Privacy Policy

Information we collect

To open your case, we collect your name, email, phone or WhatsApp number, language and choice to apply for student bonuses or credits. If you use the simulator, the amount entered is used to calculate an estimate; the resulting estimate and service fee may accompany your registration.

To prepare your filing, we request your Social Security number (SSN), date of birth, country and state of residence, city of your U.S. job offer, U.S. mailing address, optional exchange agency and referral code, bank name, account type, account number and routing number. We also collect your consent, prior filing status, SSN and passport photos, current W-2 forms and, when applicable, previous W-2 forms or Form 1040. For returning filers, each document section is stored when you save it, so you can return to complete the other section.

Your case record includes progress stages and dates, document references, access requests and email delivery records. Where available, Brevo email events such as delivery, opening or link clicks are used to reconcile notifications and avoid duplicate sends. Hosting and email providers also process technical information needed to operate the service, such as IP addresses, browser information and request or delivery logs.

How we use information

We use this information to organize your case, prepare your tax filing, contact you about missing information, manage refund and direct deposit details, support identity checks, show progress and send access links and case notifications. Your U.S. mailing address is used when physical correspondence from the IRS is needed.

Google Drive access and storage

An authorized member of the iTaxes team connects the Google account used to store case files. Clients upload documents through the iTaxes portal and do not need to connect their own Google Drive accounts.

The integration uses the drive.file permission to create and access the folders and files used by the application. It reads file contents and metadata, uploads documents, and updates case profiles and document records to organize and process filings. The complete profile and uploaded documents are stored in the connected iTaxes Google Drive account; folder names identify the client, and folder labels distinguish first-time and returning filers.

The application creates private case folders and does not publish document links for unrestricted access. Information retrieved through Google Drive is used for the case management and filing functions described here. It is not sold, used for advertising or used to train general-purpose AI models. Our use and transfer of Google API data follows the Google API Services User Data Policy, including its Limited Use requirements.

Google API Services User Data Policy

Who processes your information

Authorized iTaxes staff use your information to manage your filing. Google Drive stores the full profile and document files. Brevo manages contacts, Deals and emails, and stores the contact and profile fields listed above, including the full SSN and bank details, student selection, service fee, consent and progress records. Brevo also holds case links, file references and a protected SSN lookup reference; the uploaded document files are not sent to Brevo.

Vercel hosts the website and processes requests to operate the portal. If you contact us through WhatsApp, that conversation is also processed by WhatsApp. These providers may process information outside your country of residence. Information needed for your filing or identity checks may be provided to the relevant tax authorities and verification providers as part of your case.

Access, cookies and safeguards

We also save your English or Spanish language preference in a cookie for up to one year. This cookie contains only the language code, not form answers or access credentials.

The portal uses HTTPS, server-side credentials and signed session cookies to restrict access to case information. A newly created case can continue directly in the same browser session. To return later, you can request a short-lived access link sent to the registered email. Knowing an email address or SSN alone does not grant access to an existing case.

Session cookies are necessary to keep you signed in. Keep access links private and protect access to your email and device. If the iTaxes administrator revokes the connected Google account's authorization, the integration loses Drive access; that action does not delete case files or records already stored in Drive or Brevo. Clients can contact iTaxes to request deletion of their information.

Retention and deletion

Case profiles, documents and communication records are retained to manage your filing, follow up on the process and address applicable recordkeeping obligations. Completion of a stage or deposit does not automatically delete them. The team handles retention and deletion requests individually; the portal has no automatic deletion schedule or self-service deletion button.

You can request access, correction or deletion, or ask about withdrawing consent, by contacting mihcustomer@gmail.com or our published WhatsApp number. We may need to verify that the request concerns your own case. Some records may need to be kept to meet applicable obligations; the team will explain any limits that apply. Removing information needed for an active filing may prevent us from continuing it. Start your request without attaching an SSN photo, bank details or other identity documents to the message.

Policy updates and contact

Updates to this policy will appear on this page with a revised date. Changes to the use of Google account data will be disclosed here and, where needed, through an updated notice or consent request. For questions about this policy or your information, contact iTaxes at mihcustomer@gmail.com or WhatsApp (+57) 314 350 4532.