Your privacy and the privacy of your clients matters to us. TaxIntakeFlow handles sensitive tax and financial data. We take that responsibility seriously and are committed to transparency about how data is collected, used, and protected.
01
Overview
This Privacy Policy describes how Prosperium LLC, doing business as TaxIntakeFlow ("TaxIntakeFlow," "we," "us," or "our"), collects, uses, and shares information when you use our platform at taxintakeflow.com and related services.
This policy applies to:
- Firm Users — tax preparers and firm owners who register and use TaxIntakeFlow to manage their practice
- End Clients — individuals who submit their tax information through a firm's TaxIntakeFlow intake form
- Visitors — anyone who visits our website
By using TaxIntakeFlow, you agree to the collection and use of information as described in this policy.
03
How We Use Information
We use the information we collect to:
- Provide, operate, and maintain the TaxIntakeFlow platform
- Process and deliver intake form submissions to the appropriate tax firm
- Send email notifications to preparers and confirmation emails to clients
- Organize and upload files to connected Google Drive folders
- Fire GoHighLevel webhooks on behalf of firms that have configured the integration
- Process subscription payments and manage billing
- Respond to support requests and communications
- Improve the platform's features and user experience
- Comply with legal obligations
- Detect and prevent fraud and unauthorized access
We do not use client data submitted through intake forms for any purpose other than delivering it to the tax firm that owns the intake form. We do not use your clients' data to market to them, build advertising profiles, or sell to third parties.
04
How We Share Information
We do not sell, rent, or trade your personal information or your clients' personal information. We share information only in the following limited circumstances:
- With the Tax Firm: Client intake data is shared with the tax firm whose intake form the client completed. This is the core function of the platform.
- With Service Providers: We share data with trusted third-party providers who help us operate the platform, including Supabase (database and file storage), Resend (email delivery), and Stripe (payment processing). These providers are bound by confidentiality obligations and may only use data to perform services on our behalf.
- With Third-Party Integrations You Configure: If you configure a GoHighLevel webhook, submission data will be sent to that webhook URL. If you configure Google Drive, files will be uploaded to your specified folder. You control these integrations.
- For Legal Compliance: We may disclose information if required by law, subpoena, court order, or government request, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
- Business Transfers: In the event of a merger, acquisition, or sale of assets, user data may be transferred as part of that transaction. We will notify you via email prior to any such transfer.
05
Third-Party Services
TaxIntakeFlow integrates with the following third-party services. Each has its own privacy practices:
- Supabase — Database, authentication, and file storage. Data is stored in Supabase's secure cloud infrastructure. Supabase Privacy Policy
- Resend — Transactional email delivery for notifications and confirmations. Resend Privacy Policy
- Stripe — Payment processing. We do not store your full credit card number. Stripe Privacy Policy
- Google Drive — File storage (optional, configured by firm). Files are stored in the firm's own Google Drive account. Google Privacy Policy
- GoHighLevel / HighLevel — CRM integration (optional, configured by firm). Submission data is sent to the firm's GHL account via webhook. GHL Privacy Policy
Note for Firms: When you configure Google Drive or GoHighLevel integrations, you are responsible for ensuring those platforms handle your clients' data in compliance with applicable laws and your own privacy commitments to your clients.
06
Data Retention
We retain data for as long as your account is active or as needed to provide Services. Specifically:
- Active accounts: All data is retained for the duration of your subscription
- After cancellation: Data is retained for 90 days, during which you may request an export of your data
- After 90 days post-cancellation: Your data and your clients' submitted data may be permanently deleted
- Billing records: Transaction records are retained for up to 7 years as required for financial record-keeping
You may request deletion of your account and associated data at any time by contacting us at support@taxintakeflow.com. Note that we may retain certain information as required by law or for legitimate business purposes.
07
Security
We take the security of sensitive tax and financial data seriously. Our security practices include:
- All data transmitted between your browser and our servers is encrypted using TLS/HTTPS
- Data at rest is encrypted in Supabase's secure infrastructure
- Authentication is handled through Supabase Auth with industry-standard session management
- Each firm's data is isolated — firms cannot access other firms' data
- File storage uses access controls so only authorized firm users can access client files
- Payment data is handled by Stripe and never stored on our servers
Despite our efforts, no method of electronic transmission or storage is 100% secure. If you believe your account has been compromised, please contact us immediately at support@taxintakeflow.com.
For Firms: You are responsible for maintaining the security of your account credentials and for any activity that occurs under your account. We recommend using a strong, unique password and enabling any available two-factor authentication.
08
Your Rights
For Firm Users, you have the right to:
- Access your account data and download an export of your submissions
- Correct inaccurate information in your account settings
- Delete your account and request deletion of associated data
- Opt out of non-essential marketing communications
For End Clients (individuals who submitted data through a firm's intake form): Your data is controlled by the tax firm you submitted to. To access, correct, or delete your data, please contact that tax firm directly. You may also contact us at support@taxintakeflow.com and we will do our best to assist you.
California Residents: Under the California Consumer Privacy Act (CCPA), California residents have additional rights including the right to know what personal information is collected, the right to delete personal information, and the right to opt out of the sale of personal information. We do not sell personal information. To exercise your rights, contact us at support@taxintakeflow.com.
09
Children's Privacy
TaxIntakeFlow is designed for use by tax professionals and is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13.
Note that tax intake forms may collect information about dependent children as part of legitimate tax preparation services. This information is collected on behalf of the tax firm and the adult clients they serve, and is subject to the same protections as all other data on the platform.
10
Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify registered firm users by email and update the "Last Updated" date at the top of this page.
Your continued use of TaxIntakeFlow after any changes to this policy constitutes your acceptance of the updated policy. We encourage you to review this page periodically.