Privacy Policy

1. Who is responsible for your information

form5472.ai LLC operates Form5472.ai and is the controller of personal information it handles for its own purposes. Our mailing address is 1820 Ave M #1079, Brooklyn, NY 11203, United States. Contact support@form5472.ai for privacy requests and questions.

This notice covers Form5472.ai only. Other websites, including Form5472.online, and independently contracted service providers have their own notices and responsibilities. Where we act on another organization's instructions, the applicable engagement and data-processing terms also govern.

2. Information we collect and its sources

We collect information you provide through accounts, orders, calculators, tax questionnaires, uploads, support messages, and communications, and information generated when you use the service. Authorized representatives may provide records about owners, officers, and other people involved in a filing.

Payment providers handle payment credentials; our system receives order references, amounts, payment status, and related transaction information. Do not send card details or unnecessary sensitive documents in general support messages.

• Identity and contact information, account details, authentication records, and representative authority.
• Company and ownership information, EINs and other tax identifiers, SSNs or ITINs where needed, financial records, tax returns, IRS correspondence, signatures, and uploaded documents.
• Orders, payment records, communications, support-chat content and attachments, filing status, and service activity.
• Technical information such as IP addresses, browser/device details, timestamps, referring pages, visited pages, and session or advertising identifiers where applicable.

3. Purposes and lawful bases

We use necessary information to provide the services you request, administer accounts and orders, prepare or review agreed filings, obtain approvals, transmit authorized materials, provide support, and communicate service updates.

Where the GDPR applies, processing may rely on performance of a contract with you, legal obligations, consent where required, or legitimate interests such as proportionate security, fraud prevention, and service administration. We assess legitimate interests against your rights. Where you are not the contracting person, contractual necessity may not be the appropriate basis for your data.

Sensitive or specially protected data requires the additional conditions applicable to that category. An ordinary tax identifier is not automatically GDPR special-category data, but tax files may contain such information. Do not submit information that is not needed for the engagement.

Optional marketing, nonessential cookies, and any use or disclosure of tax information requiring taxpayer consent must have the relevant separate permission. Withdrawing consent does not invalidate earlier lawful processing or processing supported by another valid basis.

4. Recipients and service providers

Information is shared only as needed for a stated service purpose or another lawful basis, subject to applicable confidentiality and tax-information restrictions. Not every provider receives every category of information.

We may disclose authorized filing materials to the IRS and other appropriate government bodies; necessary records to engaged professionals and authorized staff; and information lawfully required for legal proceedings, fraud prevention, or a business transfer with appropriate safeguards and notice.

The providers below are reflected in the application integrations. Their role, contracting entity, processing location, and precise data scope must be verified before this draft is finalized. Ask support@form5472.ai for the current provider information.

• Replit and its hosting, database, and object-storage infrastructure: operating the website, accounts, records, uploads, and system logs.
• Google authentication: sign-in when you choose that option; Google Gemini: optional NAICS/business-code assistance involving the submitted business description. AI assistance does not replace tax preparation or professional review.
• PayPal: payment processing and transaction records. Legacy Stripe integrations may retain historical payment records.
• SendGrid: email delivery, including service and calculator communications and delivery/interaction records.
• Configured fax and communication providers, including SRFax, MetroFax, and Twilio where used: necessary authorized documents, destinations, and communication metadata.
• Google Ads: advertising and conversion measurement involving browser, activity, and advertising identifiers, subject to applicable consent and opt-out requirements.
• Meta (Facebook) Pixel: advertising and page-view measurement involving browser, activity, and advertising identifiers, subject to applicable consent and opt-out requirements.

5. Special protection for tax-return information

Tax-return information is subject to restrictions beyond a general privacy notice, including Internal Revenue Code Sections 7216 and 6713 where applicable. A website privacy notice or acceptance of general terms does not replace a required taxpayer consent.

Where a disclosure or use requires consent, the appropriate separate consent must be obtained before it occurs. Certain disclosures to tax preparers outside the United States, including disclosures involving SSNs, have additional requirements. Information must not be used for unrelated marketing or sent to AI tools merely because you accepted this notice.

6. Cookies, advertising, and choices

Necessary session technologies support authentication, security, payments, filing drafts, and user-requested support. Optional visitor, activity, and video-play measurement is off until you enable Measurement. Google Ads and Meta (Facebook) Pixel scripts and conversion events are off until you enable Advertising. The initial browser notice offers Accept all, Reject optional, and category Preferences. These controls are offered to all visitors rather than assuming a particular jurisdiction.

Use the footer's Privacy choices / Do not sell or share button or the persistent Privacy settings button to change or withdraw your choice. The separate Do not sell/share or use for targeted advertising option disables browser advertising. A Global Privacy Control (GPC) signal also disables advertising, even if you previously enabled it. Whether a particular US state statute applies depends on its thresholds, exemptions, the business, and the request; offering these controls is not a claim that every statute applies.

Choices are stored in this browser for up to 180 days and are requested again when expired or invalid. If browser storage is unavailable, a notice explains that your choice lasts only on the current page. Withdrawal stops future optional events, cancels pending measurement requests where possible, removes the advertising execution frame, and clears known optional identifiers accessible to this site without clearing login, payment, or filing state. It cannot undo disclosures already made, delete inaccessible third-party cookies, or apply to another browser. Browser controls are not consent to use tax information for unrelated purposes. Contact support@form5472.ai for privacy requests beyond these browser choices.

7. International processing and transfers

The operator is based in the United States. Providers or authorized personnel may process information in other countries. The locations of personnel accessing tax files have not yet been confirmed for this draft; it does not assert that all information stays in the United States or the EEA.

Where GDPR or other transfer restrictions apply, the relevant transfer must use a lawful mechanism, such as an applicable adequacy decision or appropriate contractual safeguards, with any required assessment and supplemental measures. We do not claim that a particular provider is certified or that standard contractual clauses are already in place without verification.

Taxpayer-consent requirements for overseas tax-information disclosures apply separately. Contact support@form5472.ai for recipient locations and transfer-safeguard information. Any required EU/UK representative or data-protection officer appointment must be assessed before final approval.

8. Retention and deletion

Our general tax-file retention policy is three years. Applicable tax and professional recordkeeping rules control how a required retention period is measured and may require a different or longer period. A legal hold, active dispute, regulatory inquiry, or another lawful requirement can also justify extended retention of the relevant records.

We retain account, payment, communication, and security records only for as long as needed for the relevant purpose and applicable obligations. A deletion request may not remove information that must lawfully be retained. Where appropriate, information should be deleted or de-identified after the applicable period.

The retention start date for each record category, deletion procedures, and backup-purge schedule require operational confirmation. This page does not claim that an automatic three-year deletion system is already implemented.

9. Information security

Protection of tax and account information requires reasonable technical and organizational safeguards, limited authorized access, and appropriate incident response. No website or transmission can be guaranteed completely secure. Protect your account and report suspected compromise promptly.

This notice is not a security certification. Where applicable, US tax preparers must maintain an appropriate written information security plan and comply with the FTC Safeguards Rule and other obligations. Safeguards, vendor agreements, incident procedures, and any required breach notification must be verified and maintained in practice.

10. Privacy rights and requests

Depending on your location and applicable law, you may request access, correction, deletion, portability, restriction, or information about how data is processed; object to qualifying processing; and withdraw consent. These rights have lawful exceptions, including mandatory tax-record retention.

Where the GDPR applies, you may object to direct marketing and processing based on legitimate interests, and lodge a complaint with the competent supervisory authority, including in your place of habitual residence. Responses are generally due within one month, subject to lawful extensions.

Where applicable US state privacy laws apply to the business and request, additional rights may include opting out of sale, sharing, or targeted advertising, limiting qualifying sensitive-data uses, using an authorized agent, and appealing a denied request. Applicable thresholds and exemptions must be assessed; this draft does not assert that every state law applies. California responses are generally due within 45 days, subject to lawful extensions.

Email support@form5472.ai with the subject “Privacy request” and describe your request. We may reasonably verify identity and agent authority without demanding unnecessary sensitive information. Do not send a full SSN or identity document in an initial email. Requests must be handled without unlawful discrimination.

Calculator estimates and optional business-code suggestions are informational. They are not intended as solely automated decisions producing legal or similarly significant effects. Any materially different automated use would require its own assessment and notice.

11. Children and changes to this notice

The service is intended for adults aged 18 or older and is not directed to children. Contact us if you believe a child has provided personal information so we can investigate and take the steps required by law.

We will identify updates with a revised date and provide additional notice or seek renewed consent where required. Materially different uses of previously collected information require a lawful basis; changing this notice does not itself authorize them.

12. Items requiring final review

Before this draft is relied on as the firm's final privacy notice, confirm overseas personnel access and processing locations, provider contracts and transfer mechanisms, actual retention/deletion procedures, advertising consent and opt-out controls, tax-information consents, security-plan implementation, applicable US state-law coverage, and whether an EU/UK representative is required.

A privacy page cannot by itself establish compliance. Contact support@form5472.ai or write to form5472.ai LLC at the address above with privacy questions.