Privacy Policy

Last updated: September 8, 2026

Plain-language summary: We never ask for your bank login. We collect only what you type into the app (email, name, the income/expense numbers you log) plus what's needed to process a payment. We don't sell your data, and we don't run ad trackers or analytics scripts on this site.

1. What we collect

Data	Why
Email, first/last name, password	Account creation and login (password is hashed by our auth provider — we never see or store it in plain text)
Income sources, monthly amounts, business expenses	The core of what the calculator and income log run on
Saved calculations	So you can revisit a past estimate later
Reminder preferences	To know when/whether you want a quarterly deadline reminder
Plan/subscription status, Stripe customer & subscription IDs	To know what you've paid for — we never receive or store your card number
Email (CPA-referral waitlist only, no account required)	So we can reach out if we ever build a real accountant referral network — nothing else

2. What we never collect

Bank account credentials or access — TaxStash never asks for or connects to your bank
Full credit card numbers — Stripe handles payment details directly; we only ever see a customer/subscription reference
Social Security numbers or other government ID numbers

3. Who processes your data

We use a small number of service providers to run TaxStash. We don't sell or rent your data to anyone.

Supabase — hosts our database and handles authentication. Your account data and logged income/expenses live here, protected by row-level security so only you can read your own data.
Stripe — processes all payments. Card details go directly to Stripe; we never see them.
Cloudflare — hosts and serves the website itself.

4. No tracking, no ads

This site doesn't run Google Analytics, ad pixels, or any third-party tracking script. We don't build an advertising profile of you.

5. Data security

Data is encrypted in transit (HTTPS) and at rest. Every table in our database enforces row-level security, meaning the database itself — not just the app — refuses to return your data to anyone but you, even in the event of a bug elsewhere in the app.

6. Your data, your control

You can export everything you've logged as a CSV at any time from inside the app. You can permanently delete all your income, expense, and reminder data with the "Delete all data" option in account settings. To delete your account entirely, contact us.

7. Data retention

We keep your data for as long as your account is active. If you delete your data or account, it's removed from our active systems; residual copies in routine backups are purged on our standard backup rotation schedule.

8. Children's privacy

TaxStash is not directed at, and is not intended for use by, anyone under 18.

9. Changes to this policy

If this policy changes materially, we'll update the date at the top of this page.

10. Contact

Questions about your data? Reach out at [email protected].