Cookie Policy (previous version, June 17, 2026)

This Cookie Policy describes how TaxWallet (“we”, “our”, “us”) uses cookies, local storage, device identifiers, and similar tracking technologies (“Cookies”) to operate, secure, and improve our Services.

This applies to:

• www.taxwallet.ai (marketing website),

• app.taxwallet.ai (dashboard SaaS application),

• TaxWallet mobile applications (iOS & Android).

By using our Services, you acknowledge and agree to the practices described in this Cookie Policy.

Cookies are small data files stored on your browser or device. TaxWallet may also use secure local storage, session storage, and mobile device identifiers for performance and security.

TaxWallet does not use cookies for third-party advertising, cross-site retargeting, behavioral profiling, or selling data. We do use first-party device identifiers, IP-based approximate location, and aggregated analytics to secure the site and to measure and attribute our own marketing (see Section 3).

TaxWallet uses only restricted categories of Cookies strictly required for lawful operation:

1. Strictly Necessary Cookies

• Enable login, authentication, dashboard sessions, and system operations.

• Essential for e-filing, document transfer, and tax workflow functionality.

• Cannot be disabled because they are required to deliver the Services.

2. Security & Fraud Prevention Cookies

• Detect unauthorized access and login anomalies.

• Enforce MFA and validate device identity.

• Prevent duplicate submissions and suspicious activity.

• Includes secure device fingerprinting for IRS & FTC Safeguards compliance.

3. Performance & Analytics Cookies (Limited)

TaxWallet uses Google Analytics 4 (GA4) and Google Tag Manager (GTM) for:

• Page views,

• Navigation flow,

• Performance metrics (load time, errors),

• Platform stability monitoring.

GA4 is configured with:

• IP anonymization,

• No demographic tracking,

• No Google Signals or cross-device ads,

• No advertising features enabled,

• No behavior modeling beyond aggregated analytics.

We do NOT use GA4 or GTM for third-party advertising, cross-site profiling, retargeting, or selling data. We DO use first-party, aggregated analytics — including the anonymous device ID and approximate location (derived from IP) — to measure and attribute our own marketing (e.g., which channels, campaigns, or representatives bring visitors and sign-ups).

4. Functional Cookies

• Remember theme, language, preferences, and accessibility settings.

• Maintain dashboard state for smoother workflow.

• Improve user experience but do not contain personal or tax data.

5. Support Recognition Cookies

• Used during support chat to identify the logged-in user securely.

• Store a hashed session ID + hashed name + hashed email ONLY.

• Never used for analytics, marketing, or any profiling.

• Ensures rapid troubleshooting with no disclosure of sensitive information.

6. Mobile App Device Identifiers

• Upon installation, the mobile app generates a unique DeviceID.

• Used for secure authentication, fraud prevention, and mobile notifications.

• Does NOT use IDFA, GAID, advertising identifiers, or app tracking.

• DeviceID is never shared with third parties.

7. Website Device ID & Approximate Location

• On our marketing website we generate an anonymous device ID from a privacy-preserving hardware fingerprint (browser, screen, timezone, CPU, and similar non-identifying traits) plus a first-party cookie and local storage. It does not contain your name or contact details.

• We record your IP address, from which an approximate location (e.g., region or city) may be derived. We do not request or access your device’s precise GPS location.

• Used for security and fraud prevention, product analytics, live support, and first-party marketing measurement and attribution — understanding which channels, campaigns, and representatives drive visits and sign-ups.

• First-party only: never sold, and never shared with third-party advertising or retargeting networks.

To protect user privacy, TaxWallet does NOT use:

• Advertising cookies of any type,

• Behavioral or interest-based tracking,

• Social media retargeting pixels,

• Facebook Pixel, TikTok Pixel, or LinkedIn tracking,

• Cross-site tracking technologies,

• Session replay tools (e.g., Hotjar, FullStory),

• Third-party or cross-site device fingerprinting (our device ID is first-party only and never shared).

We never sell, share, or disclose cookie-based data to third-party marketing systems.

TaxWallet uses Cookies strictly to:

• Authenticate and maintain secure user sessions,

• Prevent fraud and unauthorized access,

• Improve platform performance and reliability,

• Analyze navigation flow to optimize the user experience,

• Recognize your device via an anonymous first-party device ID,

• Derive approximate location from your IP for analytics and first-party marketing attribution,

• Measure and attribute our own marketing (channels, campaigns, representatives),

• Provide faster support response (hashed identity recognition),

• Ensure IRS, GLBA, and FTC Safeguards Rule compliance.

Cookies are NEVER used to store sensitive tax return data, SSNs, bank information, documents, or personal financial information.

Strictly necessary and security Cookies do not require user permission.

Where required under GDPR/ePrivacy:

• Analytics Cookies may require user opt-in.

• Users may withdraw consent at any time.

Refusing analytics Cookies does not limit access to core features but may reduce performance optimization.

Users may manage Cookies via:

• Browser settings,

• Cookie banner preferences (when applicable),

• Mobile OS privacy controls.

Disabling Cookies may impair authentication, e-signature workflows, document uploads, and dashboard functionality.

TaxWallet is not responsible for service failures caused by user-side cookie blocking or privacy extensions.

TaxWallet uses limited third-party tools for operational security and analytics:

• Google Analytics 4 (anonymized navigation analytics),

• Google Tag Manager (container only, no advertising tags),

• Infrastructure monitoring tools (e.g., uptime, error reporting),

• Authentication and fraud prevention providers.

Third-party vendors are contractually restricted from using TaxWallet data for their own purposes.

No third-party receives user identity, tax information, or sensitive data from Cookies.

To enhance support experience, TaxWallet may store a support recognition cookie that:

• Identifies the logged-in account using hashed identifiers,

• Helps our support team resolve issues faster,

• Provides audit tracking and case documentation.

This cookie is optional and contains no sensitive information.

It does NOT log user activity outside the TaxWallet platform.

TaxWallet retains cookie identifiers only for as long as necessary:

• Session cookies: expire after 20 minutes of inactivity,

• Functional cookies: 24 hours,

• Support recognition tokens: up to 30 days,

• DeviceID: persists until mobile app is removed or reset.

We do not indefinitely store cookie identifiers or sell cookie data.

All Cookies and identifiers are protected using:

• HttpOnly (where browser-supported),

• Secure flag (HTTPS-only),

• SameSite=Lax or Strict,

• Token rotation,

• Encrypted device storage on mobile apps.

Users are responsible for protecting their login credentials and device access.

We may revise this Cookie Policy as technologies evolve or as regulatory requirements change.

Users will be notified of material changes via email, banner, or in-app notice.

Continued use of the Platform after changes constitutes acceptance of the updated Policy.

TaxWallet Privacy & Security Office

Email: support@taxwallet.ai

For cookie-related questions, opt-out requests, or compliance inquiries, contact us anytime.