EFFECTIVE DATE: OCTOBER 15, 2026

Your Privacy,
Simplified.

We believe data protection should be as clear and straightforward as filing your taxes. Dumbtax is built on organized transparency: zero hidden clauses, institutional-grade encryption, and absolute protection of your confidential financial data.

Ref: DTX-PRIV-V3.2 · Verified for Tax Season 2026 · Plain Language Standard

Encrypted DocV3.2 · 2026
Organized Transparency100% Verified

TRANSPARENCY & DATA PRIVACY

The Details, Unpacked

Every clause translated into plain English. Inspect how your financial files, identity credentials, and session tokens are safeguarded across our tax filing infrastructure.

Document Index

Zero Data Monetization

We strictly never sell, trade, or rent personal tax information to commercial brokers or advertisers.

Bank-Grade Vault

All taxpayer forms and numbers are shielded with 256-bit AES encryption at rest and in transit.

Total Deletion Control

You can export all raw records or command immediate permanent erasure from our live systems at any time.

1. Information We Collect & Direct Inputs

When you prepare a filing through Dumbtax, we collect only the explicit categories of data strictly necessary to compute your liabilities, discover deductions, and deliver your forms to designated tax authorities. We operate on a data-minimization philosophy: if an item is not required for legal tax compliance, we do not request or store it.

  • Direct Taxpayer Identifiers: Legal names, verified mailing addresses, and masked Social Security or Tax Identification Numbers required by government revenue agencies.
  • Income & Deduction Records: Figures extracted from employer-issued W-2s, 1099-MISC/NEC/INT schedules, retirement distributions, and itemized receipt tallies.
  • Session Security Tokens: Ephemeral cryptographic authenticators used exclusively to prevent unauthorized account takeover during active return compilation.

IMPORTANT: PLAIN-ENGLISH COOKIE NOTICE

We do not use advertising trackers, retargeting pixels, or third-party behavioral cookies. The only cookies Dumbtax installs are strictly functional session tokens. These ensure your calculations remain saved as you move between deduction screens, and automatically terminate upon browser exit or 15 minutes of inactivity.

2. How We Use & Retain Tax Filing Data

Your tax records are processed for a singular objective: assembling an accurate return and transmitting it across authenticated electronic filing gateways directly to the Internal Revenue Service and pertinent state tax agencies. We maintain an ironclad separation between operational compute tasks and outside analytics.

In accordance with federal regulatory mandates under Treasury Regulation § 301.7216-1, Dumbtax retains tax preparation documentation for the mandatory statutory period required for tax defense and transmission validation. Once the compliance period concludes, production tables are programmatically overwritten and purged.

3. Cryptographic Storage & Access Controls

Every packet exchanged with our infrastructure is negotiated through TLS 1.3 tunnels with modern ephemeral key exchange. At rest, database records holding Taxpayer Identification Numbers, adjusted gross incomes, and bank routing details are shielded using envelope AES-256-GCM encryption with segregated Hardware Security Modules (HSMs).

  • Zero-Trust Operator Access: Dumbtax engineers have no unilateral ability to inspect unencrypted tax returns without recorded, multi-party cryptographic elevation.
  • Ephemeral Memory Compute: Form calculations take place in isolated micro-containers that wipe working memory immediately after state persistence.
  • Continuous Compliance Verification: Our data controls undergo routine third-party SOC 2 Type II examinations and simulated penetration audits.

4. Your Data Rights, Portability & Deletion

Regardless of jurisdiction, every Dumbtax customer possesses unconditional rights over their personal data assets. You can download an open-format archive of your tax transcripts, dispute any factual inaccuracies in your filing profile, or petition for permanent data deletion upon closure of your account.

To exercise your portability rights or request immediate record redaction, reach out to our dedicated privacy counsel at [email protected] or submit a verified inquiry directly through your security dashboard.