Last updated: February 11, 2026
Privacy Policy
Your privacy is important to us. This policy explains how we collect, use, and protect your information.
1. Information We Collect
We collect information you provide directly to us, including:
- Account information (name, email, password)
- Profile information (photo, bio, preferences)
- Payment information (processed securely via Stripe)
- Course progress and learning data
- Communications with us (support requests, feedback)
- AI interaction data, including conversations with our AI tutor (SAM), learning analytics processed by AI, and AI-generated assessments and feedback
We also automatically collect certain information when you use our platform, including device information, IP address, browser type, and usage patterns.
2. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve our services
- Process transactions and send related information
- Send you technical notices and support messages
- Personalize your learning experience
- Power AI-driven personalized learning experiences via third-party AI providers (see our AI Transparency & Usage Policy for details)
- Analyze usage patterns to improve our platform
- Detect and prevent fraudulent activity
3. Information Sharing
We do not sell your personal information. We may share your information with:
- Service providers who assist in our operations
- AI service providers: Configured AI features may use Anthropic (Claude), OpenAI, DeepSeek, Google Gemini or Kimi. When you interact with AI features, relevant learning context and your messages are processed by these providers. Provider retention and training settings depend on the selected provider and account configuration. For complete details, see our AI Transparency & Usage Policy.
- Payment processors (Stripe) for transaction processing
- Professional advisors (lawyers, accountants)
- Law enforcement when required by law
- Other parties with your consent
4. Data Security
We implement industry-standard security measures to protect your data, including encryption in transit, hashed passwords, and access controls. Production services use encrypted connections where configured; provider-specific handling is described in the AI policy. For more information, visit our Security page.
5. Data Retention
Account and learning records are kept to provide your account and learning history. You can request account deletion in Settings. Requests may require authentication and payment reconciliation before processing.
We do not currently promise automatic deletion after a fixed number of days for every record type. Payment, security and support records may need separate review. Contact us for the retention and deletion terms that apply to your request.
6. Your Rights
Depending on your location, you may have the right to:
- Access your personal data
- Correct inaccurate data
- Delete your data ("right to be forgotten")
- Export your data in a portable, machine-readable format (data portability)
- Restrict the processing of your data
- Object to processing, including automated profiling and AI-driven personalization
- Opt out of marketing communications
- Withdraw consent at any time, where processing is based on consent
- Not be subject to decisions based solely on automated processing that produce legal or similarly significant effects (Article 22, GDPR)
- Lodge a complaint with a supervisory authority
To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days.
8. International Transfers
Information may be processed outside your country depending on the services used. The applicable processing locations, transfer safeguards and provider agreements must be confirmed for the service and jurisdiction involved. Contact us for the current details before providing information subject to specific residency or transfer requirements.
9. Children's Privacy
Our services are not directed to children under 13. We do not knowingly collect information from children under 13. If we learn that we have collected personal information from a child under 13, we will take steps to delete that information promptly.
10. California Privacy Rights (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):
- Right to know: You can request details about the categories and specific pieces of personal information we have collected about you.
- Right to delete: You can request deletion of your personal information, subject to certain exceptions.
- Right to opt-out of sale: We do not sell your personal information. If this changes, we will provide a "Do Not Sell My Personal Information" mechanism.
- Right to non-discrimination: We will not discriminate against you for exercising your CCPA rights.
- Right to correct: You can request that we correct inaccurate personal information.
- Right to limit use of sensitive data: You can limit how we use sensitive personal information.
To exercise your CCPA rights, contact us at [email protected]. We will verify your identity before processing your request.
11. AI Transparency
Taxomind uses artificial intelligence extensively to provide personalized learning experiences. For comprehensive information about our AI practices, including what data is processed by AI, how AI decisions are made, and your rights regarding AI, please see our AI Transparency & Usage Policy.
12. Changes to This Policy
We may update this policy from time to time. We will notify you of significant changes by email or through our platform. Your continued use of the platform after changes are posted constitutes acceptance of the revised policy.
13. Contact Us
If you have questions about this privacy policy, please contact us at [email protected]
Data Protection Officer: [email protected]