Reveal Tax Inc. ("Reveal Tax", "we", "us") provides AI-powered tax preparation software. We collect, store, and process personal information (including identifiers such as Social Security Numbers (SSN) or Social Insurance Numbers (SIN), tax-return data, financial documents, and supporting records) for the express purpose of preparing your tax return.

This document describes what we collect, how we use it, who we share it with, how long we keep it, and the rights you have to access, correct, or delete it. Country-specific notices appear below.

Your consent. Before using Reveal Tax beyond reading this policy, we ask you to confirm agreement with our collection, processing, and storage practices as described here. We record the time and policy version of that confirmation with your account.

We collect:

• Account information — name, email address, authentication identifiers (Google OAuth subject ID).
• Tax-return content — every document you upload (W-2 / T4 / 1099 / T5 / receipts / prior-year returns / etc.), every value you enter into a form, every chat message you send the AI assistant, and every form / return Reveal generates from that input.
• Tax-relevant identifiers — SSN (US) or SIN (CA), filing status, dependents' identifiers, financial account numbers when present on uploaded documents.
• Operational metadata — sign-in timestamps, IP addresses, device user-agent, audit log of changes you and the AI made to your file.
• Payment information — collected and processed by Stripe; we never see your card number directly.

• To prepare, file, and audit your tax returns (the primary purpose).
• To detect amendment opportunities on prior-year returns.
• To support you when you ask for help (you and our support staff can both see your tax-file content during a help conversation).
• To improve Reveal Tax's tax-knowledge models. Personally identifiable information is excluded from this pipeline; only de-identified, aggregate signals are used.
• To meet legal and regulatory obligations.

We do not sell your personal information. We do not use it for advertising. We do not share it with third parties for any purpose other than (a) processing payments via Stripe, (b) sending transactional email via SMTP, (c) the AI inference providers we contract with to power the assistant (currently Anthropic; only your specific request payload is sent, and only for the duration needed to generate a response), and (d) financial account linking as described in "Financial institution linking" below.

When you choose to connect a bank, brokerage, or other financial account inside Reveal Tax, we use Plaid Technologies, Inc. ("Plaid") as a technical service provider to facilitate that connection. Plaid receives and processes categories of information described at the time you start the linking flow and in Plaid's end-user privacy disclosures (plaid.com/legal).

We use information obtained through Plaid only to deliver product features you request (such as importing transactions or account details for tax preparation), subject to this policy.

Reveal Tax data is stored on Google Cloud Platform infrastructure. Production today runs in us-central1 (Iowa, USA). Encrypted backups are retained in the same region.

Traffic between your browser and our application uses TLS 1.2 or newer. Data at rest in our production database and document storage uses Google's default encryption (AES-256 under Google's managed encryption model).

For each tax file, the designated Owner of that file decides how long its content stays in Reveal Tax for preparation, filing, and historical reference. We do not automatically delete your tax-file data on a fixed retention schedule; we remove it when you ask us to (for example through account deletion or a deletion request), except where law requires otherwise.

If you cancel or downgrade your subscription, your tax data generally remains accessible in read-only form (we do not delete data when you stop paying — you can always come back).

On explicit account deletion, we remove your personal information from active systems within 30 days. Encrypted backup archives are rotated out of cold storage within 90 days.

Some records (audit logs, payment receipts) are retained for up to seven years to meet US and Canadian tax / accounting recordkeeping requirements.

• Access — you can view all data we hold about you in the in-app workspace.
• Correction — you can edit any field; the AI assistant audit-logs every change.
• Export — request a structured export by emailing privacy@reveal.tax.
• Deletion — request deletion via Settings → Account, or by emailing the same address.
• Withdraw consent — you can stop using Reveal Tax at any time. We will not process your data further once your account is closed.

Additional notices apply if you are a resident of Canada (PIPEDA) or California (CCPA / CPRA). Sign in and select your tax file to see the country-specific section.

For privacy questions or to exercise any of the rights above, email privacy@reveal.tax. For general support, email support@reveal.tax.