Last Updated: March 15, 2024
1. Introduction
ElevaTax ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our cryptocurrency tax software, website, and related services (collectively, the "Services").
Please read this Privacy Policy carefully. By accessing or using our Services, you acknowledge that you have read, understood, and agree to be bound by all terms outlined in this Privacy Policy.
2. Information We Collect
2.1 Personal Information
We may collect the following types of personal information:
- Account Information: Name, email address, phone number, and password when you create an account.
- Profile Information: Profile picture, bio, and preferences you choose to provide.
- Billing Information: Payment method details, billing address, and transaction history (processed securely through third-party payment processors).
- Identity Verification: Government-issued ID, date of birth, and other verification information when required for compliance.
2.2 Financial Information
To provide our tax reporting services, we collect:
- Transaction Data: Cryptocurrency transaction history from connected exchanges and wallets.
- Portfolio Information: Your cryptocurrency holdings and trading activity.
- Tax Information: Previous tax returns, cost basis information, and tax identification numbers.
2.3 Technical Information
- Log Data: IP address, browser type, operating system, and pages visited.
- Device Information: Device type, unique device identifiers, and mobile network information.
- Cookies: Data collected through cookies and similar technologies (see our Cookie Policy for details).
3. How We Use Your Information
We use the information we collect to:
- Provide Services: Calculate your crypto taxes, generate reports, and provide customer support.
- Improve Our Services: Analyze usage patterns to enhance user experience and develop new features.
- Communicate: Send updates, security alerts, and administrative messages.
- Comply with Laws: Meet legal and regulatory requirements, including tax reporting obligations.
- Prevent Fraud: Detect and prevent fraudulent activities and unauthorized access.
4. Legal Basis for Processing (GDPR)
For users in the European Economic Area (EEA), we process your personal information based on:
- Contract Performance: To provide our Services under our Terms of Service.
- Legal Obligations: To comply with applicable laws and regulations.
- Legitimate Interests: To improve our Services and prevent fraud.
- Consent: When you have given explicit consent for specific processing activities.
5. Information Sharing and Disclosure
We may share your information with:
- Service Providers: Third-party vendors who help us provide our Services (e.g., cloud hosting, payment processing).
- Tax Authorities: When required by law or with your authorization to file tax reports.
- Business Transfers: In connection with a merger, acquisition, or sale of assets.
- Legal Compliance: To comply with court orders, subpoenas, or other legal processes.
We do not sell your personal information to third parties for marketing purposes.
6. Data Security
We implement industry-standard security measures to protect your information:
- 256-bit encryption for data in transit and at rest
- Regular security audits and penetration testing
- Multi-factor authentication for account access
- Strict access controls and employee training
However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.
7. Data Retention
We retain your information for as long as your account is active or as needed to provide Services. We may retain certain information as required by law, for tax reporting purposes, or for legitimate business interests. Typically, we retain transaction data for 7 years to comply with tax regulations.
8. Your Rights and Choices
8.1 Access and Control
Depending on your location, you may have the right to:
- Access the personal information we hold about you
- Correct inaccurate information
- Delete your information (subject to legal requirements)
- Restrict or object to processing
- Data portability
- Withdraw consent at any time
8.2 Account Settings
You can update your account information through your profile settings. To delete your account, contact us at privacy@elevatax.com.
8.3 California Privacy Rights (CCPA)
California residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect and the right to request deletion.
9. International Data Transfers
Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place through standard contractual clauses approved by the European Commission.
10. Children's Privacy
Our Services are not intended for individuals under 18. We do not knowingly collect information from children. If you believe we have collected information from a child, please contact us immediately.
11. Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of material changes by email or through our Services. Your continued use after changes constitutes acceptance of the revised policy.
12. Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us:
ElevaTax Privacy Team
Email: privacy@elevatax.com
Phone: +1 (888) 358-2891
Mail: 123 Crypto Street, Suite 100, San Francisco, CA 94105
For GDPR inquiries: dpo@elevatax.com