What TaxJet AI does with your firm’s details and with the client records it prepares work from — and what it never does with them.
Last updated 21 September 2026. Sample wording written for this product design — have counsel review it before it stands as your firm’s agreement.
This describes what TaxJet AI does with two different things: the details of the accountants who use it, and the client records a firm gives it to work from.
Name, work email, role and the firm they belong to. Sign-in times, the device and the approximate location a session came from, so a Partner can review access in Settings → Team.
If your firm signs in with Microsoft or Google, we receive the account identifier and email from that provider, not the password.
Statements, trial balances, invoices, prior returns and anything else handed to the service, together with what was prepared from them and who approved it.
These stay your firm’s records. We act on your instructions as a processor: your firm remains responsible to its clients for them.
To prepare the work your firm asked for, to show where each figure came from, to keep an activity log of who did what, and to keep the service running and secure.
We do not sell them, do not advertise from them, and do not use one firm’s records to prepare another firm’s work.
Canada and the United States are separate workspaces with their own database, file storage and tax rules. A firm belongs to exactly one. Records in the Canada workspace are held for that workspace.
Access follows the roles a Partner sets. Client access can be limited per person, and access can be suspended immediately; both are in Settings → Team.
Stripe processes payments; we never see or store a full card number. We also use infrastructure providers for hosting and model providers to prepare the work. Each is bound to use the records only to provide their part of the service.
For as long as the firm keeps its workspace, so past years stay available. You can export everything from Settings → Firm at any time.
Deleting the firm removes its records from live systems promptly and from backups within 30 days.
People whose details we hold can ask for a copy, a correction, or deletion. Where the request concerns a client’s records rather than a user’s own details, it goes to the firm that holds the relationship, and we help the firm answer it.
Records are encrypted in transit and at rest, access is scoped by role, and every sign-in and approval is logged. Two-step verification is available and can be required firm-wide.
Questions, or a request about your details, go to [email protected].
Questions about this document? Write to [email protected].