Privacy Policy

Last updated: October 20, 2026

taxready ("we", "us") is a receipt-sorting service for self-employed tradespeople, operated by a sole proprietor doing business as taxready. This page explains what information we collect, how it is used, where it is stored, and how to have it deleted. It applies to this website and to the receipts and files you send us by email or through the upload page. It is part of our terms of service.

What we collect

Contact details: your name, business name, email address, and (only if you opt in) a mobile number for order-related text messages.
Receipt photos and documents you email to us or upload here, and the information extracted from them (merchant, date, amounts, expense category).
Income exports you choose to send, such as bank, Square, PayPal or Stripe CSV files, and mileage entries.
Consent records: the typed-name signature, date, and the version of the consent text you agreed to.
Technical data needed to run the site: the IP address and browser type recorded when a form is submitted.

We never ask for your Social Security Number, EIN, bank login, or full card or account numbers. If a receipt happens to show a full card number, our system flags it for manual review and does not transcribe it into your ledger.

This site does not use advertising or analytics cookies. It stores your language choice and, on the upload and status pages, the email you typed, in your own browser so you do not have to re-enter them. Nothing in that storage is sent to us until you submit a form.

How we use it

To sort each receipt into Schedule C categories and produce your ledger, summary and QuickBooks file.
To show you the progress of your order on the status page (counts and dates only).
To send you the upload link and a delivery notice by text, only if you opted in.
To keep the records required of a business that handles tax return information under US law (IRC §7216 and Treas. Reg. §301.7216).
To answer your questions and resolve disputes.

We do not sell or rent your information, use it for advertising, or share it with anyone except the service providers listed below. Every category we assign is a suggestion for your tax preparer to confirm; we do not prepare or file tax returns.

Text messages

Texts are sent only to clients who entered a US mobile number and ticked the opt-in box after signing the consent form. You will receive at most a few messages per order: the upload link, and a notice when the order is delivered. Message and data rates may apply. Reply STOP to any message to stop receiving texts, or HELP for help. Opting out of texts does not affect your order.

Who processes it

Anthropic (Claude API, United States): each receipt image is sent to an AI model that reads it and proposes a category. This disclosure is the subject of the §7216 consent form you sign before we process anything. Anthropic states that content sent to its API is not used to train its models.
Cloudflare: hosts this website, stores photos uploaded here, and holds consent records and order progress counters.
Google: receipts you email arrive in our Gmail inbox. Our software reads that inbox through the Gmail API to collect attachments and labels processed messages; attachments are then handled exactly like photos uploaded here, including being sent to Anthropic for sorting. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. If you choose delivery to Google Sheets, your ledger is created in a spreadsheet shared with your email address.
Twilio: delivers text messages, only to clients who opted in.
Marketplaces and payment processors (such as Upwork, Fiverr or a checkout provider) handle payment under their own privacy policies; we do not receive your card details.

Each provider is bound by its own terms to process data only on our instructions. We do not use any other third party to read, store or analyse your documents.

Where it is stored, and the United States

Receipt images are stored encrypted at rest in Cloudflare's object storage. Extracted data, your contact details and your ledger live in our bookkeeping database on systems controlled by us.
Some of your information is stored and reviewed outside the United States. Cloudflare may hold data in regions outside the US, and the human review of flagged receipts is done by a bookkeeper located outside the US. The consent form you sign names this disclosure, as §7216 requires. We do not collect Social Security Numbers, so no SSN is sent outside the US.
Every access to a receipt image by a reviewer is written to an audit log so we can show who looked at your documents and when.

How long we keep it

Receipts, extracted data and ledgers: the tax year they belong to plus the following calendar year, so you can ask questions after filing. They are then deleted.
Consent records and the audit log: as long as US law requires us to be able to show that consent existed and how the information was used.
Backup copies are overwritten on a rolling basis and are removed within 90 days of the primary copy being deleted.

We are not a records-keeping service. Keep your own originals; the IRS requires you, not us, to retain the records behind your return.

Your choices and rights

Deletion: email us from the address on your order and ask for deletion. We remove your images, extracted data and contact details within 30 days, except consent records and audit entries we are required to keep.
Copy of your data: ask and we will send your ledger, extracted data and the receipts we hold, within 30 days.
Correction: tell us if any detail about you is wrong and we will fix it.
Withdrawing consent: you may withdraw your §7216 consent at any time by email; we stop processing new receipts immediately and delete what has not yet been delivered.
Texts: reply STOP at any time.
If you live in a state with a consumer privacy law that gives you additional rights, you may exercise them by emailing us; we will not treat you differently for doing so.

Security

Data moves over HTTPS only. Receipts, the database and credentials are kept on systems with individual logins, and the bookkeeping application records every change with the user who made it. No system is perfectly secure. If a security incident affects your information we will notify you at the email on your order without unreasonable delay and as required by the breach notification law of your state.

Children

This service is for business owners and is not directed to anyone under 18. We do not knowingly collect information from minors.

Changes

If this policy changes we will update the date above. Material changes to how we use your data will be sent to the email on your order before they take effect.

Contact

Questions or requests: taxready79@gmail.com. Please write from the email on your order so we can verify it is you.