Contents

Personal Information We Collect

How We Use Your Personal Information

How and Why We Disclose Your Personal Information

Tax Return Information

Cookies, Tracking Technologies, and Interest-Based Advertising

How We Safeguard Your Personal Information

Children’s Privacy

Data Storage and Transfer

Generative Artificial Intelligence, Machine Learning and Related Tools.

Other Online Services

Your Choices

Additional California, Minnesota, Montana, and Oregon Disclosures

Accessibility

We at TaxAct (“TaxAct”) respect your privacy and the confidentiality of your personal information as described in this Privacy Notice (the “Privacy Notice”). This Privacy Notice explains how and why TaxAct collects, uses, and discloses your personal information, and how you may exercise the choices and rights available to you with respect to your personal information.

This Privacy Notice applies to all TaxAct properties that link to it, including websites, such as https://www.taxact.com and https://www.taxactprofessional.com (collectively, the “Site”); products, software, and services, such as our online tax filing service and professional software (the “Professional Services”); and applications, such as our mobile application (the “App”) (collectively, the “Services”).

TaxAct, as a tax preparer and tax software developer, is subject to the Gramm-Leach Bliley Act (“GLBA”). You may review our GLBA Privacy Notice at https://www.taxact.com/GLBA-notice.

If you have an unresolved privacy or data use concern you have raised that you feel we have not addressed satisfactorily, please contact our U.S. based third-party dispute resolution provider (free of charge) at https://feedback-form.trustarc.com/watchdog/request.

Personal Information We Collect

We, and our vendors, may collect personal information directly from you (such as when you register for and use the Services), automatically when you access the Services, and through online tracking technologies (see Cookies and Other Tracking Technologies section below). Our primary goals in collecting personal information are to (i) offer, provide, and improve the features and content of our Services, (ii) administer your use of our Services, and (iii) enable our customers to enjoy and easily navigate our Services. The personal information we collect about you may vary depending on the nature of your interactions with us.

You may provide us with personal information of others, in which case you represent to us that you have obtained authorization from those individuals to provide us with such personal information.

Certain personal information is required to purchase, download, and effectively use our Services. If you do not wish for us to collect and/or use your personal information or request to delete such information, this may result in a termination of your user account or your inability to use the Services. Please see the Your Choices section for more information.

We may collect the following categories of personal information when you interact with us, our affiliates, vendors, partners, and co-sponsors, including when you use or access the Services:

Contact Information: We collect personal information in order to respond to your inquiries and provide our Services, including, when you register to use our tax software, such as:

• Name;

• Address;

• Email; or

• Phone number

Tax Return Information: If you decide to prepare or file a tax return using our Services, we collect personal information, such as:

• Name;

• Social Security number;

• Driver’s license number;

• Employment information;

• Spouse and dependent information;

• Income;

• Deductions; or

• Any other information included in your return.

Uploaded Documents: We collect personal information provided in any forms, files, or other data that you may choose to upload or import to our Services.

Information Provided From Third Parties That You Utilize Within Our Services: You can choose to permit or, in some cases, restrict third-party websites or applications that integrate with our Services. If you provide your third-party credentials, we may receive your name and email address associated with such third-party websites or applications, along with additional information that the application has elected to make available to TaxAct to facilitate the integration.

Financial Information: We may collect account, card, or payment information, such as when you purchase our products and Professional Services. If you pay using a credit card, we and our payment processor may collect financial information such as credit card number and expiration date.

Professional Preparer Information: If you use our Professional Services to prepare the taxes of others, we may also collect information regarding your tax preparation business, such as:

• Business name;

• Business address;

• Business email;

• Business phone;

• Name of individual designated as contact for business;

• Size and nature of practice; or

• Tax registration information, e.g., PTIN / EFIN.

Communications: We may collect certain personal information provided in your communications with us. In some cases, we record your interactions with our support service team upon notifying you that a recording will be made.

Marketing Communications: We collect personal information you may provide us to sign up for communications, including, in connection with marketing emails, blog content, customer testimonials, surveys, promotions, contests, sweepstakes, marketing events, trade shows, webinars, conferences, customer research, gated content, feedback, or a similar event or occurrence.

Referrals: Information from your use of our referral service to tell a friend about our site, including your friend’s name and email address.

Publicly Available Information: In addition to the information you provide, we may also collect information from publicly available sources, affiliated companies, or third parties, such as when we partner with other companies or use service providers to help us optimize our marketing activities.

Automatically Collected Information: TaxAct collects information about your browser or device interactions with the Services. Automatically collected information may be combined with other information we collect about you to improve our Services, and our marketing, analytics, and Site functionality. This information may include:

• Computer or Device Information

  you use to access our Services, including:

  • IP address;

  • hardware model;

  • operating system version;

  • mobile network information;

  • location information; or

  • other information that identifies your computer or device.

• User Interaction Information

  about your use of the Services, including:

  • type of browser;

  • loading and access times;

  • pages viewed and features accessed;

  • the page visited before navigating to our Services;

  • whether you have started or completed use of an offering; or

  • other events that occur while engaging with our Services.

• Geolocation Data: We may collect geolocation data, including information derived from your IP address and collected from our Services, for analytics, marketing, and access purposes. You may control certain geolocation collection through your browser or mobile device settings.

How We Use Your Personal Information

In addition to the other uses described in this Privacy Notice, we may use your personal information for the following purposes:

• To complete orders and provide you our Services, including, using tax return information to prepare or assist in preparing your tax return, as described further below.

• To assist the development of our Services, including to:

  • Generally analyze and improve the Services we offer to you;

  • Better understand the functionality of our Services; or

  • Provide a customized or personalized experience.

• To create, maintain, customize, and secure your account with us.

• To communicate with you, including, to:

  • Send marketing messages or to show you advertising;

  • Notify you of new or enhanced products and services;

  • Communicate with people you tell us might be interested in our services, if you choose to use our referral service to tell them about us; or

  • Provide text message alerts for product information, status, tips or promotions, or other marketing activities.

• To maintain the safety, security, and integrity of our Site and Services, databases and other technology assets, and business.

• To address issues that may arise, including to:

  • Notify you if there are issues with the Service or your order;

  • Send you product or technical notices, updates, and security alerts;

  • Research and address any questions or problems submitted through our technical support and customer service systems;

  • Monitor and investigate fraud, identity theft, and other illegal activity; or

  • Protect the safety and security of TaxAct, our Services, our customers, and others.

• As described to you when collecting your personal information.

• To operate our business, including, as necessary for internal administrative purposes, recordkeeping and auditing, risk management, and to manage our relationships.

• To protect and secure our business, including preventing, investigating, identifying, or taking any other action with regard to suspected or actual fraudulent or illegal activity, or any activity that violates or may violate applicable laws, regulations, or legal process and our policies.

• To fulfill our legal obligations, including complying with applicable laws, regulations, or legal processes as well as industry standards and our company policies.

• In the event of corporate restructuring, including evaluating or conducting a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by us is among the assets transferred.

How and Why We Disclose Your Personal Information

We may disclose your personal information in the course of supporting and providing our Services, as follows:

• As You Direct in the Services: We disclose Tax Return Information in accordance with your requests, such as when you direct us to file a tax return with the IRS or to a state taxing authority or you provide your express consent to disclose information to a third party offering its own product or service.

• Vendors Supporting the Services: To vendors, consultants, and service providers who assist us in providing our Services and use and disclose such personal information to perform services on our behalf.

• Co-sponsors and Partners: To promotional co-sponsors or other TaxAct partners as part of joint marketing efforts and other partnership activities.

• Marketing Vendors: To companies, including our affiliated entities and third parties, that provide services that help us market our products or otherwise support the promotion of our business.

• Legal Compliance, Law Enforcement, and Regulatory Requests: For compliance, enforcement, and public safety purposes, including to taxing authorities, law enforcement, government agencies, and other parties to comply with any applicable law, regulation, or legal process, such as subpoenas and court orders; to carry out investigations; to protect and defend our rights and property or the rights or safety of other parties; for crime-prevention purposes; or as otherwise required by any applicable law, rule, or regulation.

• Fraud and Abuse Prevention: If we believe your actions are inconsistent with the spirit or language of our user agreements or policies, or to protect the rights, property, and safety of TaxAct or others.

• In a Merger: In connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business by another company.

• For Use by Our Affiliates: For our affiliated companies to assist in providing and maintaining the Services or for other permitted business. If you use our Professional Services to prepare the taxes of others, we may disclose your information with our affiliates. You can learn more about and access the privacy notice of our affiliates at: https://www.drakesoftware.com/sharedassets/notice/drakesoftwareprivacynotice.pdf and https://www.1040.com/privacy.

• Mobile Phone Number: We may disclose your mobile phone number to vendors that assist us with providing text message alerts for product information, tips or promotions, or other marketing activities; however, we will not disclose your mobile text messaging information with third parties or our affiliates for marketing or promotional purposes.

Tax Return Information

We use Tax Return Information you provide us in order to prepare a tax return. The use and disclosure of Tax Return Information is governed by Section 7216 of the Internal Revenue Code and many state codes and their associated regulations. We use your Tax Return Information only in accordance with applicable laws, including Section 7216 of the Internal Revenue Code, to do the following things:

• To prepare or assist in the preparation of tax returns;

• To allow tax professionals to assist you with questions or tax preparation;

• To obtain, manage, or market services in connection with the preparation of tax returns;

• To provide you with our tax preparation products and services or, if you expressly consent, other products or services;

• For other uses or disclosures as you expressly consent to from time to time; or

• As required by law.

Cookies, Tracking Technologies, and Interest-Based Advertising

We or our vendors may use tracking technologies, such as cookies, web beacons, and pixels (collectively, “Cookies”), to collect certain information when you interact with the Services. We may use Cookies for several purposes, including:

• Storing information to help the Services function properly;

• Helping you access and navigate the Services more efficiently;

• Recognizing your login information and preferences, so that you do not need to enter the information each time you visit the Services;

• Analyzing your use of the Services, including, collecting information about which pages on our Services you viewed or links you clicked and how you interacted with our content during your visit or over multiple visits;

• Customizing your browsing experience by showing you information more likely to be relevant to you; and

• Delivering and customizing advertisements and tracking advertising campaigns.

We use certain web analytics services, such Google Analytics, to help us understand and analyze how visitors use our Services. We use this information to implement Google advertising features such as dynamic remarketing, interest-based advertising, audience targeting, behavioral reporting, demographics and interests reporting, user segment analysis, device reporting, display advertising, video ads reporting, and impression reporting.

Third-party ad technology companies and advertisers, including Meta and TikTok, may use, store, or access Cookies to collect or receive information from our Services and elsewhere on the internet and use that information to provide advertising services to us, including, interest-based advertising or advertisements targeted to your interests.

In certain instances, we may contract with vendors to help us analyze activity through our Services, including our chat functionality, through session replay technologies that allow us to review the history of how visitors use our Services and to improve our Services. These technologies may collect the following types of information, among others: IP address; screen size; device type (unique device identifiers); browser information; geographic location; and preferred language.

We or our vendors may collect personal information about your online activities over time and across different devices and online websites when you access the Services. We and our vendors may link the information collected by tracking technologies to other information collected about you.

If you have questions about our use of cookie or other similar technologies, please contact us at privacy@taxact.com.

Your Cookie Choices

We use Cookies, including those listed below, to obtain information on how visitors interact with our Services or for marketing and advertising our Services to you. These tools collect information about the performance of our Services and how visitors navigate around and interact with our Site’s web pages, which allows us to evaluate and further improve and optimize our web pages.

For more information on the below Cookies, please click on the links:

• Facebook Privacy Policy (https://www.facebook.com/privacy/policy/) – To better assess and optimize our marketing activities, we may use the “Meta Pixel” operated by Meta (formerly Facebook) to collect or receive information from our Site and elsewhere on the internet and use that information to provide advertising services to us, including interest-based advertising or advertisements targeted to your interests. We do not use the Meta Pixel within our tax product and it will not collect tax return or financial information. To change your privacy and advertising settings with Facebook, login to your Facebook account and navigate to the Privacy Center at https://www.facebook.com/privacy/center or review your Ad Preferences at https://www.facebook.com/adpreferences.

• Google (https://policies.google.com/technologies/partner-sites) - We use the information from Google Analytics to analyze and improve our Services. For more information on how Google Analytics uses data collected through the Services, visit: https://policies.google.com/technologies/partner-sites.

  • To opt out of Google Analytics, visit: https://tools.google.com/dlpage/gaoptout/.

  • To control Google Ads, visit: https://myadcenter.google.com/home.

• Intercom (https://www.intercom.com/) – We have contracted with Intercom to provide chat/messenger functionality in our Services. For more information on how Intercom uses tracking technologies to provide its chat/messenger services, visit: https://www.intercom.com/help/en/articles/2361922-intercom-messenger-cookies. For more information on how Intercom uses data collected through the services, visit: https://www.intercom.com/legal/privacy.

• LinkedIn (https://www.linkedin.com/) – We may use LinkedIn to optimize our marketing activities. For more information on LinkedIn Cookie practices, see the https://www.linkedin.com/legal/cookie-policy and for more information on how LinkedIn collects or receives personal information through tracking technologies, visit:

  www.linkedin.com/legal/privacy-policy.

• Microsoft (https://privacy.microsoft.com/en-us/privacystatement) - For information on how Microsoft collects or receives personal information through tracking technologies to provide Microsoft Advertising, view the Microsoft Privacy Statements at https://privacy.microsoft.com/en-us/privacystatement.

• Optimizely Privacy Notice (https://www.optimizely.com/legal/privacy-notice/) and Data Subject Rights (

  https://privacyportal-cdn.onetrust.com/dsarwebform/1b599339-d045-4e2a-bde8-37ce346ab896/f6b0dc19-39c9-4553-bae5-b0306087d29e.html) – We may use Optimizely to test variations, analyze, and direct traffic on our website and in our products.

• Pinterest (https://policy.pinterest.com/en/privacy-policy) – Pinterest may be used to provide online behavioral advertising for marketing purposes.

• Reddit (https://www.reddit.com/policies/privacy-policy?rdt=41967) – We may use Reddit to optimize our marketing activities. For more information on how Reddit collects or receives personal information through tracking technologies, visit: https://www.reddit.com/policies/privacy-policy?rdt=41967.

• Snap (https://values.snap.com/privacy/privacy-policy) – We may use Snapchat to optimize our marketing activities. For more information on how Snap collects or receives personal information through tracking technologies, visit: https://values.snap.com/privacy/privacy-policy.

• The Trade Desk (https://www.thetradedesk.com/us/privacy) - The Trade Desk may be used to provide targeted advertising for marketing purposes. To opt out, please go to Data Access Portal | The Trade Desk (https://www.adsrvr.org/) to review your options.

• Yahoo (https://legal.yahoo.com/us/en/yahoo/privacy/index.html) – We have contracted with Yahoo to monitor certain pages of our website for the purpose of reporting web traffic, statistics, advertisement “click-throughs,” and/or other activities on our Site. Where authorized by us, Yahoo may use Cookies to compile statistics about our website visitors. However, if you choose, you may opt out from Yahoo’s collection of such information outside of the Yahoo distribution network, by clicking on the following link: https://legal.yahoo.com/us/en/yahoo/privacy/index.html.

• Yelp (https://terms.yelp.com/privacy/en_us/20220831_en_us/) - We may use Yelp to optimize our marketing activities. For more information on how Yelp collects or receives personal information through tracking technologies, visit: https://terms.yelp.com/privacy/en_us/20220831_en_us/.

You may opt out of interest-based ads from companies participating in the National Advertising Initiative consumer opt out link (http://optout.networkadvertising.org/) or the Digital Advertising Alliance's consumer opt out link (http://www.aboutads.info/choices/). Please note this does not opt you out of being served ads and opting out via one browser, device, or app may not necessarily opt you out of collection from all browsers, devices, or apps. Even if you opt out of interest-based ads you will still receive non-personalized, contextual ads.

Certain web browsers allow users to opt out of tracking by websites and online services by enabling a signal such as Do Not Track (“DNT”). To learn more about DNT signals, visit https://allaboutdnt.com/. If you choose to enable an opt out request preference signal you will only be opted out of online sales or sharing of your information and will need to turn it on for each browser you use.

You may elect to opt out of certain processing of your personal information through Cookies by clicking the “Do Not Sell or Share My Personal Information” link in the footer of any of the Site’s pages and toggling your preferences. You can use mobile device settings to limit mobile tracking technologies and associated activities. For instance, you can adjust or reset the advertising identifiers on your mobile device in the device settings.

How We Safeguard Personal Information

We work to safeguard personal information from loss, misuse, or unauthorized access, alteration, and destruction by using industry standard safeguards, procedures, and practices.

These safeguards include physical, logical, and technical protections for physical security, information security, and additional measures to restrict access to data we hold in physical and electronic forms.

No method of transmission over the Internet, or method of electronic storage, is completely secure. Although we do our best to protect your personal information, we cannot guarantee the security of information transmitted via our Services. Additional details on our security measures can be found here: https://www.taxact.com/security.

Children’s Privacy

We do not market our Services to children, and the Services are not intended for use by individuals under the age of 13. If we become aware that we have received any personal information from a child under 13, we will delete it in accordance with applicable law.

Data Storage and Transfer

In accordance with applicable laws, we keep and store personal information to provide you with the Services and for the uses identified in this Privacy Notice.

The Services are intended for access and use in the United States. Any information TaxAct collects about you may be stored, transferred, processed, and/or accessed by us in the United States, or to the extent permitted by law, any other country where we or our vendors operate. Please know that personal information may be transferred to, and maintained on, computers not in the state or country where you live, meaning the privacy laws could differ from and may not be as protective as those where you live.

If you are located outside the United States and allow us to collect personal information about you, please be aware that TaxAct may, where permitted by law, transfer your personal information to other countries, including the United States, and process and store it there. By allowing collection of your personal information, you consent to having your personal information transferred to, processed, and stored in the United States.

Generative Artificial Intelligence, Machine Learning, and Related Tools

We may use generative artificial intelligence, machine learning, or related tools, such as chatbots (“AI”) to improve, develop, and deliver our products and services. We may use AI to analyze how our Services are used and interacted with, or to process certain content our customers send or display through the Services, including by conducting data analytics to develop insights about your use of the Services, needs, and preferences, so we can make more informed predictions, recommendations, and improve our products and Services. Some of the AI technologies we use, including our chatbot, allow us and our vendors to monitor and analyze how visitors use our Services to better understand user behavior and improve our Services. When you interact with us online, information related to your behavior may be collected by us and our vendors.

When utilizing AI technology, we will provide additional notice and the opportunity to opt out, when appropriate. We will not use AI to subject you to decisions based solely on automated decision-making that have a significant impact on you without providing additional notice, as appropriate.

Other Online Services

External Links: Our Services may contain links to external websites, which are clearly identified and will direct you from TaxAct’s Services to an external site. Our link to a product or service does not by itself indicate our endorsement. Some of these external sites may collect personal information about you or request personal information from you. If accessing an external site via a link, you will be directed to that external website and governed by their privacy notice and policies. We encourage you to review their privacy statements or notices to learn more about what personal information is collected, how it is used, and how it is stored.

Interactive Features: We may engage vendors to provide certain interactive features on our Services. Your use of these interactive features is voluntary, and we may retain the information that you submit through these features. For example, we may offer an interactive chat feature on our Site to answer questions and for other customer service purposes. When you participate in the interactive chat, either with a virtual or live agent, the contents of the chat may be captured and kept as a transcript. As described in the Generative Artificial Intelligence, Machine Learning, and Related Tools section above, our interactive chat feature may use AI technology. When you use our AI-powered chatbot, you are interacting with an AI platform, not a live person, and should not input any personal or sensitive information. While we strive to provide accurate information through this feature, we cannot guarantee the accuracy or completeness of the information provided; use of the AI-powered chat feature is for general information only and the information, decisions, advice, or materials provided by or retrieved from the chat feature have not been reviewed for content or accuracy. By using these features, you understand that our vendors may process the information obtained through the feature to provide the service on our behalf.

Social Media: We may monitor and collect information from interactions with our social media accounts (such as Twitter, LinkedIn, Facebook, Instagram, TikTok, or Google). Our Services includes social media features, such as the Facebook Like button and widgets, the share this button, or interactive mini programs that run on our Site. If you interact with us on social media or use features such as plugins, widgets, or other tools made available by social media platforms or networks in connection with our Services, we may collect personal information that you disclose to us or that the social media platforms disclose to us. Your interactions with these features are governed by the privacy notice of the company providing it.

Identity Verification: If you request certain account recovery services, we disclose your personal information to external parties, including LexisNexis, so we can verify your identity. The personal information we disclose includes name, address, email, IP address, and Social Security Number. For more information about how LexisNexis processes personal information for identity verification, please visit the https://risk.lexisnexis.com/corporate/processing-notices/emailage.

Your Choices

We offer our users certain choices related to their personal information. If you are a resident of California, Minnesota, Montana, or Oregon, you may have additional rights under state law, which are provided in the Additional California, Minnesota, Montana, and Oregon Disclosures section below.

We will not discriminate against you for choosing to exercise any of these privacy choices.

Cookies and Tracking Technologies

For information about managing your Cookie preferences, please refer to the Your Cookie Choices section above.

Choosing Do Not Sell or Share My Personal Information

You may elect to opt out of the selling or sharing of your personal information by visiting https://www.taxact.com/do-not-sell-or-share, or clicking the button labeled “Do Not Sell or Share My Personal Information” in the footer of any TaxAct Site page.

You do not need to create an account with us to exercise your opt-out rights. We will only use personal information provided in an opt-out request to review and comply with the request.

Communications and Opt Out Options

Email Communications: We may periodically send you communications or otherwise contact you about new products, services, upcoming events, or for other promotional purposes. You can stop receiving promotional emails by following the unsubscribe instructions in emails that you receive.

Text Communications: You can opt out from further text marketing communications by texting STOP to the SMS number used by TaxAct to contact you.

Transactional Communications: Note that if you opt out of receiving marketing, we may still contact you for non-marketing purposes, such as account information, feedback or research purposes, legal notices, account security, bug alerts, or changes that may impact your ability to use TaxAct products and services.

Professional Services Disclosure to Affiliated Companies: If you use our Professional Service and wish to opt out of having personal information about you disclosed to our affiliated companies for marketing purposes, please visit https://www.taxact.com/email/preference-center/global-dne.

Access and Updates to Your Information

To exercise your right to access, to amend or delete information, customers with registered accounts can access and/or update account information by visiting https://wwwtaxact.com and selecting “Sign In.” To withdraw consent, please email privacy@taxact.com. If you e-file your tax return using the Services, you will not be able to update your tax return information once your tax return has been filed, unless the IRS rejects the return, or you file a later amendment. You may check if your return has been accepted or rejected by selecting “Check e-file status.” (https://www.taxact.com/post-filing/efile-status)

After the tax return extension filing deadline, all information then existing in the TaxAct tax returns are archived. We provide the ability for you to access such archived return information in certain circumstances.

If you do not have an account, you have the right to access or may request to update inaccuracies in your personal information, or to have the information deleted. If you would like to make such a request, please contact us at privacy@taxact.com.

Deactivation of Your Account

If you choose to deactivate your account, we retain your account information in our archives even though it is no longer accessible online. We also retain all printed or e-filed returns and related information as necessary to comply with our legal and contractual obligations, resolve disputes, and enforce our agreements.

If you deactivate your account, you may no longer be able to access any of the information associated with that account including information you provided through associated applications or other Services.

To deactivate your account, you can contact TaxAct support at 319-373-3600.

Additional California, Minnesota, Montana, and Oregon Disclosures

This section supplements the information contained in the Privacy Notice, and applies solely to visitors, users, and others who reside in California, Minnesota, Montana, or Oregon (“Consumers” or “you”). In the event of any conflict between this section and our Privacy Notice above, this section shall govern for Consumers. We adopt this section of the Privacy Notice to comply with privacy laws in California, Minnesota, Montana, and Oregon (each, an “Applicable State”), including the California Consumer Privacy Act (“CCPA”) and other Applicable State privacy laws. Any terms defined in Applicable State privacy laws have the same meaning when used in this Privacy Notice.

TaxAct is the Controller of your personal information.

This section does not apply to job applicants or current and former employees/contractors. If you are a job applicant, please review our Applicant Privacy Notice (https://assets.ctfassets.net/j9e1b5ly4280/4VoyhXhcVSEqPkNIH4X3Zp/f0b512c1043631cab56dcede55ebe52a/Taxwell_Applicant_Privacy_Notice.pdf). If you are a current or former employee/contractor, a separate privacy notice will be provided to you in the course of your employment. If you have any questions, please contact us using the information provided above.

Unless otherwise noted, the disclosures in this section apply to our current practices, as well as our activities in the prior twelve (12) months.

Personal Information We Collect From California Residents

We may collect personal information and, for limited purposes, sensitive personal information, as described in the Personal Information We Collect, How We Use Your Personal Information, and How and Why We Disclose Your Personal Information sections above and the following chart, depending on your access to and/or use of the Services. “Personal information” includes “personal data” as defined in Applicable State privacy laws.

The above chart also includes the sensitive personal information we collect and the purposes for which it is collected.

Under Applicable State privacy laws, we collect the following sensitive personal information from Consumers: citizenship and immigration status. Under the CCPA, we collect the following sensitive personal information from Consumers: Social Security, driver’s license, state identification card, or passport number; and account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account.

We may collect personal information, including, sensitive personal information, from the following sources:

• Directly from you. For example, when you sign up to receive information from us, sign up for our Services, or any other time you submit personal information to us voluntarily.

• Automatically when you use our Services. For example, we may collect your usage history when you use our Services.

• Other parties. For example, we may receive personal information from vendors who provide us with IT services, advertising services, or help facilitate our sales.

Retention, Use, and Disclosure of Personal Information

We may use or disclose your personal information for the purposes described in the How We Use Your Personal Information and How and Why We Disclose Your Personal Information sections above.

Retention

TaxAct maintains the personal information described above for as long is necessary for the purposes described in this Privacy Notice or otherwise authorized by law. This generally means holding the information for as long as one of the following apply:

• The personal information is reasonably necessary to manage our operations, to manage your relationship with us, to provide goods or services, or to satisfy another purpose for which we collect the information;

• The personal information is reasonably necessary to carry out a disclosed purpose that is reasonably compatible with the context in which the personal information was collected;

• The personal information is reasonably required to protect or defend our rights or property (which will generally relate to applicable laws that limit actions in a particular case); or

• We are otherwise required or permitted to keep the personal information by applicable laws or regulations.

Where personal information is used for more than one purpose, we will retain it until the purpose with the latest period expires. For more information about our retention policies, please contact us using the contact details above.

Personal Information Sold to Third Parties or Shared for Targeted Advertising

TaxAct does not sell personal information for monetary value, however the Applicable State privacy laws define “sale” broadly to include any transfer of personal information to a third party for monetary or other valuable consideration, which may include the sharing of personal information with third parties for cross-context behavioral or targeted advertising (collectively, “Targeted Advertising”) purposes.

As described in the Cookies, Tracking Technologies, and Interest-Based Advertising section above, we utilize interest-based advertising services from vendors on our Site. When you interact with our Site, some of your personal information may be shared, if legally permitted, with certain of these vendors who may use it for Targeted Advertising. You have the right to opt out of the “sale” of your personal information and opt out of the sharing of your personal information for Targeted Advertising, as detailed below. We do not have actual knowledge that we sell or share the personal information of Consumers under 16 years of age.

The following categories of personal information may be sold or shared for marketing and advertising purposes to third parties, including our affiliates, advertisers and marketing partners, data analytics providers, and social media networks:

• Identifiers;

• Internet or similar network activity information;

• Commercial Information; and

• Inferences drawn from other Personal Information.

Rights and Choices

Applicable State residents are provided with certain rights regarding their personal information under Applicable State privacy law. This section describes such Consumer rights and explains how to exercise those rights.

Confirmation, Access, and Data Portability Rights

If you are a Consumer, you have the right to request that we confirm whether we are processing or have processed personal information about you and request a copy of such personal information.

California residents also have the right to request:

• The categories of personal information we collected about you.

• The categories of sources for the personal information we collected about you.

• Our business or commercial purpose for collecting, selling, or sharing that personal information.

• The categories of third parties with whom we share that personal information.

• The categories of personal information that we disclosed for a business purpose, and for each category identified, the categories of recipients to which we disclosed that particular category of personal information.

• The categories of personal information that we sold or shared, and for each category identified, the categories of recipients to which we sold or shared that particular category of personal information.

• The specific pieces of personal information we collected about you.

Third-Party Disclosure Right

Oregon and Minnesota residents may request a list of third parties to which we disclosed personal information.

Deletion Request Rights

If you are a Consumer, you may request that we delete personal information about you, subject to certain exceptions. Once we receive and confirm your verifiable request, we will delete (and direct our service providers to delete if applicable) your personal information from our records, unless an exception applies.

Correction Request Rights

If you are a Consumer, you may request correction of inaccurate or incomplete personal information that we have about you. Once we receive and confirm your verifiable request, we will provide a response that may include self-service tools that enable you to update your personal information, unless an exception applies. We may ask you to provide documentation supporting the accuracy of the personal information that is the subject of your request. Please note this is subject to certain restrictions.

Opt Out of Sale or Sharing for Targeted Advertising Right

You may opt out of sharing for Targeted Advertising or the sale of your personal information to third parties using Cookies by clicking the button labeled “Do Not Sell or Share My Personal Information” in the footer of any Site page.

As described in the section on Your Choices, you may elect to add your name to our “Do Not Sell or Share My Personal Information” list by visiting https://www.taxact.com/do-not-sell-or-share or clicking the button labeled “Do Not Sell or Share My Personal Information” on any TaxAct web page.

Certain web browsers allow users to opt out of tracking by websites and online services by enabling an opt out preference signal such as Global Privacy Control (“GPC”). If you choose to enable an opt out preference signal, you will only be opted out of Cookie-based sales of your personal information or sharing of your personal information for Targeted Advertising and will need to turn it on for each browser you use. To submit a request to opt out of offline sales and sharing which would not otherwise be controlled by an opt out preference signal, please click on the “Do Not Sell or Share My Personal Information” button located on any TaxAct webpage.

Profiling and Automated Decision-Making Rights

We do not profile Consumers in furtherance of decisions that produce legal effects or effects of similar significance.

Appeal Rights

If we deny or are unable to fulfill your privacy rights request, and you believe we denied it in error, you may appeal for reconsideration of your request by emailing us at privacy@taxact.com.

California Limitation on Use and Disclosure of Sensitive Personal Information Right

We do not use or disclose sensitive Personal Information for purposes to which the right to limit use and disclosure applies under California law.

Request Submissions

To exercise the rights under Applicable State privacy laws, please submit a request by completing the online form at: https://privacyportal.onetrust.com/webform/639512f3-cde9-4ef9-8392-da36efd85d4f/fb57339b-80d6-46f2-889d-b037ebe1f0c5. If you have any questions about this process, including regarding requests we are unable to fulfill, you may contact us at the information provided at the beginning of this Privacy Notice. If you submit certain requests, we may request additional information to verify your identity, which may require you to log into your account or to provide 2-3 pieces of personal information that we will match against our records. We will use personal information provided in a verifiable request to verify the requestor's identity or authority to make the request.

Requests may also be submitted by a person that is authorized to act on your behalf. Such privacy rights requests may have to undergo our verification process, which includes verifying the identity of the agent and their authorization to make the request. An authorized agent may submit a request on your behalf using the online form at: https://privacyportal.onetrust.com/webform/639512f3-cde9-4ef9-8392-da36efd85d4f/fb57339b-80d6-46f2-889d-b037ebe1f0c5. These requests must:

• Detail sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative; and

• Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

We cannot respond to your request or provide you with personal information if we cannot verify your identity or your agent’s authority to make the request and confirm the personal information relates to you.

Timeframe for Responding to Requests and Format

TaxAct shall confirm receipt of a Consumer’s request within ten (10) days of receipt. TaxAct will respond to the request within forty-five (45) days of receipt of the request.

The period of response may be extended to ninety (90) days if more time is required. In that event, we will inform you of the reason for the extension period in writing. You may only make a verifiable request for access or data portability twice within a 12-month period.

Fee

We do not charge a fee to process or respond to your verifiable request unless it is excessive, repetitive, or manifestly unfounded.

No Discrimination

We will not discriminate against you for exercising any of your Applicable State privacy rights.

Please note, that certain information is required to effectively use our Services. For example, if you exercise the right to delete your information your account will be deactivated, which prevents the use of our goods and services. This in no way prevents you from creating a new account in the future.

No Financial Incentive

We do not offer any financial incentives or price or service difference in an attempt to influence a Consumer’s decision whether or not to exercise a right afforded to the Consumer under California law.

California “Shine the Light”

Once per calendar year, a California resident may opt out of disclosure of their personal information to other parties, including affiliates, for their direct marketing purposes during the immediately preceding calendar year. If you do not want TaxAct to disclose your personal information to other companies, including, affiliates, for their direct marketing purposes, please go to: https://www.taxact.com/do-not-sell-or-share, click the button labeled “Do Not Sell or Share My Personal Information” on any TaxAct web page, or contact us at privacy@taxact.com.

Notice of Changes

We may change this Privacy Notice from time to time. If we make updates, we will revise the “Last Updated” date at the top of this Privacy Notice and, in some cases, we may provide you with additional notice at our discretion. We encourage you to review the Privacy Notice whenever you access the Site, use our Services, or otherwise interact with us to stay informed about our information practices.

Accessibility

TaxAct is committed to making our Privacy Notice accessible to individuals with disabilities. If you use assistive technology (such as a Braille reader, a screen reader, and text-enlargement programs) and the format of the Privacy Notice interferes with your ability to access any information in the Privacy Notice, please contact us at privacy@taxact.com. Please indicate the nature of your accessibility problem, the preferred format you would like to receive the Privacy Notice, and your contact information so that we may respond in a manner that is helpful for you.