1. Information We Collect
We collect information you provide directly to us, including:
- Account information (name, email, password)
- Profile information (photo, bio, preferences)
- Payment information (processed securely via Stripe)
- Course progress and learning data
- Communications with us (support requests, feedback)
- AI interaction data, including conversations with our AI tutor (SAM), learning analytics processed by AI, and AI-generated assessments and feedback
We also automatically collect certain information when you use our platform, including device information, IP address, browser type, and usage patterns.
2. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve our services
- Process transactions and send related information
- Send you technical notices and support messages
- Personalize your learning experience
- Power AI-driven personalized learning experiences via third-party AI providers (see our AI Transparency & Usage Policy for details)
- Analyze usage patterns to improve our platform
- Detect and prevent fraudulent activity
3. Information Sharing
We do not sell your personal information. We may share your information with:
- Service providers who assist in our operations
- AI service providers: We use Anthropic (Claude), OpenAI, and DeepSeek to power our AI-driven learning features. When you interact with AI features, relevant learning context and your messages are processed by these providers. Your data is transmitted securely and is not used to train their AI models. For complete details, see our AI Transparency & Usage Policy.
- Payment processors (Stripe) for transaction processing
- Professional advisors (lawyers, accountants)
- Law enforcement when required by law
- Other parties with your consent
4. Data Security
We implement industry-standard security measures to protect your data, including encryption, access controls, and regular security audits. All data transmitted to third-party services, including AI providers, is encrypted using TLS 1.2 or higher. For more information, visit our Security page.
5. Data Retention
We retain your information according to the following schedule:
- Account data: Retained while your account is active, plus 30 days after account deletion to allow for account recovery
- Learning analytics and progress data: Retained for up to 3 years to support long-term learning insights and skill tracking
- AI conversation logs: Retained for up to 1 year, after which they are anonymized or deleted
- Payment records: Retained for 7 years as required by applicable tax and financial regulations
- Support communications: Retained for up to 2 years after resolution
You can request deletion of your data at any time by contacting us. Some data may be retained longer where required by law or for legitimate business purposes.
6. Your Rights
Depending on your location, you may have the right to:
- Access your personal data
- Correct inaccurate data
- Delete your data ("right to be forgotten")
- Export your data in a portable, machine-readable format (data portability)
- Restrict the processing of your data
- Object to processing, including automated profiling and AI-driven personalization
- Opt out of marketing communications
- Withdraw consent at any time, where processing is based on consent
- Not be subject to decisions based solely on automated processing that produce legal or similarly significant effects (Article 22, GDPR)
- Lodge a complaint with a supervisory authority
To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days.
7. Cookies and Tracking
We use cookies and similar technologies to enhance your experience, analyze usage, and assist in our marketing efforts. You can control cookies through your browser settings or our cookie consent mechanism.
For complete details about the cookies we use and how to manage them, please see our Cookie Policy.
8. International Transfers
Your information may be transferred to and processed in countries other than your own, including the United States. When we transfer personal data outside of the European Economic Area (EEA), United Kingdom, or Switzerland, we ensure appropriate safeguards are in place, including:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Data Processing Agreements with all third-party providers, including AI service providers
- Adequacy decisions where applicable
9. Children's Privacy
Our services are not directed to children under 13. We do not knowingly collect information from children under 13. If we learn that we have collected personal information from a child under 13, we will take steps to delete that information promptly.
10. California Privacy Rights (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):
- Right to know: You can request details about the categories and specific pieces of personal information we have collected about you.
- Right to delete: You can request deletion of your personal information, subject to certain exceptions.
- Right to opt-out of sale: We do not sell your personal information. If this changes, we will provide a "Do Not Sell My Personal Information" mechanism.
- Right to non-discrimination: We will not discriminate against you for exercising your CCPA rights.
- Right to correct: You can request that we correct inaccurate personal information.
- Right to limit use of sensitive data: You can limit how we use sensitive personal information.
To exercise your CCPA rights, contact us at [email protected] or call our privacy line. We will verify your identity before processing your request.
11. AI Transparency
Taxomind uses artificial intelligence extensively to provide personalized learning experiences. For comprehensive information about our AI practices, including what data is processed by AI, how AI decisions are made, and your rights regarding AI, please see our AI Transparency & Usage Policy.
12. Changes to This Policy
We may update this policy from time to time. We will notify you of significant changes by email or through our platform. Your continued use of the platform after changes are posted constitutes acceptance of the revised policy.
13. Contact Us
If you have questions about this privacy policy, please contact us at [email protected]
Data Protection Officer: [email protected]