Privacy Policy

1. Introduction

We are committed to protecting your privacy and complying with applicable data protection laws worldwide, including the EU General Data Protection Regulation (GDPR), UK GDPR, California Consumer Privacy Act (CCPA/CPRA), and other applicable privacy laws.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our ITIN application service ("Service"). By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy.

2. Information We Collect

We collect the following categories of information:

• a. Personal Information
  • Full name
  • Date of birth
  • Mailing address
  • Email address
  • Phone number
• b. Identification Documents
  • Passport details
  • Visa or immigration information
  • Other government-issued identification documents
• c. Tax Information
  • Tax filing status
  • Income sources
  • Tax treaty eligibility
  • Supporting tax-related documentation
• d. Payment Information
  • Billing details and payment method information
  • Payment data is processed securely by third-party payment processors. We do not store full credit card numbers.
• e. Application Data
  • All information submitted as part of your ITIN application
  • Communications related to your application
• f. Technical & Usage Data
  • IP address
  • Browser type
  • Device information
  • Cookies and similar tracking technologies

3. Legal Basis for Processing (EU/UK Users)

For users in the European Economic Area (EEA) and the United Kingdom, we process personal data based on the following legal grounds:

• Contractual necessity – to provide the Service
• Legal obligation – to comply with tax and regulatory requirements
• Legitimate interests – fraud prevention, service improvement
• Consent – where required (e.g., marketing communications)

4. How We Use Your Information

We use your information to:

• Prepare and submit ITIN applications to the IRS
• Communicate regarding application status and support requests
• Process payments and manage accounts
• Comply with legal, tax, and regulatory obligations
• Prevent fraud and misuse
• Improve and maintain the Service
• Send service-related notices and updates

5. Information Sharing and Disclosure

We may share your information:

• a. With the IRS
  • To process your ITIN application, as required.
• b. With Service Providers
  • Trusted third parties providing:
  • Payment processing
  • Cloud hosting
  • Data storage
  • Email and customer support services
  • All service providers are contractually obligated to protect your data.
• c. Legal & Regulatory Authorities
  • When required by law or in response to lawful requests.
• d. Business Transfers
  • In the event of a merger, acquisition, or sale of assets.
• e. With Your Consent
  • Where you explicitly authorize us to do so.

6. International Data Transfers

Your information may be transferred and processed outside your country of residence, including the United States.

For EEA/UK users, we rely on:

• Standard Contractual Clauses (SCCs)
• Adequate safeguards recognized under GDPR

7. Data Retention

We retain personal data only for as long as necessary to:

• Provide the Service
• Meet legal, tax, and regulatory requirements

When no longer required, data is securely deleted or anonymized.

8. Your Rights

a. GDPR / UK GDPR Rights

You have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion ("right to be forgotten")
• Restrict or object to processing
• Data portability
• Withdraw consent at any time

b. CCPA / CPRA Rights (California)

You have the right to:

• Know what personal data we collect
• Request deletion
• Opt out of the sale or sharing of personal data

We do not sell personal data.

To exercise any rights, contact us through our support channels.

9. Cookies and Tracking Technologies

We use cookies to improve functionality and user experience.

Where required by law (e.g., EU/UK), cookies are used only with your consent, except strictly necessary cookies.

You may manage cookie preferences via your browser settings.

10. Children's Privacy

The Service is not intended for individuals under 18 years of age. We do not knowingly collect personal data from minors.

11. Security Measures

We implement appropriate technical and organizational safeguards, including:

• Encryption
• Access controls
• Secure storage practices

However, no system is 100% secure.

12. Changes to This Policy

We may update this Privacy Policy periodically. Updates will be posted on this page with a revised "Last updated" date.

13. Contact Us

For privacy-related inquiries or rights requests, please contact us through our official support channels.