Contents

Personal Information We Collect

How We Use Your Personal Information

How and Why We Disclose Your Personal Information

Tax Return Information

Cookies, Tracking Technologies, and Interest-Based Advertising

How We Safeguard Your Personal Information

Children’s Privacy

Data Storage and Transfer

Generative Artificial Intelligence, Machine Learning and Related Tools.

Other Online Services

Your Choices

Additional California Disclosures

Additional Oregon Disclosures

Accessibility

We at TaxAct (" TaxAct ") respect your privacy and the confidentiality of your personal information as described in this Privacy Notice (the “ Privacy Notice ”). This Privacy Notice explains how and why TaxAct collects, uses, and discloses your personal information, and how you may exercise the choices and rights available to you with respect to your personal information.

This Privacy Notice applies to all TaxAct properties that link to it, including websites, such as https://www.taxact.com and https://www.taxactprofessional.com (collectively, the (" Site ") products, software, and services, such as our online tax filing service and professional software (the “ Professional Services "); and applications, such "as our mobile application (the " App ") (collectively, the " Services ").

TaxAct, as a tax preparer and tax software developer, is subject to the Gramm-Leach Bliley Act (" GLBA "). You may review our GLBA Privacy Notice at https://www.taxact.com/GLBA-notice . We may change this Privacy Notice from time to time. If we make updates, we will revise the “Last Updated” date at the top of this Privacy Notice and, in some cases, we may provide you with additional notice at our discretion. We encourage you to review the Privacy Notice whenever you access the Site, use our Services, or otherwise interact with us to stay informed about our information practices.

If you have an unresolved privacy or data use concern you have raised that you feel we have not addressed satisfactorily, please contact our U.S. based third-party dispute resolution provider (free of charge) at  https://feedback-form.trustarc.com/watchdog/request .

Personal Information We Collect

We, and our vendors, may collect personal information directly from you (such as when you register for and use the Services), automatically when you access the Services, through online tracking technologies (see Cookies and Other Tracking Technologies section below). Our primary goals in collecting personal information are to (i) offer, provide, and improve the features and content of our Services, (ii) administer your use of our Services, and (iii) enable our customers to enjoy and easily navigate our Services. The personal information we collect about you may vary depending on the nature of your interactions with us.

You may provide us with personal information of others, in which case you represent to us that you have obtained authorization from those individuals to provide us with such personal information.

Certain personal information is required to purchase, download, and effectively use our Services. If you do not wish for us to collect and/or use your personal information or request to delete such information, this may result in a termination of your user account or your inability to use the Services. Please see the Your Choices section for more information.

We may collect the following categories of personal information when you use or access the Services:

• Contact Information:  We collect personal information in order to respond to your inquiries and provide our Services, including, when you register to use our tax software, such as:

  • Name;

  • Address;

  • Email; or

  • Phone number.

• Tax Return Information:  If you decide to prepare or file a tax return using our Services, we collect personal information, such as:

  • Name;

  • Social Security Number;

  • Driver’s license number;

  • Employment information;

  • Spouse and dependent information;

  • Income;

  • Deductions; or

  • Any other information included in your return.

• Uploaded Documents : We collect personal information provided in any forms, files, or other data that you may choose to upload or import to our Services.

• Information Provided From Third Parties That You Utilize Within Our Services:  You can choose to permit or, in some cases, restrict third-party websites or applications that integrate with our Services. If you provide your third-party credentials, we may receive your name and email address associated with such third-party websites or applications, along with additional information that the application has elected to make available to TaxAct to facilitate the integration.

• Financial Information:  We may collect account, card, or payment information, such as when you purchase our products and Professional Services. If you pay using a credit card, we and our payment processor may collect financial information such as credit card number and expiration date.

• Professional Preparer Information:  If you use our Professional Services to prepare the taxes of others, we may also collect information regarding your tax preparation business, such as:

  • Business name;

  • Business address;

  • Business email;

  • Business phone;

  • Name of individual designated as contact for business;

  • Size and nature of practice; or

  • Tax registration information, e.g., PTIN / EFIN.

• Communications:  We may collect certain personal information provided in your communications with us. In some cases, we record your interactions with our support service team upon notifying you that a recording will be made.

• Marketing Communications: We collect personal information you may provide us to sign up for communications, including, in connection with marketing emails, blog content, customer testimonials, surveys, promotions, contests, sweepstakes, marketing events, trade shows, webinars, conferences, customer research, gated content, feedback, or a similar event or occurrence.

• Referrals:  Information from your use of our referral service to tell a friend about our site, including your friend’s name and email address.

• Publicly Available Information:  In addition to the information you provide, we may also collect information from publicly available sources, affiliated companies, or third parties, such as when we partner with other companies or use service providers to help us optimize our marketing activities.

• Automatically Collected Information: TaxAct collects information about your browser or device interactions with the Services. Automatically collected information may be combined with other information we collect about you to improve our Services, and our marketing, analytics, and Site functionality. This information may include:

  • Computer or Device Information

    •  you use to access our Services, including:

    • your IP address;

    • the hardware model;

    • operating system version;

    • mobile network information;

    • location information; or

    • other information that identifies your computer or device.

  • User Interaction Information

    about your use of the Services, including:

    • the type of browser you use;

    • loading and access times;

    • pages viewed and features accessed;

    • the page you visited before navigating to our Services;

    • whether you have started or completed use of an offering; or

    • other events that occur while engaging with our Services.

  • Geolocation Data:  We may collect geolocation data, including information derived from your IP address and collected from our Services, for analytics, marketing, and access purposes. You may control certain geolocation collection through your browser or mobile device settings.

How We Use Your Personal Information

In addition to the other uses described in this Privacy Notice, we may use your personal information for the following purposes:

• To complete orders and provide you our Services, including, using tax return information to prepare or assist in preparing your tax return, as described further below.

• To assist the development of our Services, including to:

  • Generally analyze and improve the Services we offer to you;

  • Better understand the functionality of our Services; or

  • Provide a customized or personalized experience.

• To create, maintain, customize, and secure your account with us.

• To communicate with you, including, to:

  • Send marketing messages or to show you advertising;

  • Notify you of new or enhanced products and services;

  • Communicate with people you tell us might be interested in our services, if you choose to use our referral service to tell them about us; or

  • Provide text message alerts for product information, status, tips or promotions, or other marketing activities.

• To maintain the safety, security, and integrity of our Site and Services, databases and other technology assets, and business.

• To address issues that may arise, including to:

  • Notify you if there are issues with the Service or your order;

  • Send you product or technical notices, updates, and security alerts;

  • Research and address any questions or problems submitted through our technical support and customer service systems;

  • Monitor and investigate fraud, identity theft, and other illegal activity; or

  • Protect the safety and security of TaxAct, our Services, our customers and others.

• As described to you when collecting your personal information.

• To operate our business, including, as necessary for internal administrative purposes, recordkeeping and auditing, risk management, and to manage our relationships.

• To protect and secure our business, including, preventing, investigating, identifying, or taking any other action with regard to suspected or actual fraudulent or illegal activity, or any activity that violates or may violate applicable laws, regulations, or legal process and our policies.

• To fulfill our legal obligations, including complying with applicable laws, regulations, or legal processes as well as industry standards and our company policies.

• In the event of corporate restructuring, including, evaluating or conducting a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal data held by us is among the assets transferred.

How and Why We Disclose Your Personal Information

We may disclose your personal information in the course of supporting and providing our Services, as follows:

• As You Direct in the Services:  We disclose Tax Return Information in accordance with your requests, such as when you direct us to file a tax return with the IRS or to a state taxing authority or you provide your express consent to disclose information to a third party offering its own product or service.

• Vendors Supporting Services:  To vendors, consultants, and service providers who assist us in providing our Services and use and disclose such personal information to perform services on our behalf.

• Co-sponsors and Partners:  To promotional co-sponsors or other TaxAct partners as part of joint marketing efforts and other partnership activities.

• Marketing Vendors:  To companies, including our affiliated entities and third parties, that provide services that help us market our products or otherwise support the promotion of our business.

• Legal Compliance, Law Enforcement, and Regulatory Requests:  For compliance, enforcement, and public safety purposes, including, to taxing authorities, law enforcement, government agencies, and other parties to comply with any applicable law, regulation, or legal process, such as subpoenas and court orders; to carry out investigations; to protect and defend our rights and property or the rights or safety of other parties; for crime-prevention purposes; or as otherwise required by any applicable law, rule or regulation.

• Fraud and Abuse Prevention : If we believe your actions are inconsistent with the spirit or language of our user agreements or policies, or to protect the rights, property, and safety of TaxAct or others.

• In a Merger:  In connection with, or during negotiations of, any merger, sale of company assets, financing or acquisition of all or a portion of our business by another company.

• For Use by Our Affiliates : For our affiliated companies to assist in providing and maintaining the Services or for other permitted business. If you use our Professional Services to prepare the taxes of others, we may disclose your information with our affiliates. You can learn more about and access the privacy notice of our affiliates at: Drake Software Privacy Notice ( https://www.drakesoftware.com/sharedassets/policy/drakesoftwareprivacypolicy.pdf).

• Mobile Phone Number:  We may disclose your mobile phone number with vendors that assist us with providing text message alerts for product information, tips or promotions, or other marketing activities; however, we will not disclose your mobile phone number with third parties for their own marketing purposes without your consent.

Tax Return Information

We use Tax Return Information you provide us in order to prepare a tax return. The use and disclosure of Tax Return Information is governed by Section 7216 of the Internal Revenue Code and many state codes and their associated regulations. We use your Tax Return Information only in accordance with applicable laws, including Section 7216 of the Internal Revenue Code, to do the following things:

• To prepare or assist in the preparation of tax returns;

• To allow tax professionals to assist you with questions or tax preparation;

• To obtain, manage, or market services in connection with the preparation of tax returns;

• To provide you with our tax preparation products and services, or, if you expressly consent, other products or services;

• For other uses or disclosures as you expressly consent to from time to time; or

• As required by law.

Cookies, Tracking Technologies, and Interest-Based Advertising

We or our vendors may use tracking technologies, such as cookies, web beacons, and pixels (collectively, " Cookies "), to collect certain information when you interact with the Site. We may use Cookies for several purposes, including:

• Storing information to help the Site function properly;

• Helping you access and navigate the Site more efficiently;

• Recognizing your login information and preferences, so that you do not need to enter the information each time you visit the Site;

• Analyzing your use of the Site, including, collecting information about which pages on our Site you viewed or links you clicked and how you interacted with our content during your visit or over multiple visits;

• Customizing your browsing experience by showing you information more likely to be relevant to you; and

• Delivering and customizing advertisements and tracking advertising campaigns.

We use certain web analytics services, such Google Analytics, to help us understand and analyze how visitors use our Services. We use this information to implement Google advertising features such as dynamic remarketing, interest-based advertising, audience targeting, behavioral reporting, demographics and interests reporting, user segment analysis, device reporting, display advertising, video ads reporting, and impression reporting.

Third-party ad technology companies and advertisers, including Meta and TikTok, may use, store, or access cookies, web beacons, and other storage technologies to collect or receive information from our websites and elsewhere on the internet and use that information to provide advertising services to us, including, interest-based advertising or advertisements targeted to your interests.

In certain instances, we may contract with vendors to help us analyze activity through our Services, including our chat functionality, through session replay technologies that allow us to review the history of how visitors use our Services and to improve our Services. These technologies may collect the following types of information, among others: IP address; screen size; device type (unique device identifiers); browser information; geographic location; and preferred language.

We or our vendors may collect personal information about your online activities over time and across different devices and online websites when you access the Services. We and our vendors may link the information collected by tracking technologies to other information collected about you.

If you have questions about our use of cookie or other similar technologies, please contact us at privacy@taxact.com.

Your Cookie Choices

We use Cookies, including those listed below, to obtain information on how visitors interact with our Services or for marketing and advertising our Services to you. These tools collect information about the performance of our Services and how visitors navigate around and interact with our Site’s web pages, which allows us to evaluate and further improve and optimize our web pages.

For more information on the below Cookies, please click on the links: 

• AppsFlyer Privacy Policy ( https://www.appsflyer.com/legal/services-privacy-policy/ ) – We use information from AppsFlyer to improve our App and the services it offers. You can opt out of AppsFlyer’s use of information about you here: 

  https://www.appsflyer.com/legal/opt-out/ .

• Cloud Sponge ( htstp://www.cloudsponge.com/privacy/ ) – We use the information from Cloud Sponge to analyze and improve our Services. For more information on how Cloud Sponge uses data collected through the services, visit: https://www.cloudsponge.com/privacy/ .

• Facebook Privacy Policy ( https://www.facebook.com/privacy/policy/ ) – To better assess and optimize our marketing activities, we may use the “Meta Pixel” operated by Meta (formerly Facebook) to collect or receive information from our Site and elsewhere on the internet and use that information to provide advertising services to us, including interest-based advertising or advertisements targeted to your interests. We do not use the Meta Pixel within our tax product and it will not collect tax return or financial information. To change your privacy and advertising settings with Facebook, login to your Facebook account and navigate to the Privacy Center at https://www.facebook.com/privacy/center or review your Ad Preferences at https://www.facebook.com/adpreferences .

• Google - We use the information from Google Analytics to analyze and improve our Services. For more information on how Google Analytics uses data collected through the Services, visit: https://policies.google.com/technologies/partner-sites .

  • To opt out of Google Analytics, visit: https://tools.google.com/dlpage/gaoptout/ .

  • To control Google Ads, visit  https://adssettings.google.com/ .

• Microsoft ( https://privacy.microsoft.com/en-us/privacystatement ) - For information on how Microsoft collects or receives personal information through tracking technologies to provide Microsoft Advertising, view the Microsoft Privacy Statements at https://privacy.microsoft.com/en-us/privacystatement .

• Optimizely Privacy Policy ( https://www.optimizely.com/legal/privacy-policy/ ) and  Data Subject Rights ( https://www.optimizely.com/legal/opt-out/ ) – We may use Optimizely to test variations, analyze, and direct traffic on our website and in our products.

• Pinterest ( https://policy.pinterest.com/en/privacy-policy ) – Pinterest may be used to provide online behavioral advertising for marketing purposes.

• Snap ( https://values.snap.com/privacy/privacy-policy ) – We may use Snapchat to optimize our marketing activities. For more information on how Snap collects or receives personal information through tracking technologies, visit: https://values.snap.com/privacy/privacy-policy .

• The Trade Desk ( https://www.thetradedesk.com/us/privacy )- The Trade Desk may be used to provide targeted advertising for marketing purposes. To opt out, please go to Data Access Portal | The Trade Desk ( https://www.adsrvr.org/ ) to review your options.

• Yahoo ( https://legal.yahoo.com/us/en/yahoo/privacy/index.html ) – We have contracted with Yahoo to monitor certain pages of our website for the purpose of reporting web traffic, statistics, advertisement “click-throughs,” and/or other activities on our Site. No personal information is transferred to Yahoo by us. Where authorized by us, Yahoo may use cookies, web beacons, and/or other monitoring technologies to compile anonymous statistics about our website visitors. However, if you choose, you may opt out from Yahoo’s collection of such information outside of the Yahoo distribution network, by clicking on the following link:  https://legal.yahoo.com/us/en/yahoo/privacy/index.html .

You may opt out of interest-based ads from comanpies participating in the National Advertising Initiative consumer opt out link ( http://optout.networkadvertising.org/ ) or the Digital Advertising Alliance's consumer opt out link ( http://www.aboutads.info/choices/ ). Please note this does not opt you out of being served ads and opting out via one browser, device, or app may not necessarily opt you out of collection from all browsers, devices, or apps. Additionally, you may still see “contextual” ads even if you opt out of interest-based ads. These ads, however, are based on the context of what you are looking at on the websites and pages you visit. Even if you opt out of interest-based ads you will still receive these non-personalized, contextual ads.

Certain web browsers allow users to opt out of tracking by websites and online services by enabling a signal such as Do Not Track (" DNT "). To learn more about DNT signals, visit https://allaboutdnt.com/ . If you choose to enable an opt out request preference signal you will only be opted out of online sales or sharing of your information and will need to turn it on for each browser you use.

You can use mobile device settings to limit mobile tracking technologies and associated activities. For instance, you can adjust or reset the advertising identifiers on your mobile device in the device settings.

How We Safeguard Your Personal Information

We work to safeguard your personal information from loss, misuse, or unauthorized access, alteration, and destruction by using industry standard safeguards, procedures, and practices.

These safeguards include physical, logical, and technical protections for physical security, information security, and additional measures to restrict access to data we hold in physical and electronic forms.

No method of transmission over the Internet, or method of electronic storage, is completely secure. Although we do our best to protect your personal information, we cannot guarantee the security of information transmitted via our Services. Additional details on our security measures can be found here:  https://www.taxact.com/security .

Children’s Privacy

We do not market our Services to children, and the Services are not intended for use by individuals under the age of 13. If we become aware that we have received any personal information from a child under 13, we will delete it in accordance with applicable law.

Data Storage and Transfer

In accordance with applicable laws, we keep and store your personal information to provide you with the Services and for the uses identified in this Privacy Notice.

The Services are intended for access and use in the United States. Any information TaxAct collects about you may be stored, transferred, processed, and/or accessed by us in the United States, or to the extent permitted by law, any other country where we or our vendors operate. Please know that personal information may be transferred to, and maintained on, computers not in the state or country where you live, meaning the privacy laws could differ from and may not be as protective as those where you live.

If you are located outside the United States and allow us to collect personal information about you, please be aware that TaxAct may, where permitted by law, transfer your personal information to other countries, including the United States, and process and store it there. By allowing collection of your personal information, you consent to having your personal data transferred to, processed, and stored in the United States.

Generative Artificial Intelligence, Machine Learning, and Related Tools

We may use generative artificial intelligence, machine learning, or related tools, such as chatbots (“ AI ") to improve, develop, and deliver our products and services. We may use AI to analyze how our Services are used and interacted with, or to process certain content our customers send or display through the Services, including by conducting data analytics to develop insights about your use of the Services, needs and preferences, so we can make more informed predictions, recommendations, and improve our products and Services. When utilizing AI technology, we will provide additional notice and the opportunity to opt out, when appropriate. We will not use AI to subject you to decisions based solely on automated decision-making that have a significant impact on you without providing additional notice, as appropriate.

Other Online Services

External Links: Our Services may contain links to external websites, which are clearly identified and will direct you from TaxAct’s Site to an external site. Our link to a product or service does not by itself indicate our endorsement. Some of these external sites may collect personal information about you or request personal information from you. If accessing an external site via a link, you will be directed to that external website and governed by their privacy notice and policies. We encourage you to review their privacy statements or notices to learn more about what personal information is collected, how it is used, and how it is stored.

Interactive Features: We may engage vendors to provide certain interactive features on our Site. Your use of these interactive features is voluntary, and we may retain the information that you submit through these features. For example, we may offer an interactive chat feature on our Site to answer questions and for other customer service purposes. When you participate in the interactive chat, either with a virtual or live agent, the contents of the chat may be captured and kept as a transcript. By using these features, you understand that our vendors may process the information obtained through the feature to provide the service on our behalf.

Social Media:  We may monitor and collect information from interactions with our social media accounts (such as Twitter, LinkedIn, Facebook, Instagram, TikTok, or Google). Our Services includes social media features, such as the Facebook Like button and widgets, the share this button, or interactive mini programs that run on our Site. If you interact with us on social media or use features such as plugins, widgets, or other tools made available by social media platforms or networks in connection with our Services, we may collect personal information that you disclose to us or that the social media platforms disclose to us. Your interactions with these features are governed by the privacy notice of the company providing it.

Your Choices

We offer our users certain choices related to their personal information. If you are a California resident, you may have additional rights under state law, which are provided below in the section entitled Additional California Disclosures.

We will not discriminate against you for choosing to exercise any of these privacy choices.

Choosing Do Not Sell or Share My Personal Information

You may elect to opt out of the selling or sharing of your personal information by visiting  https://www.taxact.com/do-not-sell-or-share , or clicking the button labeled “Do Not Sell or Share My Personal Information” in the footer of any TaxAct Site page.

Communications and Opt Out Options

Email Communications:  We may periodically send you communications or otherwise contact you about new products, services, upcoming events, or for other promotional purposes. You can stop receiving promotional emails by following the unsubscribe instructions in emails that you receive.

Text Communications: You can opt out from further text marketing communications by texting STOP to the SMS number used by TaxAct to contact you.

Transactional Communications: Note that if you opt out of receiving marketing communications, we may still contact you for non-marketing purposes, such as account information, feedback or research purposes, legal notices, account security, bug alerts, or changes that may impact your ability to use TaxAct products and services.

Professional Services Disclosure to Affiliated Companies: If you use our Professional Service and wish to opt out of having personal information about you disclosed to our affiliated companies for marketing purposes, please visit https://www.taxact.com/email/preference-center/global-dne .

Access and Updates to Your Information

Customers with registered accounts can access and/or update account information by visiting  https://wwwtaxact.com  and selecting "Sign In.” To withdraw consent, please email privacy@taxact.com. If you e-file your tax return using the Services, you will not be able to update your tax return information once your tax return has been filed, unless the IRS rejects the return, or you file a later amendment. You may check if your return has been accepted or rejected by selecting "Check e-file status." ( https://www.taxact.com/post-filing/efile-status )

After the tax return extension filing deadline, all information then existing in the TaxAct tax returns are archived. We provide the ability for you to access such archived return information in certain circumstances.

If you do not have an account, you may request to update inaccuracies in your personal information, or to have the information deleted. If you would like to make such a request, please contact us at privacy@taxact.com.

Deactivation of Your Account

If you choose to deactivate your account, we retain your account information in our archives even though it is no longer accessible online. We also retain all printed or e-filed returns and related information as necessary to comply with our legal and contractual obligations, resolve disputes, and enforce our agreements.

If you deactivate your account, you may no longer be able to access any of the information associated with that account including information you provided through associated applications or other Services.

To deactivate your account, you can contact TaxAct support at  319-373-3600 .

Additional California Disclosures

This section supplements the information contained in the Privacy Notice above, and applies solely to visitors, users, and others who reside in the State of California (" residents ," " consumers ," or " you "). In the event of any conflict between this section and our Privacy Notice above, this section shall govern for California residents. We adopt this section of the Privacy Notice to comply with the California Consumer Privacy Act (" CCPA ") and other California privacy laws. Any terms defined in the CCPA have the same meaning when used in this Privacy Notice.

This Privacy Notice does not apply to job applicants or current and former employees/contractors. If you are a job applicant, please visit our Applicant Privacy Notice ( https://assets.ctfassets.net/j9e1b5ly4280/3L58kqq3UC92V0makMxSR0/e541fbc79bda027e26a8afb5e2d7e6fa/Taxwell_Applicant_Privacy_Notice.pdf ). If you are a current or former employee/contractor, a separate privacy notice will be provided to you in the course of your employment. If you have any questions, please contact us using the information provided in the above.

Personal Information We Collect From California Residents

The information we collect is identified in the Personal Information We Collect section of our Privacy Notice above. It includes information that identifies, relates to, describes, references, is capable of being associated with, or reasonably could be linked, directly or indirectly, with a specific individual, consumer, or personal device (" Personal Information ") and, for limited purposes, Sensitive Personal Information as described below.

If you have used our Services, we have collected the following categories of Personal Information from you within the last twelve (12) months, depending on your access and/or use of our Services:

The above chart also includes the Sensitive Personal Information we collect and the purpose for which it is collected.

Under California law, we collect the following Sensitive Personal Information from consumers: Social Security, driver’s license, state identification card, or passport number; account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account; and citizenship and immigration status.

We may collect Personal Information, including, Sensitive Personal Information, from the following sources:

• Directly from you. For example, when you sign up to receive information from us, sign up for our Services, or any other time you submit Personal Information to us voluntarily.

• Automatically when you use our Site. For example, we may collect your usage history when you use our Site.

• Other parties. For example, we may receive Personal Information from vendors who provide us with IT services, advertising services, or help facilitate our sales.

Retention, Use, and Disclosure of Personal Information

We may use or disclose your Personal Information for the Business Purposes described in the How We Use Your Personal Information and How and Why We Disclose Your Personal Information sections of our Privacy Notice above.

Retention

We keep the categories of Personal Information described above for as long is necessary for the purposes described in this Privacy Notice or otherwise authorized by law. This generally means holding the information for as long as one of the following apply:

• Your Personal Information is reasonably necessary to manage our operations, to manage your relationship with us, to provide goods or services, or to satisfy another purpose for which we collect the information;

• Your Personal Information is reasonably necessary to carry out a disclosed purposes that is reasonably compatible with the context in which the Personal Information was collected;

• The Personal Information is reasonably required to protect or defend our rights or property (which will generally relate to applicable laws that limit actions in a particular case); or

• We are otherwise required or permitted to keep your Personal Information by applicable laws or regulations.

Where Personal Information is used for more than one purpose, we will retain it until the purpose with the latest period expires. For more information about our retention policies, please contact us using the contact details above.

Personal Information Disclosed for a Business Purpose

In the preceding twelve (12) months, we may have disclosed the following categories of Personal Information for a business purpose:

• Identifiers;

• Professional and Employment Related Information;

• California Customer Records Personal Information categories;

• Protected classification characteristics under California or federal law;

• Internet or similar network activity;

• Geolocation;

• Sensory Data;

• Commercial Information; and

• Inferences drawn from other Personal Information.

We disclose your Personal Information for a business purpose to the following categories of third parties:

• Service providers and Contractors

• Third parties in connection with products or services we provide to you

• Affiliates

How we Sell and Share Personal Information

Under California law, a “sale” of Personal Information does not necessarily involve one party purchasing Personal Information from the other or an exchange of money. Instead, the term also includes disclosures of Personal Information to Third Parties under circumstances where the Third Parties are not restricted from using the information obtained from providing us services to improve their own products and service.

As described in the Cookies, Tracking Technologies, and Interest-Based Advertising section above, we utilize interest-based advertising services from vendors on our Site. When you interact with our Site, some of your Personal Information may be shared, if legally permitted, with certain of these vendors who may use it for online or “cross-context” behavioral advertising, which meets the definition(s) of “share” and/or “sale” under California law. You have the right to opt out of the “sale or share” of your Personal Information, as detailed below. We do not have actual knowledge that we sell or share the Personal Information of consumers under 16 years of age.

The following categories of Personal Information may have been sold or shared to a third party for the purpose of cross-context behavioral advertising:

• Identifiers;

• Internet or similar network activity information;

• Commercial Information; and

• Inferences drawn from other Personal Information.

Each of the categories of Personal Information listed above may be sold or shared with the following categories of third parties for the purpose of cross-context behavioral advertising:

• Advertisers and marketing partners;

• Data analytics providers; and

• Social media networks.

Rights and Choices

California residents are provided with certain rights regarding their Personal Information under California law. For requests received directly from a California resident, this section describes your rights and explains how to exercise those rights.

Access to Specific Information and Data Portability Rights

You have the right to request that we disclose certain information to you about our collection and use of your Personal Information over the past 12 months. Once we receive and confirm your verifiable consumer request, you may request we disclose to you:

• The categories of Personal Information we collected about you.

• The categories of sources for the Personal Information we collected about you.

• Our business or commercial purpose for collecting or selling or sharing that Personal Information and how long we keep your information.

• The categories of third parties with whom we share that Personal Information.

• The categories of Personal Information that we disclosed for a business purpose, and for each category identified, the categories of recipients to which we disclosed that particular category of Personal Information.

• The categories of Personal Information that we sold or shared, and for each category identified, the categories of recipients to which we sold or shared that particular category of Personal Information.

• The specific pieces of Personal Information we collected about you.

Deletion Request Rights

You have the right to request that we delete your Personal Information that we collected from you and retained, subject to certain exceptions. Once we receive and confirm your verifiable consumer request, we will delete your Personal Information from our records, unless an exception applies.

Correction Request Rights

You have the right to request correction of inaccurate or incomplete Personal Information that we collected from you and retained, subject to certain exceptions. Once we receive and confirm your verifiable consumer request, we will provide a response that may include self-service tools that enable you to update your Personal Information, unless an exception applies.

Right to Limit Use and Disclosure of Sensitive Personal Information

We do not use or disclose sensitive Personal Information for purposes to which the right to limit use and disclosure applies under California law.

Opt Out Rights

Opt Out of Sale or Share

As described in the section on Your Choices, you may elect to add your name to our "Do Not Sell or Share My Personal Information" list by visiting https://www.taxact.com/do-not-sell-or-share or clicking the button labeled “Do Not Sell or Share My Personal Information” on any TaxAct web page.

Certain web browsers allow users to opt out of tracking by websites and online services by enabling an opt out preference signal such as Global Privacy Control (" GPC "). If you choose to enable an opt out request preference signal, you will only be opted out of online sales or sharing of your information and will need to turn it on for each browser you use. To submit a request to opt out of offline sales and sharing which would not otherwise be controlled by an opt out preference signal, please click on the “Do Not Sell or Share My Personal Information” button located on any TaxAct webpage.

Opt Out of Automated Decision Making

You have the right to opt out of automated decision making and request information about the logic involved in in any automated decision-making processes, as well as a description of the likely outcome of the process as it pertains to you.

Request Submissions

To exercise the rights under CCPA, please submit a consumer request by completing the online form at: https://privacy.taxact.com/ . If you have any questions about this process, including regarding requests we are unable to fulfill, you may contact us at the information provided at the beginning of this Privacy Notice. If you submit certain requests, we may request additional information to verify your identity, which may require you to log into your account or to provide 2-3 pieces of Personal Information that we will match against our records. We will use Personal Information provided in a verifiable consumer request to verify the requestor's identity or authority to make the request.

Requests may also be submitted by a person registered with the California Secretary of State that is authorized to act on your behalf. Such privacy rights requests may have to undergo our verification process, which includes verifying the identity of the agent and their authorization to make the request. An authorized agent may submit a request on your behalf using the email address or toll-free number listed above. These requests must:

• Detail sufficient information that allows us to reasonably verify you are the person about whom we collected Personal Information or an authorized representative; and

• Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

• We cannot respond to your request or provide you with Personal Information if we cannot verify your identity or authority to make the request and confirm the Personal Information relates to you.

Timeframe for Responding to Requests and Format

TaxAct shall confirm receipt of a consumer’s request within ten (10) days of receipt. TaxAct will respond to the request within forty-five (45) days of receipt of the request.

The period of response may be extended to ninety (90) days if more time is required. In that event, we will inform you of the reason for the extension period in writing. You may only make a verifiable consumer request for access or data portability twice within a 12-month period.

Fee

We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded.

No Discrimination

The CCPA prohibits a business from discriminating against California consumers for exercising the rights outlined above. Unless permitted by CCPA, we will not discriminate against you for exercising the rights by:

• Denying goods or services to you;

• Charging different prices or rates for goods or services, including through the use of discounts, benefits, or other penalties;

• Providing a different level or quality of goods or services; and

• Suggesting a different price or quality of goods or services will apply if rights are exercised.

Please note, that certain information is required to effectively use our Services. For example, if you exercise the right to delete your information your account will be deactivated, which prevents the use of our goods and services. This in no way prevents you from creating a new account in the future.

No Financial Incentive

We do not offer any financial incentives or price or service difference in an attempt to influence a consumer’s decision whether or not to exercise a right afforded to the consumer under California law.

California "Shine the Light"

Once per calendar year, a California resident may opt out of disclosure of their Personal Information to other parties, including affiliates, for their direct marketing purposes during the immediately preceding calendar year. If you do not want TaxAct to disclose your Personal Information to other companies, including, affiliates, for their direct marketing purposes, please go to: https://www.taxact.com/do-not-sell-or-share or click the button labeled "Do Not Sell or Share My Personal Information" on any TaxAct web page or contact us at privacy@taxact.com.

Additional Oregon Disclosures

This section supplements the information contained in the Privacy Notice above, and applies solely to visitors, users, and others who reside in the State of Oregon (“ residents ,” “ consumers ,” or “ you ”). In the event of any conflict between this section and our Privacy Notice above, this section shall govern for Oregon residents. We adopt this section of the Privacy Notice to comply with the Oregon Consumer Privacy Act (“OCPA”). Any terms defined in the OCPA have the same meaning when used in this Privacy Notice.

TaxAct is the Controller of your Personal Information.

This Oregon section does not apply to job applicants or current and former employees/contractors. If you have any questions, please contact us using the information provided above.

Personal Information We Collect from Oregon Residents

We collect the information identified in the Personal Information We Collect section of our Privacy Notice above from offline sources as well. We use and disclose such Personal Information for the purposes set out in the How We Use Your Personal Information and How and Why We Disclose Your Personal Information sections above.

Under the OCPA, we collect the following Sensitive Personal Information from consumers: citizenship and immigration status.

We may collect Personal Information, including, Sensitive Personal Information, from the following sources:

• Directly from you . For example, when you sign up to receive information from us, sign up for our Services, or any other time you submit Personal Information to us voluntarily.

• Automatically when you use our Site . For example, we may collect your usage history when you use our Site.

• Other parties . For example, we may receive Personal Information from vendors who provide us with IT services, advertising services, or help facilitate our sales.

Use and Disclosure of Personal Information

We may use or disclose your Personal Information as described in the How We Use Your Personal Information and How and Why We Disclose Your Personal Information sections of our Privacy Notice above.

How We Sell and Process Personal Information for Targeted Advertising

Under the OCPA, a “sale” of Personal Information does not necessarily involve one party purchasing Personal Information from the other or an exchange of money. Instead, “sales” also include disclosures of Personal Information to Third Parties for valuable consideration.

As described in the Cookies, Tracking Technologies, and Interest-Based Advertising section above, we utilize interest-based advertising services from vendors on our Site. When you interact with our Site, some of your Personal Information may be shared, if legally permitted, with certain of these vendors who may use it for targeted advertising. You have the right to opt out of the “sale” of your Personal Information and targeted advertising, as detailed below. We may disclose your Personal Information to the following categories of third parties for the purpose of targeted advertising:

• Advertisers and marketing partners;

• Data analytics providers; and

• Social media networks.

Rights and Choices

Oregon residents are provided with certain rights regarding their Personal Information under the OCPA. For requests received from an Oregon resident, this section describes your rights and explains how to exercise those rights.

Access to Personal Information and Data Portability Rights

You have the right to request that we confirm whether we are processing or have processed Personal Information about you and a copy of such Personal Information in a portable format. You may also request a list of third parties to which we disclosed Personal Information.

Deletion Request Rights

You have the right to request that we delete Personal Information that we collected about you, subject to certain exceptions. Once we receive and confirm your verifiable consumer request, we will delete your Personal Information from our records, unless an exception applies.

Correction Request Rights

You have the right to request correction of inaccurate or incomplete Personal Information that we collected about you and retained, subject to certain exceptions. Once we receive and confirm your verifiable consumer request, we will provide a response that may include self-service tools that enable you to update your Personal Information, unless an exception applies.

Opt Out Rights

Opt Out of Sale or Targeted Advertising

As described in the section on Your Choices, you may elect to add your name to our "Do Not Sell or Share My Personal Information" list and opt out of Targeted Advertising by visiting https://www.taxact.com/do-not-sell-or-share or clicking the button labeled “Do Not Sell or Share My Personal Information” on any TaxAct web page.

Certain web browsers allow users to opt out of tracking by websites and online services by enabling an opt out preference signal such as Global Privacy Control ("GPC"). If you choose to enable an opt out request preference signal, you will only be opted out of online sales or sharing of your information and will need to turn it on for each browser you use. To submit a request to opt out of offline sales and sharing which would not otherwise be controlled by an opt out preference signal, please click on the “Do Not Sell or Share My Personal Information” button located on any TaxAct webpage.

Opt Out of Profiling

We do not Profile consumers in furtherance of decisions that produce legal effects or effects of similar significance.

Appeal Rights

If we deny or are unable to fulfill your OCPA privacy rights request, and you believe we denied it in error, you may appeal for reconsideration of your request by emailing us at privacy@taxact.com.

Request Submissions

To exercise the rights under OCPA, please submit a consumer request by completing the online form at: privacy.taxact.com. If you have any questions about this process, including regarding requests we are unable to fulfill, you may contact us at the information provided at the beginning of this Privacy Notice. If you submit certain requests, we may request additional information to verify your identity, which may require you to log into your account or to provide 2-3 pieces of Personal Information that we will match against our records. We will use Personal Information provided in a verifiable consumer request to verify the requestor's identity or authority to make the request.

Requests may also be submitted by an agent authorized to act on your behalf. Such privacy rights requests may have to undergo our verification process, which includes verifying the identity of the agent and their authorization to make the request. An authorized agent may submit a request on your behalf using the online form at: privacy.taxact.com. These requests must:

• Detail sufficient information that allows us to reasonably verify you are the person about whom we collected Personal Information or an authorized representative; and

• Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

We cannot respond to your request or provide you with Personal Information if we cannot verify your identity or authority to make the request and confirm the Personal Information relates to you.

Timeframe for Responding to Requests and Format

TaxAct will respond to the request within forty-five (45) days of receipt of the request.

The period of response may be extended to ninety (90) days if more time is required. In that event, we will inform you of the reason for the extension period in writing.

No Discrimination

We will not discriminate against you for exercising your OCPA rights by:

• Denying goods or services to you;

• Charging different prices or rates for goods or services; or

• Providing a different level of quality or selection of goods or services.

Please note, that certain information is required to effectively use our Services. For example, if you exercise the right to delete your information your account will be deactivated, which prevents the use of our goods and services. This in no way prevents you from creating a new account in the future.

Accessibility

TaxAct is committed to making our Privacy Notice accessible to individuals with disabilities. If you use assistive technology (such as a Braille reader, a screen reader, and text-enlargement programs) and the format of the Privacy Notice interferes with your ability to access any information in the Privacy Notice, please contact us at privacy@taxact.com. Please indicate the nature of your accessibility problem, the preferred format you would like to receive the Privacy Notice, and your contact information so that we may respond in a manner that is helpful for you.