TAX NINJA USA — PRIVACY POLICY

Effective Date: August 29, 2026

Last Updated: August 29, 2026

1. Who We Are and What This Covers

This Privacy Policy explains how Tax Ninja LLC, a New York limited liability company operating as Tax Ninja USA ("we," "us," "our"), collects, uses, discloses, and protects information in connection with taxninjausa.com and its subdomains, our funnels, forms, checkout pages, client portal, community, events, and programs (collectively, the "Services").

What this policy does not cover. This policy describes information we collect about you — a visitor, registrant, or customer. It does not govern taxpayer or client information that you, as an independent tax professional, collect and process in your own tax software environment under your own EFIN.

Information you place in your Dock workspace. Dock is a business-operations platform we deliver using underlying third-party infrastructure, and it is treated differently from your tax software environment.

Your responsibility. You determine what client or taxpayer information you lawfully collect and choose to enter into Dock. You are responsible for obtaining any consent required, safeguarding your own credentials and user access, and complying with the tax-return-information, confidentiality, and privacy requirements applicable to your practice. That information remains yours; we do not claim ownership of it. Nothing about our provision of Dock makes Tax Ninja LLC your tax preparer, EFIN holder, employer, or supervising firm.

Our processing. To the extent you place information into your Dock workspace, Tax Ninja LLC and its platform and service providers may process, host, transmit, support, secure, back up, and administratively access that information as necessary to provide, secure, maintain, support, and administer the Dock service, subject to the applicable Dock and platform terms and to our and their privacy and security obligations. We do not use information in your Dock workspace for our own marketing purposes.

This policy also does not govern third-party websites or platforms you reach through links or integrations, which have their own privacy practices.

2. Information We Collect

Information you give us directly

Identifiers and contact details: name, business name, email address, phone number, mailing or billing address.
Professional and business information: role, practice type, credentials or registrations you tell us about, years in practice, business stage, and similar details you provide in forms, applications, surveys, or onboarding.
Registration and event information: sessions registered for, attendance, questions submitted, and communication preferences.
Transaction information: products purchased, order and receipt details, subscription status, and billing information. Full payment card numbers are collected and processed by our payment processor; we do not store full card numbers on our systems.
Account and portal information: username, credentials (stored in hashed or otherwise protected form by the platform), profile details, and program access records.
Community and support content: posts, comments, questions, replies, submitted assignments, reviews or feedback you submit, and support correspondence.
Recordings: audio, video, and chat from live sessions, webinars, and calls in which you participate.

Information collected automatically

Device and connection information: IP address, browser type, operating system, device identifiers, and general location inferred from IP.
Usage information: pages viewed, links clicked, referring and exit pages, time on page, form and funnel progression, lesson and video progress, and email open and click events.
Cookies and similar technologies: see Section 6.

Information from other sources

Our payment processor (transaction status, partial card details such as last four digits and card brand, fraud signals).
Third-party financing providers, where a buyer elects a financing option (approval or decline status and order association — we do not receive underwriting files).
Platform and service providers that operate parts of the Services on our behalf, including the Dock platform.
Business contact and list sources, where we lawfully obtain professional or business contact information for business-to-business outreach.
Publicly available sources and social platforms where you interact with us.

Sensitive information — public-facing channels. We do not seek Social Security numbers, government identification numbers, financial account credentials, tax returns, or other sensitive taxpayer information through our ordinary website forms, public or shared community areas, general chat, or unsecured email. Please do not submit that information through those channels unless we specifically request it through an approved secure workflow.

Sensitive information — Dock workspace. This is different from your Dock workspace. Dock includes functionality intended for storing and processing client information, and you may choose to use it for that purpose. Where you do, you remain responsible for lawful collection, obtaining any required consents, access controls, your own security practices, and compliance with the taxpayer-information requirements applicable to your practice. Tax Ninja LLC and its platform providers process that information only as necessary to provide, secure, support, maintain, and administer the Dock service, as described in Section 1.

3. How We Use Information

To deliver purchases: provisioning access, enrollment, onboarding, scheduling, delivering training and program materials, and providing support.
To operate accounts, the client portal, the community, and platform workspaces.
To process payments and recurring charges, prevent fraud, and maintain transaction records.
To send transactional and service communications: confirmations, receipts, access and login details, schedule and reminder notices, billing and renewal notices, program updates, and policy notices.
To administer program benefits, including verifying completion of an honest-review or feedback process where an incentive applies.
To send marketing communications about our programs, events, and offers, subject to your consent where required and always with the ability to opt out.
To personalize content and offers, including determining which offers are relevant to your role or program status.
To measure and improve the Services, including analytics on how our pages, funnels, and program content perform.
To conduct advertising and audience measurement where we enable such technologies, subject to Section 6.
To protect the Services, investigate suspected misuse or credential sharing, and enforce our Terms.
To comply with legal, tax, accounting, and recordkeeping obligations, and to establish, exercise, or defend legal claims.

We do not sell tax return information. We do not collect taxpayer return information from your clients through our public-facing website, forms, community, or marketing channels. Where you choose to place client information into your Dock workspace, we and our platform providers process it only as necessary to provide, secure, support, maintain, and administer the Dock service — not for our own marketing, and not to provide tax-preparation services to your clients.

Transactional and service messages. These relate to a registration, purchase, account, subscription, or support request and are sent as part of delivering what you asked for.

Marketing email. You may opt out at any time via the unsubscribe link in any marketing email or by emailing [email protected]. Opting out of marketing does not stop transactional and service messages.

Text messages (SMS). Where offered, promotional text messaging requires a separate, affirmative opt-in. Consent to receive promotional text messages is not a condition of purchase or of event registration. Message and data rates may apply; message frequency varies. Reply STOP to opt out and HELP for assistance. Mobile numbers collected for SMS consent are not sold or shared with third parties for their own marketing purposes; they are shared only with the messaging and CRM providers that transmit messages on our behalf.

Event-related communications. Registering for an event means we will send communications necessary to deliver that event. Any promotional SMS consent presented at registration is separate and optional.

We share information in these categories, and only as needed:

Service providers and processors, which may include: customer relationship management and marketing automation; website, funnel, and form hosting; payment processing; email delivery; text messaging; video conferencing and webinar hosting; course, portal, and community platforms; the Dock business-operations platform; cloud hosting and storage; analytics; customer support tooling; and professional advisers such as accountants and attorneys. These providers may use information only to perform services for us.
Advertising and measurement partners, where and to the extent we enable advertising or conversion-measurement technologies. See Section 6.
Financing and payment partners, where you elect a payment or financing option, to complete and reconcile the transaction.
In connection with a business transaction, such as a merger, acquisition, financing, or sale of assets, subject to customary protections.
For legal reasons: to comply with law, regulation, subpoena, or governmental request; to enforce our agreements; and to protect the rights, safety, and property of Tax Ninja LLC, our customers, or others.
With your direction or consent, including content you choose to post publicly in a community area or a review you choose to publish on a third-party platform.

Community visibility. Content you post in a community, group, or shared program space is visible to other participants and staff. Do not post confidential or client information there.

We do not sell personal information for money. See Section 9 regarding "sale" and "sharing" as defined under certain U.S. state privacy laws.

6. Cookies, Analytics, and Advertising Technologies

We and our providers use cookies, pixels, tags, SDKs, local storage, and similar technologies to operate the Services, remember preferences, secure sessions, measure performance, and — where enabled — support advertising and conversion measurement.

Categories used or that may be used:

Strictly necessary: session management, security, checkout and form functionality, load balancing.
Functional: preferences, saved settings, portal and community experience.
Analytics: page and funnel performance, aggregate usage measurement.
Advertising and measurement: campaign attribution, conversion measurement, audience building, and retargeting.

Current status of advertising technologies. The categories described here include technologies we use today and technologies we may enable in the future. The presence of a category or provider type in this policy does not mean that technology is currently active on the Services. Paid-media advertising and retargeting technologies are not currently enabled and are being held inactive pending completion of our security, consent, and configuration review. This policy will be updated to describe them accurately when they are enabled.

The types of providers whose technologies we use or may use include CRM and marketing-automation platforms, payment processors, web and product analytics platforms, tag management, social and advertising platforms, ad-measurement and attribution providers, video conferencing platforms, and email delivery providers.

Your choices. Most browsers let you block or delete cookies; blocking strictly necessary cookies may break checkout, login, or form functionality. You may also be able to use platform-level ad settings and industry opt-out tools. Where a consent or preferences tool is offered on the Services, you can use it to manage non-essential technologies. Where required by applicable law, we will honor browser-based opt-out preference signals for targeted advertising once such technologies are enabled.

7. Data Retention

We retain information for as long as needed for the purposes described in this policy, including: for the duration of your account, program access, or relationship with us; to meet legal, tax, accounting, and recordkeeping requirements; to resolve disputes; and to enforce our agreements. Retention periods vary by record type — transaction and tax records are retained for the periods required by applicable law, which are typically longer than the periods applied to marketing engagement data. When information is no longer needed, we delete it or de-identify it.

Platform workspace data. Following effective cancellation or termination of a Dock subscription, a 60-day data-export window is provided. After that window, customer-accessible data in that workspace may be permanently deleted and recovery is not guaranteed, subject to applicable legal requirements and the underlying platform's retention and backup practices. See the Tax Ninja 360 Enrollment & Program Terms, Section 7.

8. Security

We use administrative, technical, and physical safeguards appropriate to the nature of the information we handle, including access controls, encryption in transit, and reliance on established platform providers for hosting and payment processing. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for protecting your credentials and for the security practices of your own practice and systems. We hold no certification or regulatory approval other than as expressly stated in writing.

9. U.S. State Privacy Rights

Depending on your state of residence, you may have rights to:

know or access the personal information we have collected about you and how we use and disclose it;
request correction of inaccurate personal information;
request deletion of personal information, subject to exceptions;
obtain a portable copy of certain information;
opt out of the "sale" or "sharing" of personal information, and of targeted advertising; and
not be discriminated against for exercising these rights.

Business-to-business and professional contact information. Much of the information we hold is professional or business contact information used for business-to-business communications. Certain state privacy laws apply differently to that information; where a law applies, we honor the applicable rights.

How to exercise your rights. Email [email protected] with your request and the email address associated with your records. We will verify your identity before acting, typically by confirming control of the email address on file and details of your relationship with us. An authorized agent may submit a request on your behalf with proof of authorization. We respond within the timeframe required by applicable law. If we decline a request, we will explain why, and you may appeal by replying to our response with the subject line "Privacy Appeal."

"Sale" and "sharing." We do not sell personal information for money, and we do not currently share personal information for cross-context behavioral advertising. Certain advertising and measurement technologies, if and when enabled, may be treated as a "sale" or "sharing" for targeted advertising under some state laws; where that is the case, we will provide and honor an opt-out mechanism and update this policy before those technologies are enabled.

10. Children and Minors

The Services are intended for business and professional use by adults and are not directed to children. We do not knowingly collect personal information from anyone under 18. If we learn we have collected such information, we will delete it. If you believe a minor has provided information to us, contact [email protected].

11. Visitors Outside the United States

The Services are operated in and directed to the United States. If you access the Services from outside the United States, your information will be transferred to, stored, and processed in the United States, where privacy laws may differ from those in your location. By using the Services you understand that this transfer occurs.

12. Third-Party Platforms

Parts of the Services are delivered through third-party platforms — including CRM, portal, community, conferencing, payment, and business-operations platforms. Their processing of your information in connection with our Services is governed by our agreements with them and this policy; their processing for their own purposes is governed by their privacy policies. We encourage you to review the policies of any platform you use.

13. Changes to This Policy

We may update this policy. The "Last Updated" date reflects the current version. Material changes will be posted on this page and, where appropriate, notified by email.

14. Contact Us

Tax Ninja LLC (operating as Tax Ninja USA)

2918 Avenue I, Suite 5352

Brooklyn, New York 11210

General contact and privacy requests: [email protected]