Deduction.com

‍

Effective Date: July 2, 2025

‍

When you use Treasur dba Deduction’s services (we call ourselves “Deduction,” “we,” or “our”), you trust us with your personal data. Protecting that personal data is core to our mission. This policy explains—in plain language and with concrete examples—what we collect, why we need it, and how you stay in control.

‍

Why we collect personal data

We collect data we need to provide you with our services, which includes filing your taxes accurately and running Deduction safely.

‍

Example: We ask for your Social Security Number (SSN) because the IRS requires it on your tax return.

We also collect other personal data directly from you and also from third parties to make Deduction work smoothly and keep things secure.

Additionally, we and our service providers rely on standard technologies to collect this data, namely we use:

‍

• Cookies: Small text files websites put on your device. They help Deduction remember your preferences, keep you logged in, and show us how people use our site so we can make it better.
• Local storage technologies: Like cookies, but they can hold more data on your device for certain app functions.
• Web beacons (pixel tags/clear GIFs): Tiny images that tell us if a webpage or email was opened or if you clicked something.

‍

How we use your personal data

We use your personal data to deliver our services to you and to work towards consistently making the experience better for you and all of our users. At a high level, this includes using your personal data to power our services and to communicate with you.

‍

As some examples, we use your personal data for:

‍

• Tax preparation & filing – Build your return, calculate deductions, and e‑file with the IRS and states you select.
• Personalized advice – Suggest ways to reduce next year’s taxes.
• Service operations – Maintain security, troubleshoot bugs, and measure performance so Deduction stays fast and reliable.

We do not sell your personal data to third parties. Period.

‍

We may also use this data for research and development to analyze and improve Deduction and our business, sometimes creating aggregated or anonymous data that doesn't identify you personally. Sometimes, we might send you direct marketing, like newsletters, but you can always opt out of receiving these communications by clicking "unsubscribe."

‍

Finally, we may use this data to fulfill our obligations under applicable laws, to protect our company and our legal rights and defend ourselves against legal claims or disputes. This means we might use your personal data to comply with valid subpoenas or government requests, protect our rights (and yours, and others'), audit our processes for compliance, enforce our terms, and prevent fraud, cyberattacks, or any other illegal activity.

‍

When we share personal data (and why)

When it comes to sharing your data with third parties for the purpose of provide you our services, we share your data externally as needed for preparing and filing your taxes:

‍

1. Government tax authorities – We electronically transmit the personal data you approve—including your full Social Security Number—directly to the IRS and any state revenue departments you select. This is required to file your return.
2. Trusted service providers – Third‑party companies and advisors we rely on to operate Deduction.:
   • Cloud infrastructure & storage (e.g., AWS, GCP) that host our encrypted databases and backups.
   • AI model providers that extract numbers from your documents. They process text in secure memory and we do not permit them to store your SSN or other data once extraction is complete or to improve their own models using your data
   • Tax engine & e‑file transmitter that formats your return and sends it to the IRS/state systems. This vendor is an IRS‑authorized transmitter, complies with GLBA, and passes annual Modernized e‑File (MeF) testing.
   • Identity‑verification, e‑signature, and email services that help us confirm it’s really you and deliver signed forms.
3. With your explicit written direction – For example, if you ask us to pre‑fill a mortgage or credit‑card application or email your filed return to a lender, we will first obtain your signed consent on an IRS‑approved form and then share only the data that lender needs.

‍

Additionally, like all business, we may also share your data with third parties for purposes related to running and maintaining our business. This includes:

‍

1. Authorities and others – We may disclose your personal data to law enforcement, government authorities, and private parties, as we believe in good faith to be necessary or appropriate for the compliance and protection purposes.
2. Advertising partners, which are third party advertising companies, including for the interest-based advertising purposes described in this privacy policy. However, we do not share your non‑public personal information with advertising partners. To learn more, please see our GLBA notice.
3. Business transfers – We may sell, transfer or otherwise share some or all of our business or assets, including your personal data, in connection with a business transaction (or potential business transaction) such as a corporate divestiture, merger, consolidation, acquisition, reorganization or sale of assets, or in the event of bankruptcy or dissolution

All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties except when required by law enforcement and government authorities as required by law or valid legal request.

‍

‍

Your choices & rights

You have control over your account. Within your account settings or in some cases by contacting us, you can:

‍

• Review or download – View or export the data we have on your profile at any time.
• Correct – Fix typos or outdated info directly in the app or by emailing us.
• Delete – Close your account and request deletion; we erase live data within 30 days except where the law says we must keep it (e.g., IRS record‑retention rules).

Opt‑out of marketing email – Additionally, you may opt out of marketing-related emails by clicking “unsubscribe” at the bottom of any email we send you. You may continue to receive service-related and other non-marketing emails.

‍

Limit Online Tracking – Further, there are many ways to limit online tracking, which we have summarized below. These tools are not associated with us and we cannot guarantee that they work as their providers advertise them, but we have included this information for your knowledge:

‍

• Blocking cookies in your browser. Most browsers let you remove or reject cookies. To do this, follow the instructions in your browser settings. Many browsers accept cookies by default until you change your settings. For more information about cookies, including how to see what cookies have been set on your device and how to manage and delete them, visit https://www.allaboutcookies.org/.
• Using privacy plug-ins or browsers. You can block our websites from setting cookies by using a browser with privacy features, like Brave, or installing browser plugins like Privacy Badger, Ghostery, or uBlock Origin, and configuring them to block third party cookies/trackers. You can also opt out of Google Analytics by downloading and installing the browser plug-in available at: https://tools.google.com/dlpage/gaoptout.
• Advertising industry opt out tools. You can also use these opt out options to limit use of your personal data for interest-based advertising by participating companies:
  
  • Digital Advertising Alliance for Websites: optout.aboutads.info and https://www.aboutads.info/appchoices (for mobile opt outs);
  • Network Advertising Initiative: optout.networkadvertising.org 
• Platform Opt-Outs. You can also use the opt-out features offered by third-party advertising platforms, such as:
  
  • LinkedIn opt-out
  • Google opt-out
  • Facebook

Note that because these opt-out mechanisms are specific to the device or browser on which they are exercised, you will need to opt out on every browser and device that you use.

‍

Do Not Track. Some Internet browsers may be configured to send “Do Not Track” signals to the online services that you visit. We currently do not respond to “Do Not Track” or similar signals. To find out more about “Do Not Track,” please visit http://www.allaboutdnt.com.

‍

Data retention

‍

Where required under applicable laws, we retain personal data only for as long as is necessary to fulfill the purposes for which it was collected and processed, in accordance with our retention policies, and in accordance with applicable laws and regulatory obligations. For example, we keep the records the IRS requires for at least 7 years, unless you ask us to delete sooner and the law allows it. Backup tapes roll off after 35 days.

‍

To figure out how long we keep personal data, we look at things like how much data it is, what kind of data it is, and how sensitive it is. We also consider the risk if someone unauthorized got hold of it, why we need it, and if we can still achieve those goals without keeping it as long.

‍

Children’s privacy

‍

Deduction is designed for adults. However, preparing an accurate U.S. tax return often requires details about your dependents — sometimes children under 13 — such as their name, date of birth, and Social Security Number. We collect this personal data only when you, the parent or legal guardian, provide it to us. If we learn that we have collected personal data through the website directly from a child under 13 without the consent of the child’s parent or guardian as required by law, we will delete it.

‍

We do not let children create accounts or submit data themselves, and we do not use children’s personal data for marketing or profiling.

‍

Changes to this policy

‍

We reserve the right to modify this Privacy Policy at any time. For regular updates, we will post the updated policy within the service and on deduction.com. If we make material changes, we’ll also notify you via email within the service before it takes effect.

‍

How to contact us

Questions or concerns? We’re here to help.

‍

Email: support@deduction.com

Mail: 1500 South Grant Street, #4201, Denver, CO 80210, US

‍

Gramm‑Leach‑Bliley Act (GLBA) notice

Please review our GLBA Privacy Notice to learn more about our collection, use and sharing of your financial information. We do not disclose your non‑public personal information to anyone outside the limited sharing described in Section 4 and in our GLBA Privacy Notice.

‍

If we ever change the way we share or protect your non-public personal information under the GLBA, we will issue an updated notice as required and give you the legally required time to review your options.