase a paid subscription, the plan price, billing frequency, automatic-renewal terms, and how to cancel are disclosed to you at checkout and in our Terms of Service. Payments are processed by our third-party payment provider; we do not store your full card number. We keep a record of your purchase and your consent to the renewal terms as required by law.
8. Data retention
We keep the lead information you provide for as long as needed to operate the Service, understand our audience, and — if you opted in — stay in touch with you, unless you ask us to delete it. You can request deletion at any time (see “Your privacy rights”).
9. Security
We use industry-standard safeguards to protect the information we hold, including encrypted connections (HTTPS) and storing only a hashed version of your IP address rather than the address itself. No method of transmission or storage is 100% secure, but the most sensitive information — your tax return and its dollar figures — is never transmitted to us in the first place.
10. Your privacy rights
No matter where you live, you can ask us to:
- Access the information we hold about you.
- Correct information that is inaccurate.
- Delete your information.
- Opt out of marketing emails at any time.
To make any of these requests, email us at privacy@scanmytaxes.com. We will respond within a reasonable time, and we won't discriminate against you for exercising your rights.
California residents
If you are a California resident, the California Consumer Privacy Act (CCPA/CPRA) gives you the rights described above — to know, access, correct, and delete the personal information we hold, and to opt out of any “sale” or “sharing” of it. We do not sell or share your personal information, and we do not process it for cross-context behavioral advertising. To exercise your rights, contact us at privacy@scanmytaxes.com. You may use an authorized agent to make a request on your behalf.
Residents of other U.S. states
A growing number of states — including Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and others — have comprehensive privacy laws that give their residents rights similar to those above: to confirm whether we process your personal data, to access and correct it, to delete it, to obtain a portable copy, and to opt out of targeted advertising, the “sale” of personal data, and certain profiling. We do not sell your personal data, share it for targeted advertising, or use it for profiling that produces legal or similarly significant effects. You may exercise your rights by emailing privacy@scanmytaxes.com. If we deny your request, you may appeal by replying to our response; we will inform you of the outcome as required by your state's law.
Global Privacy Control and “Do Not Track”
Because we do not sell or share your personal information or serve targeted advertising, there is nothing to opt out of through an automated browser signal. If we ever introduce such practices, we will honor recognized opt-out preference signals such as the Global Privacy Control (GPC) where required by law.
11. Children's privacy
ScanMyTaxes is intended for adults and is not directed to children under 18. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.
12. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. Significant changes will be communicated through the Service.
13. Contact us
Questions or requests about your privacy? Email us at privacy@scanmytaxes.com.
Scan My Taxes LLC
[Mailing address — to be added before publishing]
14. Not tax or legal advice
ScanMyTaxes provides general educational information and estimates only. It is not tax, legal, or financial advice and does not create a professional or preparer relationship. Please consult a qualified tax professional before acting on anything you see in the Service.