Privacy Policy

What you give us: the property address you scan; your email address; a ZIP code if you join the waitlist; answers to report questions (for example, whether you live in the home); and, if you purchase a filing package, the details the county forms require — your name, phone number, and property details — plus any documents you choose to upload.

What we look up: public county records for the address you enter — assessments, sales, property characteristics, appeal history — from official government sources such as Cook County open data.

If you connect your mortgage (optional): we use Plaid to read your mortgage balance once, to check PMI eligibility. The access token is discarded immediately after that single read. We never see or store your bank credentials.

What we never collect: your card number (payments run entirely on Stripe's systems) and your bank login (that stays with Plaid).

To produce your savings report, prepare the filings you purchase, track their status in your dashboard, send you the emails you asked for (your report link, payment receipts, and — only if you opt in — monitoring alerts), and answer your questions. Documents you upload are stored encrypted, used only to prepare your filings, reviewed by a human, and deletable by you at any time.

AI, carefully: our AI writes the plain-English explanations in your report. It receives program names and eligibility signals — never your name, email, or contact details — and our AI provider processes requests under a zero-data-retention agreement.

We never sell your data. We never share it with data brokers or advertisers. We never use your documents or answers for anything except your own report and filings.

Service providers that run parts of TaxBack, each bound to use your data only to provide their service to us: Vercel (hosting), Supabase (database and sign-in), Stripe (payments), Resend (email delivery), Plaid (optional mortgage connection), Anthropic (AI explanations, zero data retention), and Sentry (error monitoring, with personal data redacted from logs).

If you accept analytics cookies, we also use analytics services (such as Meta and PostHog) to understand how the site is used and to measure advertising. These load only after you choose “Accept” on the cookie banner, and we do not send them your email, name, or address.

Essential cookies keep you signed in — the site does not work without them. Analytics cookies are optional and load only with your consent; you can decline them and everything still works. Your choice is remembered in your browser.

Your report and account data stay as long as your account does, so your dashboard, filings, and history keep working. You can delete uploaded documents yourself at any time, and you can ask us to delete your account and its data by emailing hello@taxbacknow.com. We keep what the law requires us to keep (for example, payment records) for as long as it requires.

Email us at hello@taxbacknow.com to see, correct, or delete the personal information we hold about you. Every non-essential email we send includes a way to stop those emails. Illinois residents: we honor the rights Illinois law gives you over your personal information.

Data is encrypted in transit and at rest. Database access is row-locked so accounts can only read their own records. Personal details are redacted from our system logs. Uploaded documents live in a private, encrypted vault that only your account can reach.

TaxBack is for homeowners and is not directed at children under 13. We do not knowingly collect information from children.

If this policy changes materially, we will update the date below and note the change here. Questions: hello@taxbacknow.com.