Privacy Policy

We collect only the information we need to run the Service. We do not ask for, and do not want, sensitive tax identifiers like your Social Security Number or bank account numbers. We collect three categories of information:

a. Information you provide directly

• Contact information — your first name and email address, so we can deliver your report and communicate about your account.
• Quiz and wizard answers — the financial context you provide to generate your strategy report (e.g., filing status, income range, state of residence, real estate holdings, retirement accounts). These are kept at the level of detail needed to estimate tax strategies and nothing more.
• Communications — messages you send to us through email, support forms, or in-product chat.

b. Information collected automatically

• Device and usage data — IP address, browser type, operating system, device identifiers, referring URL, pages visited, and timestamps. We use this for fraud prevention, rate limiting, and to understand how the Service performs.
• Approximate location — inferred from IP address only. We do not request precise GPS or device location permissions.

c. Information we do not collect

We do not collect Social Security Numbers, ITINs, driver's license numbers, bank account or credit card numbers, health information, or any document you choose not to upload. We do not link to your external financial accounts via Plaid or any similar aggregator.

We use the information we collect for the following limited purposes:

• To generate your personalized tax strategy estimate and report.
• To deliver your report by email and let you access your dashboard.
• To operate, maintain, secure, and improve the Service.
• To respond to your questions and provide support.
• To detect, prevent, and address fraud, abuse, and security incidents.
• To comply with legal obligations and enforce our Terms of Service.

We do not use your information for targeted advertising, profiling, behavioral remarketing, or data brokerage. We do not sell your personal information to anyone.

We share information only in these limited circumstances:

a. Service providers

We share information with a small number of vendors who perform services on our behalf under contractual confidentiality and security obligations. Each is used for one specific, limited purpose:

• Supabase — encrypted database hosting for your account and quiz answers.
• Netlify — website hosting and content delivery.
• Resend — transactional email delivery (magic links, report attachments).
• Stripe — payment processing, if and when paid features are introduced. Stripe handles card details directly; we never see or store your payment card numbers.

b. Tax professionals at your request

If you ask us to connect you with a licensed tax strategist, we will share the information necessary to make that introduction (your name, email, and the report generated from your inputs). Those professionals are independent third parties subject to their own privacy policies and professional obligations.

c. Legal and safety

We may disclose information if we reasonably believe it is necessary to (i) comply with applicable law, regulation, legal process, or enforceable governmental request; (ii) enforce our Terms of Service, including investigation of potential violations; (iii) detect, prevent, or otherwise address fraud, security, or technical issues; or (iv) protect the rights, property, or safety of Unlevered, our users, or the public.

d. Business transfers

If Unlevered is involved in a merger, acquisition, reorganization, financing, sale of company assets, or bankruptcy, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal information by posting a prominent notice on the Service.

e. Aggregated or de-identified information

We may share aggregated or de-identified information that cannot reasonably be used to identify you for analytics, research, and product improvement.

We use a small number of strictly necessary cookies to keep you signed in and to remember your progress through the quiz. We do not use advertising cookies, cross-site tracking pixels, or third-party marketing trackers.

If we later add first-party analytics (for example, Google Analytics for aggregate traffic measurement), we will update this Policy and honor your cookie preferences via an in-product consent banner. Today, no such trackers are active on the Service.

You can configure your browser to refuse or delete cookies. Disabling strictly necessary cookies may prevent parts of the Service from functioning.

We retain your account information and quiz answers for 90 days after your last activity, then permanently delete them unless a longer retention period is required by law or needed to resolve a support or legal matter. You may request earlier deletion at any time.

Aggregated and de-identified data that does not reasonably identify you may be retained longer for analytics and product improvement.

You have the following rights with respect to the personal information we hold about you:

• Access — request a copy of the information we have.
• Correction — ask us to correct inaccurate information.
• Deletion — ask us to delete your information.
• Opt out of marketing — unsubscribe from any promotional email at any time. You cannot opt out of service-related messages such as account verification or security notices while your account is active.

California residents: under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), you have additional rights to know what personal information we collect, to request deletion, to correct inaccurate information, and to opt out of the “sale” or “sharing” of personal information. We do not sell or share personal information as those terms are defined under the CCPA. We do not use personal information for cross-context behavioral advertising. To exercise any of these rights, email support@unlevered.io. We will respond within the time required by applicable law.

Other states (Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and similar): if your state gives you comparable rights, you may exercise them through the same contact method. We will not discriminate against you for exercising any of your privacy rights.

We employ physical, administrative, and technical safeguards designed to protect the integrity and confidentiality of the information you provide, including encryption in transit (TLS) and at rest for stored data. Access to production systems is limited to personnel who require it.

No system is perfectly secure. We cannot guarantee the absolute security of any information you transmit to us or store on the Service, and you provide information at your own risk. If we become aware of a security incident affecting your information, we will notify you and, where required, the appropriate authorities in accordance with applicable law.

Unlevered is intended for adults aged 18 and older. We do not knowingly collect personal information from anyone under 18. If we learn that we have inadvertently collected information from a child under 18, we will delete that information as quickly as possible. If you believe a minor has provided information to us, contact support@unlevered.io.

Unlevered is operated from the United States and is intended for U.S. residents only. If you access the Service from outside the United States, your information will be transferred to, stored, and processed in the United States, which may have data protection laws that differ from those in your country. By using the Service, you consent to this transfer.

The Service may contain links to third-party websites and services that we do not operate or control. This Privacy Policy does not apply to those sites. We encourage you to review the privacy policies of any third-party site you visit.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other reasons. When we make material changes, we will update the “Last updated” date at the top of this page and, where appropriate, provide additional notice (for example, by email or in-product notification). Your continued use of the Service after changes become effective constitutes acceptance of the updated Policy. If you do not agree to the changes, please stop using the Service.

If you have questions or concerns about this Privacy Policy or our privacy practices, please contact us at:

Stayguard LLC d/b/a Unlevered
support@unlevered.io