prep.tax

Privacy Policy

Effective date: May 24, 2026

1. Who we are

prep.tax is operated by Arkenly LLC, a Delaware limited liability company (“Arkenly LLC”, “prep.tax”, “we”, “us”). We provide tax-estimation and bookkeeping tools for gig workers, freelancers, and solopreneurs in the United States. This Privacy Policy explains what information we collect through the prep.tax web application (the “Service”) and how we use, share, and protect it.

Contact: privacy@prep.tax

2. Information we collect

Account information. When you sign up we collect your name, email address, and (if you sign in with Google) the basic profile information Google returns.

Tax and income information. Information you enter or upload yourself, including estimated income, expenses, deductions, mileage, filing status, dependents, and supporting documents.

Financial account information (Plaid). If you choose to connect a bank or card account, we use Plaid Inc. to retrieve transaction history, account balances, account and routing numbers (where applicable), and account holder information. We never see or store your bank login credentials — you provide those directly to Plaid. Plaid’s handling of your information is governed by the Plaid End User Privacy Policy.

Billing information. Payments are processed by Stripe. We receive the subscription status and last 4 digits of your card; we do not store full card numbers.

Usage and device information. Standard server logs (IP address, browser, timestamps) and product analytics needed to operate and improve the Service.

3. How we use your information

  • Calculate your estimated federal and state self-employment tax obligations.
  • Categorize transactions retrieved via Plaid to surface deductible business expenses.
  • Authenticate you and secure your account.
  • Process payments and manage your subscription.
  • Send transactional email (account, billing, security, quarterly reminders).
  • Detect, prevent, and respond to fraud, abuse, and security incidents.
  • Comply with legal obligations.

We do not sell your personal information, and we do not use your bank-transaction data for advertising.

4. How we share information

We share information only with service providers that help us run the Service, under contracts that require them to protect it:

  • Plaid — bank account connectivity and transaction retrieval.
  • Stripe — subscription billing and payment processing.
  • Supabase (via Lovable Cloud) — database, authentication, and file storage.
  • Cloudflare — application hosting, content delivery, and TLS termination.
  • Google — optional sign-in (OAuth).

We may also disclose information if required by law, to enforce our terms, or to protect the rights, property, or safety of prep.tax, our users, or others.

5. How we protect your information

  • Encryption in transit: All connections use TLS 1.2 or higher.
  • Encryption at rest: Database and document storage are encrypted with AES-256.
  • Access control: Row-level security restricts each user’s data to that user; production secrets are stored in a managed secrets vault.
  • Multi-factor authentication: TOTP-based MFA is available in Settings and is required before connecting a bank via Plaid Link.
  • Vulnerability management: Automated dependency and code security scanning on every change, with end-of-life software actively monitored.

6. Data retention

We retain your account information and tax data for as long as your account is active. You can request deletion at any time (see “Your rights” below). After deletion we may retain limited records as required for legal, tax, or accounting purposes (typically up to 7 years for financial records).

7. Your rights

Depending on where you live (e.g. California under CCPA/CPRA), you may have the right to:

  • Access the personal information we hold about you.
  • Request correction of inaccurate information.
  • Request deletion of your personal information.
  • Disconnect a linked bank account at any time.
  • Opt out of non-essential email communications.

To exercise these rights, email us at privacy@prep.tax.

8. Children

prep.tax is not directed to children under 13 and we do not knowingly collect information from them. If you believe a child has provided us information, contact us and we will delete it.

9. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or an in-app notice. The “Effective date” above always reflects the current version.

10. Contact us

Questions about this policy or how your data is handled? Email privacy@prep.tax.