Privacy Policy

Effective date: to be set at launch · simple1099.tax

simple1099.tax is operated by Simple Filings LLC (Winchester, Kentucky). We exist to e-file information returns, which means you trust us with some of the most sensitive data a business handles — including other people's taxpayer identification numbers. This policy explains what we collect, why, how it is protected, and what we will never do with it. It goes with our Terms of Service.

1. What we collect

Account information: your name, email address, and password (stored only in hashed form).
Filing information: what your returns require — payer details (including the payer's EIN or SSN), recipient details (name, address, and taxpayer identification number), payment amounts, withholding, and the elections and signatures (name, title, and PIN) that go with a filing.
Payment information: the metadata of your purchases — amounts, confirmation numbers, payment status, and a payment token. Card numbers never reach us; see Section 4.
Technical information: the ordinary records of using a web service — IP address, browser type, and logs of requests — used for security and troubleshooting.

2. Why we collect it

We use your information to:

prepare and transmit your filings to the IRS — the purpose the Service exists for. Your records are converted into the IRS's required electronic format and transmitted as you approved them;
generate your receipts and the recipient copies you furnish;
send transactional email about your account and filings — registration, receipts, and filing-status updates;
answer your support requests;
secure the Service, prevent fraud and abuse, and meet our legal obligations.

We do not use your filing data for advertising, and we do not sell it to anyone.

3. How taxpayer identification numbers are protected

TINs (SSNs and EINs) get the strictest handling in the platform, and the protection is structural, not policy-only:

Encrypted at rest. TINs are stored only in encrypted form.
Excluded from audit logs. Our systems keep change-history logs; TIN values are excluded from them by design.
Never served in full. The product and its API responses show only the last four digits. The full value is used where the filing requires it — in the records transmitted to the IRS and on the recipient copies you download to furnish.
Matched without decryption. Where the system needs to look a TIN up (for example, duplicate detection), it matches a one-way fingerprint of the value, not the value itself.

4. Payment card data

Payments are processed by Square. Your card details go from your browser directly to Square, which returns us a one-time payment token — we never receive and never store card numbers. What we keep is the transaction record: the amount, status, confirmation number, and token reference. Square's own privacy policy governs its handling of your card data.

5. Service providers

We use a small set of providers to run the Service, each only for its function: Square (payment processing), SendGrid (transactional email delivery), and Amazon Web Services (cloud infrastructure the Service runs on). These providers process data on our behalf; they are not permitted to use it for their own purposes.

6. When information is disclosed

We disclose your information only:

to the IRS, as your filings direct — that is the Service;
to the service providers above, to operate the Service;
when the law requires it — a subpoena, court order, or other legal process — or to protect the rights, safety, or property of our customers, the public, or Simple Filings;
as part of a merger, acquisition, or sale of assets, in which case this policy continues to apply to the transferred data.

We do not sell personal information, and we do not share it for advertising.

7. Retention

Tax filings are records the IRS expects payers to be able to produce, so we retain transmitted filings and their supporting data for at least four years after the filing year. Account information is retained while your account is active and then for the same record-keeping window. Data that no longer needs to be kept is deleted or anonymized.

8. Security

Data moves to and from the Service over encrypted connections (TLS) and lives in access-controlled infrastructure, with the TIN protections described in Section 3 on top. No internet service can promise perfect security, but if we learn of a breach affecting your data we will notify you as the law requires.

9. Your choices and rights

You can review and correct your account and filing information in the product, and you can ask us at any time what we hold about you, or to delete what the record-keeping duties above do not require us to keep. Recipients whose information appears in a filing may contact us about it, though corrections to a filed record are made by the payer who filed it. Write to support@simple990.com and we will respond.

10. Children

The Service is for businesses and payers, is not directed to children, and we do not knowingly collect information from children under 13.

11. Changes to this policy

We may update this policy from time to time. If a change is material, we will give notice — for example by email or a notice in the Service — before it takes effect. The current version always lives at this address.

12. Contact

Simple Filings LLC · Winchester, Kentucky
support@simple990.com