Privacy notice

Last changed: 2026-10-23

The short version

• You type your answers in your browser. Nothing reaches our server until you press Generate.
• When you press Generate, we encrypt your answers and your signature picture and keep them for 1 hour. After that they are deleted.
• We do not send your forms to the IRS or to anyone else. You download them and file them yourself.
• We use no analytics, no advertising, no trackers and no outside scripts. We set only two cookies, and the service cannot work without them.
• We have built no screen or tool that lets our team read what you submitted.

Who is responsible for your data

The person or company responsible for your data (the "controller") is: [TO BE PROVIDED BEFORE LAUNCH]

Email for privacy questions and requests: [TO BE PROVIDED BEFORE LAUNCH]

Postal address: [TO BE PROVIDED BEFORE LAUNCH]

What we collect, and why

We collect only what is needed to fill in and sign your forms, and we use it for nothing else: no marketing, no profiling, no sharing.

• Screening answers: whether you are a US resident, how many owners the company has, whether the owner is a person or a company, whether it chose to be taxed as a corporation, whether its tax year is the calendar year, and whether it deals with anyone besides you. They stay in your browser. When you press Generate they are sent so that we can check them again, and we do not keep them. If you say you are a US resident, nothing is sent.
• About your company: its name, address, US tax number (EIN), the date it was formed, the value of what it owned at the end of the year, whether this is its first year filing, and what it does.
• About you: your name and home address, the country you are a citizen of, the country where you pay tax, the country you mainly run the business from, your tax number at home (or "none"), your US tax number (SSN or ITIN) if you have one, your reference ID if you filed before, your initials, and the title you sign with.
• Money between you and the company: the amounts of money you put in, took out, paid for the company, received for work, and any loans in either direction, with their dates, balances and interest. Also any goods or services that moved between you and the company without payment or below market price, described in your own words with their value.
• Your signature: the picture you upload, and your tick in the box saying you may sign. The picture is stored. The tick is only checked at the moment you press Generate.
• The signing date: the day you pressed Generate, set by our server.

Your signature picture is checked and re-drawn by a separate, restricted program on our server before it is used. That removes anything hidden in the file, such as camera or location details.

Where it goes and how it is protected

• Your browser: your answers live only in the memory of the open page. We use no cookies, local storage or other storage in your browser to hold them. If you close or reload the page before pressing Generate, they are gone.
• Our server: a server in Bangladesh, outside the EU. Other services of ours run on it too, but this one runs under its own account and cannot be reached except through our web server. It checks your answers, builds your PDF and hands it to you.
• Our database: a MongoDB database on that same server, set up for this service alone and reachable only from the server itself. It is not backed up. It holds your answers and signature only in encrypted form (AES-256-GCM). The key is made fresh for each Generate. We do not store it. It exists only in your browser, in a cookie.
• The PDF: never stored. Each time you download it, our server decrypts your data in its memory for the few moments it takes to build the PDF again, then discards it.
• No outside services: every page, picture and font comes from our own server. We use no content delivery network, no analytics service, no error-reporting service, no advertising network, no email service and no payment service.

How long we keep it

1 hour, counted from the moment you press Generate. After that hour the server refuses to open your data, and the database deletes it (its clean-up runs about once a minute). Your cookie holding the key also expires after 1 hour, so even an old copy of the encrypted data can no longer be read by anyone, including us.

If you clear your browser's cookies sooner, the key is lost at once and your stored data can no longer be read by anyone. It is then deleted on the same schedule. There is no button to delete your data early in this version.

If you never press Generate, we never receive your answers, and there is nothing to delete.

Who can see it

• You, through your browser, for 1 hour.
• Our team: we have no admin page, search, export or database view that shows what you submitted, and the database holds it only in encrypted form without the key. The only moment your data is readable on our server is while it handles your own Generate or Download request.
• Our service providers (the company that hosts the server, and MongoDB for the database) work for us and follow our instructions. The database provider only ever holds your data in encrypted form.

Logs and error records

Our application keeps a short record of each request. It can contain only these things: the kind of request (generate, download or security token), a random request number we make up, the result (for example "ok" or "rate limited"), the HTTP status, how many milliseconds it took, and the type of error if something unexpected went wrong. It never contains your name, address, tax numbers, amounts, signature, file names, cookies or IP address. Anything else is dropped before it is written. We use no error-reporting service.

Cookies and storage

We set two cookies. Both are needed for the service to work, scripts on the page cannot read them (they are marked HttpOnly, Secure and SameSite=Strict), and neither tracks you.

• __Host-taxport-csrf - lasts 15 minutes. Set when you press Generate. It makes sure the request really comes from our page and not from another website.
• __Host-taxport-session - lasts 1 hour. Set once Generate succeeds. It holds the secret that lets you download your forms, and the key that unlocks your stored data.

We set no analytics, advertising or other cookies, and nothing is kept in your browser's local storage, session storage or database.

Your IP address

To stop abuse, our server counts how many times each internet address asks it to generate or download forms. For addresses of the newer kind (IPv6), it counts the whole block an address belongs to. These counts are held only in the server's memory, for up to an hour, and are lost when the server restarts. They are not written to our logs or our database.

The web server in front of our application may keep ordinary access records (which include your IP address). Exactly what is kept, and for how long, is still being confirmed.

Our reason for using your data (draft)

Draft - not decided. This section is waiting for our legal adviser.

• Preparing your forms: we expect to rely on Article 6(1)(b) of the GDPR: using your data is necessary to take the steps you asked for, namely preparing your forms. Consent (Article 6(1)(a)) is the alternative being considered.
• Keeping the service safe (the address counts and the security cookie): we expect to rely on Article 6(1)(f), our legitimate interest in preventing abuse.

Your rights

If the GDPR applies to you, you have the right to know what we do with your data (this notice), to ask for a copy, to have mistakes corrected, to have your data deleted, to restrict or object to how it is used, to receive it in a portable form, and to complain to a data protection authority. If we rely on your consent, you may withdraw it at any time.

Please be aware of one limit. We keep no accounts and delete everything after 1 hour, so after that hour we hold nothing about you. During the hour we cannot search for your data either, because we cannot read it and have nothing that links it to you. Your copy of the forms is the download. To make your data unreadable at once, clear your browser's cookies. To ask anything else, write to the contact above.

Draft: how requests are answered, and which authority you can complain to, are still to be decided.

Changes

If what we do with your data changes, we will change this page and the date at the top before the change takes effect.

Open items before this notice is final

• The contact details of the company or person responsible for your data.
• The legal basis for using your data, which our legal adviser has not yet confirmed.
• Your data is handled in Bangladesh, outside the EU and EEA. The legal safeguard for that transfer is not yet confirmed.
• How long the web server keeps its ordinary access records (they hold no address, cookie or form content).
• Which data protection authority you can complain to, and whether we need a representative in the EU.
• How we answer requests about your data, given that we cannot look up what a person submitted.