Tax Office OS
Back to the site

Legal privacy

Privacy Policy

Tax Office OSLast updated: August 6, 2026

The Short Version

Your tax return never leaves your device. Tax Office OS extracts, analyzes, and stores your tax information entirely on your computer, inside an encrypted vault only you can open. There are no user accounts. We run no analytics and no telemetry. The complete list of things that can ever leave your device has three entries, every one of them optional or triggered only by you, and none of them carries your tax data.

1. Introduction

Tax Office OS is a product of Home Office OS LLC ("the Company", "we", "us"). This policy describes what information the Software and the taxofficeos.app website handle, where it lives, and what, exactly, can ever be transmitted. It is written to be checkable: the Software's network behavior is observable with standard browser tools, and we invite that inspection.

2. What We Do Not Collect

  • We do not receive, collect, store, or transmit your tax documents, extracted fields, analysis results, reports, letters, client names, or files. All of it is processed and stored on your device only.
  • There are no user accounts, usernames, or server-side profiles.
  • The Software contains no analytics, no telemetry, no advertising identifiers, and no tracking.
  • The Software makes no network requests in ordinary use. It is fully functional offline.
  • Because your tax data is never transmitted, no log of ours, anywhere, can contain it. After the app loads, ordinary use generates no network requests at all: there is nothing to log. The desktop version, once installed, makes no network requests in ordinary use.

3. The Complete List of What Can Leave Your Device

Three features can transmit data. Each is off by default or fires only on your explicit action, and none carries your tax data.

  1. License and update check. Only when you click the check button, or if you turn on the optional weekly auto-check (off by default), the Software sends the app version and your license customer id to the Company's license service. Nothing else is in the request.
  2. Personal Cloud backup (optional, separate consent). If you enable it, your vault data is encrypted on your device before upload and the server stores only ciphertext it cannot decrypt, together with your license identifier. We cannot read your backups. You can delete them at any time, and deleting them removes them from the server.
  3. Enzo's external answer mode (optional, separate consent, off by default). Enzo, the built-in assistant, runs on your device. If you explicitly enable its external mode, the text of your question, scrubbed of personal information and shown to you before sending, is sent to the external AI provider disclosed in the interface at the moment of use. Your return, extracted fields, analysis results, and files are never transmitted in any mode.

4. Purchases

Payments are processed by Stripe, which handles your card details under its own privacy policy; we never see or store card numbers. To issue your license, we receive and retain purchase records: your email address, the Stripe customer id, the product purchased, and the license keys issued. We retain these records as required for legal, tax, and accounting purposes.

5. Local Storage and Encryption

Your data is stored on your device encrypted with AES-256-GCM. The encryption key is derived from your vault password, which we never see and cannot reset. A printed recovery key, shown once, is the only recovery path; if both are lost, the vault cannot be opened by anyone, including us. Each client workspace is encrypted separately. On the web version, storage lives in your browser's storage area, which the browser itself controls; the optional Personal Cloud backup exists because a browser can evict that storage.

6. The AI Assistant (Enzo)

Enzo answers questions using models that run on your device; in its default configuration it makes no network requests. Its optional external mode is described in section 3. Enzo's answers are analysis, not advice, and the Terms of Service's verification guidance applies to them.

7. The Website

The taxofficeos.app website is a static site with no analytics, no advertising, and no tracking cookies. It is served from infrastructure we operate, and the servers we operate keep no access logs: the IP address any web server necessarily sees in the moment of a request is not recorded. Purchase pages hand off to Stripe, which operates under its own privacy policy.

We can only produce what we hold. For the Software, that is nothing: your tax data is on your device, and we have no access to it. For the services above, it is purchase records and, if you enabled Personal Cloud, encrypted blobs we cannot decrypt. We will require valid legal process for any disclosure and will notify affected customers where the law allows.

9. Children's Privacy

The Software and website are not directed at children under 13, and we do not knowingly collect information from them. With no accounts and no collection, there is no mechanism by which such data would reach us.

10. Your Rights

Because we hold almost nothing, most privacy rights are satisfied by the architecture itself: your data is on your device, under your control, exportable and deletable by you at any time. For the records we do hold (purchases, licenses, optional encrypted backups), you may request access, correction, or deletion by contacting us; deletion of purchase records is subject to legal retention requirements.

11. Changes to This Policy

We will post changes here with a new "last updated" date and make reasonable efforts to notify users of material changes. A change can never retroactively transmit data; the architecture above is the product.

12. Contact

Home Office OS LLC contact@taxofficeos.app

This policy is provided in English. If a translation is ever provided, the English version controls.