Politique de confidentialité

Introduction

CalFTax ("CalFTax", "we", "us", "our") provides software-assisted tax-related information and tools. This Privacy Policy explains how we collect, use, disclose, and protect information when you use our website, applications, and related services (together, the "Services").

We are committed to being transparent and not misleading you about our practices. If anything here conflicts with a feature description elsewhere on the site, ask us via the contact page so we can clarify or correct it.

What CalFTax is (and is not)

CalFTax offers educational information and software-assisted analysis. It is not a law firm, accounting firm, or government agency. Nothing in the Services replaces advice from a qualified tax, legal, or financial professional in your jurisdiction.

Information we collect

Account and authentication: When you create an account, we process information such as your email address and authentication identifiers provided through our identity provider (e.g. Supabase).

Information you provide: You may enter tax-related details, upload documents (for example PDFs or images), choose country or language preferences, and send messages through contact or support flows.

Technical and usage data: We collect standard technical data needed to operate the Services, such as IP address, device/browser type, approximate timestamps, and error logs. We may use product analytics (e.g. Vercel Analytics, PostHog) to understand how the product is used in aggregate—so we can improve stability and usability, not to sell personal data.

Payment data: Payments are processed by Stripe. We do not store your full card or bank numbers on our servers; Stripe handles payment data according to its own terms and privacy policy.

How we use information

To provide and maintain the Services, including sign-in, saving your progress, and generating analyses.

To communicate with you about your account, security, or support requests (e.g. via email through providers such as Resend).

To improve reliability, security, and product quality—such as debugging issues and understanding aggregate usage patterns.

To comply with applicable law and enforce our Terms of Service.

AI and third-party processing

Some features send content you provide (for example text extracted from uploads or fields you fill in) to third-party AI or infrastructure providers to generate analysis. We rely on vendors for hosting, authentication, email, analytics, and payments as described in this policy.

Do not upload sensitive information you are not comfortable having processed by these systems. You may redact or omit details where possible.

Retention

We retain information for as long as your account is active and as needed to provide the Services, comply with law, resolve disputes, and enforce our agreements. Retention periods may vary by data type and system constraints.

Security

We use industry-standard measures appropriate to the nature of the Services, including encryption in transit (HTTPS), access controls, and reputable hosting providers. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

International users

Our Services are designed with users in the United States and Nigeria in mind, but may be accessed from other locations. If you access the Services from outside your home country, your information may be processed in countries where our vendors operate, which may have different data protection rules.

Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, or export certain personal information, or to object to or restrict certain processing. To exercise these rights where applicable, contact us through the contact page. We may need to verify your request.

Children

The Services are not directed at children under the age where parental consent is required in your jurisdiction. We do not knowingly collect personal information from children in that category.

Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and adjust the "Last updated" date. Continued use of the Services after changes means you acknowledge the updated policy.

Contact

For privacy-related questions, use the contact options listed on our website (e.g. the Contact page). We will respond consistent with applicable law and our operational capacity.