Privacy Policy

We collect information you provide directly, including your name, email address, company, phone number, service interests, access-request details, contact messages, feedback, client portal messages, AI assistant questions, saved research thread content, and documents or file text you upload for analysis or client-portal sharing.

We also collect technical information needed to operate and protect the site, such as IP address, user agent, page path, request timing, rate-limit activity, error logs, authentication state, and similar server-side records.

We use information to provide the website, authenticate client accounts, operate the AI research assistants, save research threads, respond to inquiries, review access requests, manage professional-help requests, process voluntary support activity, send transactional emails, troubleshoot errors, maintain security, prevent abuse, and improve the public research tools.

We do not sell personal information. We also do not use the current site to run advertising cookies or Google/PostHog-style product analytics.

Questions submitted to Delphi, Solomon, DOR Search, or other AI research tools may be processed by model, search, reranking, and retrieval providers so the assistant can generate a response. Depending on the feature, those providers may include Anthropic, OpenAI, Cohere, Firecrawl, and Supabase.

Logged-in assistant conversations may be saved to your research history and administrative usage logs. Uploaded files are read into text for analysis and may be stored or logged depending on whether the upload is part of a saved client/account workflow.

Do not submit confidential, privileged, sensitive, or personally identifying information to public research tools unless you are using an engaged client account and understand the intended workflow. AI responses can be incomplete, wrong, or out of date.

Client account and authentication features use Supabase. We may store account identifiers, email addresses, profile details, access-request status, password recovery records, saved research threads, client messages, client-uploaded documents, and related audit or administrative information.

Account cookies are used to keep you signed in and to protect account-only pages. Admin sessions use separate authentication cookies for administrative access.

If you submit the contact form, feedback widget, access-request form, or similar site forms, we collect the form fields you provide and may store related IP address, user agent, page URL, timestamp, and delivery status information.

We use those submissions to reply, review requests, improve the site, and send notification or confirmation emails. Resend is used for email delivery where transactional email is configured.

Online donations are handled through Stripe Checkout. When you start a donation, Washington Tax Desk sends Stripe the donation amount and basic checkout metadata. Stripe handles payment details, billing information, payment authorization, fraud controls, receipts, and its own privacy obligations.

Washington Tax Desk does not store full card numbers or payment credentials on its own servers.

The site uses necessary cookies for authentication, security, and admin access. The interface may also use browser storage for preferences and temporary state, including theme preference, session-only assistant disclaimer state, and temporary chat attachment state.

You can control cookies and local storage through your browser settings. Blocking necessary cookies may prevent login, account-only pages, or other core site features from working.

We use trusted service providers to operate the site and related workflows, including Supabase for database, authentication, and storage; Vercel for hosting and deployment; Anthropic, OpenAI, Cohere, and Firecrawl for AI, search, retrieval, or reranking workflows; Resend for transactional email; and Stripe for donation checkout.

These providers process information as needed to provide their services to Washington Tax Desk. We may also disclose information if required by law, to enforce site policies, or to protect the site, users, or others.

We keep information for as long as reasonably needed to operate the site, provide account features, respond to requests, maintain research history, comply with legal obligations, resolve disputes, enforce policies, and preserve security or audit records.

Retention periods can vary by feature. For example, public form submissions, feedback, chat usage logs, saved research threads, and client documents may follow different operational needs.

You may choose not to submit optional information, stop using the AI assistants, disable nonessential browser storage, or contact us to ask about access, correction, export, or deletion of information associated with you.

Some requests may be limited by security needs, legal obligations, backup retention, dispute records, client-service records, or the need to preserve accurate research and administrative logs.

Washington Tax Desk is intended for professionals, business owners, taxpayers, and adults researching Washington State tax. It is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

We use practical administrative, technical, and operational safeguards designed to protect the site and the information it handles. No website, database, model provider, or transmission method can be guaranteed completely secure.

If you believe information submitted to Washington Tax Desk has been accessed or handled improperly, contact us promptly using the email address below.

Washington Tax Desk links to third-party websites and public sources, including government agencies, source documents, professional resources, Stripe Checkout, and other external pages. Those websites are governed by their own privacy policies and terms.

We may update this policy as the site, services, providers, or legal requirements change. When we make material updates, we will revise the Last updated date on this page.

Questions about this policy or how your information is handled can be sent through the contact page.