Privacy Policy

Information we collect

We may collect account and contact data; identity and professional-verification data; requests, listings, quotations and order records; payment references and transaction status; device, IP, approximate location, VPN or abuse-risk signals; usage analytics; support and dispute records; and AI prompts or feedback you intentionally submit. Payment providers generally process complete card or bank credentials directly.

Encrypted communications and files

End-to-end encrypted content is intended to be decrypted on participant devices. The service may process routing metadata, delivery status and encrypted payloads. Offline ciphertext may be retained for up to seven days and deleted after confirmed receipt or expiry. Files cannot be sent while the recipient is offline under the current platform rule. Evidence deliberately submitted for a dispute is a separate copy and may be accessible to authorized support personnel and agreed third parties.

Verifiable document seals

When you request a document seal, the browser creates a persistent cryptographic device key and calculates the file hash locally. The platform receives and retains the hash, public-key fingerprint, account reference, minimal manifest, timestamp, optional order reference and verification audit logs—not the financial rows. An authorized administrator may temporarily process a package you deliberately submit for verification; its financial content is not retained by the verification service.

How we use information

We use information to operate accounts and modules, verify users, connect parties, process orders and payments, prevent fraud, enforce rules, resolve disputes, provide support and notifications, improve performance, produce aggregated statistics, comply with law and provide AI-assisted features. Private customer content is not added to AI training merely because it appears on a page; a separate authorized workflow is required.

Disclosure and processors

We may disclose necessary data to the counterparty you choose, independent professionals, payment providers such as Stripe or Airwallex, cloud storage and hosting providers, email or SMS providers, security and analytics vendors, authorized dispute reviewers, advisers, authorities, or a successor in a corporate transaction. Each receives only data appropriate to its role. We do not sell personal information or share it for cross-context behavioral advertising.

Retention

Retention depends on purpose, contract, security, tax, accounting and legal requirements. Account, payment, audit and dispute records may outlast an active order. Encrypted offline messages follow the shorter period described above. We delete or de-identify data when it is no longer reasonably required, subject to backups and legal holds.

Your choices and rights

Depending on your location, you may request access, correction, deletion, portability, restriction or objection, withdraw consent, or appeal a privacy decision. You may control language and notifications in your account. Identity verification may be required before a request is completed. Mandatory retention and other legal exceptions may apply.

International use and security

Data may be processed in the United States and other locations used by disclosed providers. We apply administrative, technical and organizational safeguards appropriate to the data, but no service can guarantee absolute security.

Children, updates and contact

The platform is for adults and is not directed to children under 18. Material policy changes will be posted with an updated date and, where required, additional notice or consent. Submit privacy requests through the support or privacy channel displayed in your account, or write to Entitytax LLC, Sheridan, WY 82801, United States.

Module data map

Each module receives only the data needed for its function. Identity handles account and verification data; marketplace and order modules handle listings, quotes and status; payment providers handle payment credentials; messaging handles encrypted delivery metadata; risk, reviews, membership and analytics use the minimum operational signals needed for safety and service quality.

Identity and trust: Registration, role accounts, email or phone verification, KYC and professional certification. Marketplace and orders: Requests, services, company transfers, investment and financing listings, quotes and order status. Payments and escrow: Stripe or Airwallex checkout, holds, delayed settlement, refunds, disputes and payouts. Encrypted messaging and evidence: Point-to-point encrypted chat, online-only files, consent-based evidence and delivery notices. Professional due diligence: Professional and institution certification, assignments, review windows and verified labels. Risk and arbitration: AI risk signals, blue/yellow/red thresholds, freezes, intervention and second-level approval. Reviews and membership: Bilateral reviews, professional levels, memberships and eligibility controls. AI assistance and knowledge: Approved internal knowledge, site search, workflow prompts and local-model responses. AI finance workpaper: Local tax workpapers, imports, tax-ID checks, reconciliation, seals and signed export packages. Tax data connectors: Authorized marketplace and accounting-software APIs with a selected reporting period. Operations and referrals: Referral links, rewards, payout review, membership operations and support workflows. Administration, audit and analytics: RBAC, module switches, form versions, audit events, statistics, SSL and maintenance controls.

AI knowledge and external-source governance

AI knowledge is maintained as versioned internal content. External research is limited to approved official or otherwise authorized sources, is reviewed by an administrator before publication, and is never a live browser crawl. Customer financial rows, uploaded tax files, private chat content and dispute materials are excluded from AI training unless a separate, explicit and auditable authorization is completed.

Local-first finance boundary

The AI Finance workpaper parses, calculates, validates, prints and prepares seals in the user's browser. Refreshing or closing the browser clears the working data. Authorized connectors may return period totals, while the platform stores only the operational metadata required for orders, payments, security and audit.