1. Introduction

NexTax.AI ("we," "our," or "us") operates the StartSmart application and website. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By using our Service, you consent to the data practices described in this policy. If you do not agree with the practices described in this policy, please do not use our Service.

2. Information We Collect

2.1 Personal Information

We may collect the following personal information:

• Name and email address
• Business information (company name, industry, location)
• Payment information (processed securely through Stripe)
• Communication preferences
• Account credentials and profile information

2.2 Usage Information

We automatically collect information about how you use our Service:

• AI conversation history and queries
• Features used and documents generated
• Login times and session duration
• Device information and IP address
• Browser type and operating system

2.3 Cookies and Tracking

We use cookies and similar tracking technologies to enhance your experience, analyze usage patterns, and provide personalized content.

3. How We Use Your Information

We use the collected information for the following purposes:

• Provide and maintain our Service
• Process payments and manage subscriptions
• Deliver AI-powered business guidance and recommendations
• Generate personalized documents and templates
• Send important updates and notifications
• Improve our Service and develop new features
• Provide customer support
• Comply with legal obligations
• Prevent fraud and ensure security

4. Information Sharing and Disclosure

4.1 Third-Party Service Providers

We may share your information with trusted third-party service providers:

• Stripe: Payment processing and subscription management
• Google Sheets: Lead tracking and analytics (if configured)
• OpenAI: AI-powered business guidance (anonymized queries)
• Vercel: Hosting and infrastructure services
• Email providers: Transactional emails and notifications

4.2 Legal Requirements

We may disclose your information if required by law or to:

• Comply with legal processes or government requests
• Protect our rights, property, or safety
• Prevent fraud or illegal activities
• Enforce our Terms of Use

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the business transaction.

5. Data Security

We implement appropriate security measures to protect your information:

• Encryption of data in transit and at rest
• Secure payment processing through Stripe
• Regular security audits and updates
• Access controls and authentication
• Employee training on data protection

However, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security of your information.

6. Your Rights and Choices

6.1 Account Management

You have the right to:

• Access and update your personal information
• Delete your account and associated data
• Export your data in a portable format
• Opt-out of marketing communications
• Manage cookie preferences

6.2 Data Deletion

You can delete your account at any time through your account settings. Upon deletion, we will remove your personal information within 30 days, except where retention is required by law.

6.3 California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect and how it's used.

7. Data Retention

We retain your information for as long as necessary to:

• Provide our Service to you
• Comply with legal obligations
• Resolve disputes and enforce agreements
• Improve our Service and prevent fraud

When you delete your account, we will delete your personal information within 30 days, except for information we are required to retain by law.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

9. Children's Privacy

Our Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically.

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: