Information Sharing Disclosure

This Information Sharing Disclosure is provided in accordance with the Gramm-Leach-Bliley Act (GLBA), IRS Publication 4557, IRC §7216, and the FTC Safeguards Rule.

It explains what personal information we collect, how we share it, why we share it, and how we protect it.

This disclosure applies to:

• Tax professionals using TaxWallet,

• Their staff and authorized office members,

• Taxpayers whose data is processed through TaxWallet,

• Users of the dashboard, mobile applications, and integrated services.

TaxWallet collects only the minimum information required to operate secure tax workflow and tax preparation systems. This includes:

1. Personal Identifiers

• Names, emails, phone numbers, addresses, profile information.

2. Government & Taxpayer Identification Numbers

• SSN, EIN, ITIN, IP PIN (provided by the taxpayer or tax professional).

3. Financial and Tax Information

• W-2, 1099, banking information for refund transfers, tax forms, withholding data, and income documentation.

• Tax return data entered by taxpayers or professional preparers.

4. Electronic Records & Audit Trails

• Login logs, device identifiers, IP addresses, timestamps, e-signature events, and compliance logs.

5. Mobile & Technical Information

• Device OS, device model, installation IDs, push token identifiers, and crash diagnostics (no advertising IDs).

6. Payment Information

• Encrypted card data (excluding CVV), billing events, authorization tokens, and payment processor transaction IDs.

7. Communications

• Messages exchanged between tax professionals and taxpayers, support requests, and system notifications.

We do NOT collect unrelated personal data and do NOT sell personal data.

TaxWallet shares information only when necessary to provide lawful tax and financial services. We may share the following categories:

1. With Tax Professionals

• Return data, uploaded documents, communications, signatures, and taxpayer contact information.

2. With Service Providers (Contractual Access Only)

• Hosting providers, security vendors, e-sign providers, identity verification services, banking partners.

• All vendors are contractually bound to GLBA, IRS 7216, and FTC Safeguards Rule compliance.

3. With Government Agencies

• IRS and state agencies for e-file submission, transcript verification, and compliance enforcement.

4. With Banking & Refund Transfer Partners

• Only when a tax professional selects refund transfer or financial products.

• Shared data is limited to what is required for bank validation under federal banking laws.

5. With Payment Processors

• For subscription billing and merchant integrations (PCI-DSS compliant).

6. With Law Enforcement (When Required)

• Only upon valid subpoena, court order, or statutory requirement.

• We challenge unlawful or overbroad requests.

To safeguard user privacy, TaxWallet does NOT:

• Sell personal information to any party,

• Share user information for advertising or marketing by third parties,

• Provide client lists to banking partners except for refund transfer requests,

• Disclose taxpayer data to unrelated vendors or affiliates.

Your data is only used to provide, support, and secure TaxWallet services.

TaxWallet shares information strictly under recognized legal bases:

• IRS 7216 compliance for tax data handling and preparer consent rules,

• Legal obligations for IRS/state submissions and anti-fraud reporting,

• Contractual necessity for providing services requested by users,

• Legitimate interests such as fraud prevention and platform security.

When consent is required (e.g., marketing, optional features), we obtain it separately.

TaxWallet applies strict administrative, technical, and physical safeguards, including:

• AES-256 encryption at rest,

• TLS 1.2+ encryption in transit,

• Tokenized e-signature and device identifiers,

• Zero-trust internal access controls,

• Immutable audit logs for shared data events,

• Mandatory data minimization on all integrations.

All third-party service providers undergo due-diligence security reviews and sign binding data protection agreements.

Tax professionals may configure access for:

• Admins, staff, office managers, and preparers.

Within a firm, data may be shared internally according to the professional’s compliance policies.

TaxWallet does not control internal sharing decisions inside a tax office but provides tools for role-based access control.

To protect taxpayers and tax professionals, TaxWallet may share information with:

• Fraud prevention agencies,

• Banking compliance departments,

• Identity verification services,

• Regulatory authorities,

when legally required or necessary to prevent unlawful activity.

All sharing is strictly limited to the minimum data required.

Depending on your jurisdiction, you may have the right to:

• Request a list of third parties your information has been shared with,

• Opt out of certain optional sharing where legally allowed,

• Access or correct your information,

• Request deletion (when not restricted by IRS retention laws).

Requests can be submitted to support@taxwallet.ai.

TaxWallet does not engage in joint marketing with third parties.

We do not share personal information with affiliates for business purposes.

We do not permit financial institutions or service vendors to use your data for their own independent marketing.

We may update this disclosure as laws, regulations, or platform features evolve.

Material updates will be communicated through email, dashboard notices, or mobile alerts.

TaxWallet Privacy & Compliance Office

Email: support@taxwallet.ai

We respond to all privacy-related requests in a timely manner.