What we collect, why, and for how long.

CitedTax is research and drafting software for licensed tax professionals, operated by The Aslan Group LLC (United States). This policy covers citedtax.com and the firm workspace at citedtax.com/app. Our terms of service govern the use of the product; this page says what information we handle and why.

Account information. When a firm creates a workspace we receive the names and work email addresses of the people who sign in, through our authentication provider, and the firm name and address an administrator enters.

Billing information. Payments run through Stripe. We receive a customer identifier, the plan and credit purchases, and the invoice details; we never receive or store card numbers.

Firm uploads. Returns, notices and documents a firm submits for a request, and the facts and questions a firm types into a request form. Identifiers (Social Security and taxpayer identification numbers, EINs, bank routing and account numbers, phone numbers and email addresses) are replaced with placeholders before any text is analyzed. Client names are not needed and appear in a report only if a professional at the firm types one at review time.

Outputs. The working papers, memos, letters and client reports the engine produces for the firm, and the curation decisions and approvals recorded in the workspace.

Activity log. Every upload, download, approval and purge, with the person and the time, kept for the firm's own records and exportable by its administrator. The IP address and browser are recorded when the terms are accepted.

Site and product analytics. Page views and in-app navigation through PostHog, without session recording, without recording anything typed, and without client names, return data or job identifiers. The public site uses no advertising trackers.

Walkthrough requests. The email address, and any firm name or note, a visitor submits through the walkthrough form, used only to reply. The form produces one email to us and nothing else is recorded.

To run the requests a firm submits and deliver the outputs to that firm's workspace.

To bill for credits and the firm license, send receipts, and tell the person who submitted a request when it is ready.

To keep the workspace secure: sign-in, roles, the activity log, and abuse prevention.

To understand how the site and the product are used, in aggregate, and to fix defects.

We do not use firm uploads or outputs to train models, we do not aggregate them across firms, and we do not sell or share them. The model provider we use processes them under commercial terms that do not permit training on them.

Hosting and functions: Vercel. Database: Neon. Object storage: Vercel Blob. AI model provider: Anthropic (API, no training on your data). Embeddings and the law-text index: Voyage AI and Upstash, which receive the legal questions the engine asks and never the return. Authentication: Clerk. Payments: Stripe. Transactional email: Resend. Product analytics: PostHog. E-signature for our agreements with firms: Documenso. Each is under a data-processing agreement, and the list on the security page is the current one.

An uploaded PDF is deleted as soon as the analysis has extracted what it needs (a firm may choose a seven-day window for re-runs). Working papers, memos and client reports are kept for 90 days by default; a firm can shorten that, and an administrator can purge everything at any time.

Account and billing records are kept while the account is open and for the period tax and accounting rules require afterwards. The activity log is kept while the account is open, since it is the firm's record. We keep no database record of a walkthrough request; the email it produces stays in our inbox and with our email provider and is deleted within twelve months.

TLS in transit. At rest, every stored object is encrypted with a key unique to the firm, on top of the storage provider's own encryption. Sign-in runs through our authentication provider with the access controls the security page describes. No CitedTax employee handles a firm's file; processing is automated end to end. The security page describes the controls in more detail, and on request we provide a security summary suitable for a firm's written information security plan.

A firm obtains any consent the rules require, including under Internal Revenue Code section 7216, before uploading tax return information. Our data-processing addendum describes our position as a service provider assisting the firm, and it is available on request.

A firm administrator can export the activity log, shorten retention, and purge the workspace. Any person whose information we hold can ask us what we hold about them, ask for a correction, or ask for deletion, subject to what the law requires us to keep; write to hello@citedtax.com. Canadian and United Kingdom firms are served from the United States; by using the product a firm consents to that transfer, and the rights above apply to people in Canada in the same way.

Cookies. The site sets the cookies needed for sign-in, the analytics cookie described above, and one functional cookie that remembers whether the public site should default to its United States, Canada or United Kingdom view (set from the country of your connection, no identifier, one year). Blocking cookies in your browser leaves the public site readable and the workspace unavailable, since sign-in depends on them.

The product is for licensed professionals and firms. It is not directed at anyone under 18 and we do not knowingly collect information from them.

When this policy changes in a way that matters, the effective date changes and the new version is posted here. Firms with a workspace are told by email before it takes effect.

hello@citedtax.com for anything about this policy; security@citedtax.com for security questions. The terms of service and the security page are linked from every page footer.