Privacy

The short version

Tax Forms stores what you type and what you upload, because it has to in order to fill a form and to remember you next year. It is encrypted with a key derived for your account. It is not sold, and it is not used for advertising.

What is collected

• Your account. The email address and display name from the sign-in provider you choose.
• Your answers. Everything you enter on a form — including identifiers such as a Social Security number, if the form asks for one.
• Documents you upload. The file itself, plus the values read out of it and where on the page they were found.
• An audit trail. Which value was filled, from where, by whom, and when. This is what lets you explain a number later. Entries are only ever added — none of them can be edited or removed, by you or by us. Deleting the form removes its whole trail.

The part worth knowing about

Reading an uploaded document means sending that document to a language model. It is Google’s Gemini, running on Vertex AI inside the same Google Cloud project that already stores your data, reached with the service’s own credentials — so the file does not travel to an organisation that did not already hold it, and there is no third-party API key anywhere in Tax Forms. It is still a boundary, and we would rather state it plainly than bury it.

The document is sent as you uploaded it, complete. Nothing is stripped out first: reading a W-2 means reading the Social Security number on it, because that is a value the form needs.

If you would rather that did not happen, do not upload documents. Type the values in instead — every other part of Tax Forms works the same way. Nothing you supply is ever sent to a model for any other purpose: not to do your arithmetic, not to decide what to ask you, and not to decide whether you can export. Working out what a form asks and how its lines add up happens once per form, from IRS documents alone, before you have answered anything.

Your data, and getting rid of it

Deleting a form removes that form and everything under it — every answer, its audit trail, and the filled PDF if you exported one. You can do that yourself from your list of forms at any time.

Facts you have confirmed — your name, address and so on — are kept deliberately, so that next year’s form does not ask you the same questions again. They are the one thing that outlives the forms they came from.

Deleting your whole account removes those facts too, along with your sign-in. You can do that yourself from your list of forms. Nothing is kept afterwards and nothing can be recovered.

Tracking

There is no third-party analytics, no advertising network and no cross-site tracking. The only things stored in your browser are your theme choice and which tab you last had open.