Privacy Policy

We collect information you provide directly, including your name, email address, company, phone number, service interests, access-request details, contact messages, feedback, signed-in workspace messages, AI assistant questions, saved research thread content, and documents or file text you upload for analysis or sharing in the signed-in workspace.

We also collect technical information needed to operate and protect the site, such as IP address, user agent, page path, request timing, rate-limit activity, error logs, authentication state, and similar server-side records.

We use information to provide the website, authenticate client accounts, operate the AI research assistants, save research threads, respond to inquiries, review access requests, process voluntary support activity, send transactional emails, troubleshoot errors, maintain security, prevent abuse, and improve the public research tools.

We do not sell personal information or use advertising cookies. With your permission, we use Google Analytics to measure visits to public pages, referring websites, and general device and geographic information, selected public links and tool openings, successful contact requests, and confirmed donation returns. We exclude account, admin, sign-in, and password-recovery pages. We do not send names, email addresses, account identifiers, search text, AI questions, form contents, or uploaded documents to Google Analytics. Public article detail pages are grouped by section. We do not record your screen, mouse movements, or keystrokes. A donation is counted only when Stripe confirms payment; the checkout identifier and donor details are not sent to Analytics. With the same permission, we also tell Google Ads when a visit leads to a free question, a feedback message, a founding-beta waitlist signup, or a first research-assistant answer, so we can see which ads are useful. These signals contain no names, email addresses, account identifiers, search text, AI questions or answers, form contents, or uploaded documents.

Questions submitted to Delphi, Solomon, DOR Search, or other AI research tools may be processed by model, search, reranking, and retrieval providers so the assistant can generate a response. Depending on the feature, those providers may include Anthropic, OpenAI, Cohere, Firecrawl, and Supabase.

Logged-in assistant conversations may be saved to your research history and administrative usage logs. Uploaded files are read into text for analysis and may be stored or logged depending on whether the upload is part of a saved client/account workflow.

Do not submit confidential, privileged, sensitive, or personally identifying information to public research tools unless you are using an engaged client account and understand the intended workflow. AI responses can be incomplete, wrong, or out of date.

Client account and authentication features use Supabase. We may store account identifiers, email addresses, profile details, access-request status, password recovery records, saved research threads, client messages, client-uploaded documents, and related audit or administrative information.

Account cookies are used to keep you signed in and to protect account-only pages. Admin sessions use separate authentication cookies for administrative access.

If you submit the contact form, feedback widget, access-request form, or similar site forms, we collect the form fields you provide and may store related IP address, user agent, page URL, timestamp, and delivery status information.

We use those submissions to reply, review requests, improve the site, and send notification or confirmation emails. Resend is used for email delivery where transactional email is configured.

When you submit the contact form we may include the campaign tags, referring site, and landing page from your visit (kept in your browser's session storage) in the notification email and server logs; these are not stored in our database.

Online donations are handled through Stripe Checkout. When you start a donation, Washington Tax Desk sends Stripe the donation amount and basic checkout metadata. Stripe handles payment details, billing information, payment authorization, fraud controls, receipts, and its own privacy obligations.

Washington Tax Desk does not store full card numbers or payment credentials on its own servers.

The site uses necessary cookies for authentication, security, and admin access. The interface may also use browser storage for preferences and temporary state, including theme preference, session-only assistant disclaimer state, and temporary chat attachment state. The session storage key wtd_attribution holds campaign tags, referring site, landing page, and capture time for contact-form attribution.

Google Analytics loads only after you choose “Accept.” It uses analytics cookies to distinguish visits. Your choice is saved in local storage under wtd_analytics_consent. Choose “Analytics choices” in the footer to change it; declining stops collection and removes this site's Google Analytics cookies. We also honor Global Privacy Control and Do Not Track browser signals. Declining analytics does not affect access to the site. For a confirmed donation return, we keep a one-way receipt hash in session storage to avoid counting a refresh twice in the same tab. That hash is not sent to Google. Google Ads conversion measurement uses the same choice as Google Analytics and does not set advertising cookies.

You can control cookies and local storage through your browser settings. Blocking necessary cookies may prevent login, account-only pages, or other core site features from working.

We use trusted service providers to operate the site and related workflows, including Supabase for database, authentication, and storage; Vercel for hosting and deployment; Anthropic, OpenAI, Cohere, and Firecrawl for AI, search, retrieval, or reranking workflows; Resend for transactional email; and Stripe for donation checkout; and Google Analytics and Google Ads for optional visitor and ad measurement. You can read more about Google's data use at How Google uses information from sites that use its services.

These providers process information as needed to provide their services to Washington Tax Desk. We may also disclose information if required by law, to enforce site policies, or to protect the site, users, or others.

We keep information for as long as reasonably needed to operate the site, provide account features, respond to requests, maintain research history, comply with legal obligations, resolve disputes, enforce policies, and preserve security or audit records.

Retention periods can vary by feature. For example, public form submissions, feedback, chat usage logs, saved research threads, and client documents may follow different operational needs.

You may choose not to submit optional information, stop using the AI assistants, disable nonessential browser storage, or contact us to ask about access, correction, export, or deletion of information associated with you.

Some requests may be limited by security needs, legal obligations, backup retention, dispute records, client-service records, or the need to preserve accurate research and administrative logs.

Washington Tax Desk is intended for professionals, business owners, taxpayers, and adults researching Washington State tax. It is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

We use practical administrative, technical, and operational safeguards designed to protect the site and the information it handles. No website, database, model provider, or transmission method can be guaranteed completely secure.

If you believe information submitted to Washington Tax Desk has been accessed or handled improperly, contact us promptly using the email address below.

Washington Tax Desk links to third-party websites and public sources, including government agencies, source documents, professional resources, Stripe Checkout, and other external pages. Those websites are governed by their own privacy policies and terms.

We may update this policy as the site, services, providers, or legal requirements change. When we make material updates, we will revise the Last updated date on this page.

Questions about this policy or how your information is handled can be sent through the contact page.