Privacy Policy
Policy version: 2026-09-07.core-first-launch
Service regions
Entitytax LLC is registered in Wyoming, United States. Our intended service markets include the United States, Canada, Australia, Japan, Mainland China, Hong Kong and Taiwan, the European Union, ASEAN and West Asia. Specific country and service availability depends on local requirements, provider qualifications and payment eligibility; this list is not a promise that every service is available or licensed everywhere. Contact support@mail.entitytax.com for privacy requests, complaints or availability enquiries.
Information and purposes
We process account and contact details, password hashes, verification submissions, public listings, quotes, orders, payment references, support and dispute materials, device/session information and security logs to operate services, authenticate users, deliver notices, prevent abuse and meet legal obligations. Optional analytics measures approved public-page usage. Independent professionals may separately control information used in their engagements.
Financial data and your external tokens
Local financial imports and calculations run in your browser. You provide your own limited external token when requesting a tax-data synchronization. The server temporarily uses it to retrieve and normalize authorized data; the connector does not persist your token or raw transaction rows. Minimal audit metadata and reconciliation hashes may remain. A selected handoff can use browser session storage; clear it or close the session after exporting. Materials deliberately uploaded for orders, certification, support or evidence follow their separate storage workflow, not this local-only rule.
Encrypted messages and separate evidence
The current messaging design encrypts content on participant devices. Servers and configured relays process ciphertext, routing, public keys and delivery metadata, not participant private keys. Offline ciphertext has a configured lifetime of no more than seven days; receipt and cleanup jobs trigger deletion. Storage backups and copies already downloaded may last longer. Losing a device key can make content unreadable. This does not promise forward secrecy, real-time calling or remote erasure. Evidence voluntarily submitted for review is a separate readable copy available only to authorized reviewers.
Providers and international processing
Necessary data may reach your chosen professional, configured hosting/storage providers, Stripe or Airwallex, email/SMS services and authorized reviewers. Optional AI features may send the inputs you submit to the disclosed configured provider, including OpenAI or DeepSeek; the support assistant uses approved knowledge and an optional local model. Public-page text is not automatically sent for AI translation. Authorized legal disclosures may also occur. Operator locations, processors, transfer grounds and safeguards must be identified for the countries served; no certification or cross-border exemption is implied.
Retention and protection
Retention follows the purpose and applicable tax, accounting, dispute and security obligations, not a promise to delete everything when an account closes. Published content can be hidden while originals and action logs remain for review. Backups and legal holds may delay erasure. Device keys, exported files and session handoffs have separate browser lifetimes. We restrict access and protect stored credentials, but cannot guarantee absolute security. The operator must maintain a documented retention/deletion schedule and incident-response process before public launch.
Privacy requests and legal grounds
Where applicable, processing relies on performing requested services, legal obligations, assessed legitimate interests or your consent for optional uses. Depending on your location, you may request access, correction, deletion, portability, restriction or objection, withdraw consent, appeal a decision or complain to your regulator. Use the published privacy contact and provide only what is needed to verify the request. We do not require a password by email. Mandatory retention and others' rights may limit a request; applicable response periods and explanations must be respected. Non-essential analytics can be declined without losing core service access.
Accounts, authority and age
Use accurate information and act only for yourself or an organization you are authorized to represent. The service is intended for adults aged 18 or older and not for children. Protect login and device keys, report suspected compromise and do not share privileged accounts. Professionals must maintain qualifications required for the work and location. A displayed badge does not replace independent verification.
Operator and contact
Entitytax LLC · Wyoming, United States
30 N Gould St Apt 53080, Sheridan, WY 82801, USA