Privacy Policy

Date of Last Revision: July 14, 2025

Welcome! When you use Treasur dba Deduction’s services (we call ourselves “Deduction,” “we,” or “our”), you trust us with your personal data. Protecting that personal data is core to our mission. This policy explains—in plain language and with concrete examples—what we collect, why we need it, and how you stay in control.

1. Why we collect personal data

We collect data we need to provide you with our services, which includes filing your taxes accurately and running Deduction safely.

Example: We ask for your Social Security Number (SSN) because the IRS requires it on your tax return.

2. What we collect (and examples)

CategoryTypical itemsWhy we need it
Information we receive on registrationName, email, and phone numberCreate your account; provide you with services
Information you give us

Date of birth, SSN, address, W‑2s, 1099s, receipts you upload, chat messages with Taylor (your AI accountant)

Prepare and file your return; answer your questions
Information we receive from partners

Payroll data via Plaid, brokerage statements from API providers, photo ID from identity‑verification vendor

Pull forms automatically; confirm it's really you
Information we generate

Draft tax calculations, deduction recommendations, audit‑risk scores

Show you savings and file accurately

We also collect other personal data directly from you and also from third parties to make Deduction work smoothly and keep things secure.

CategoryTypical itemsWhy we need it
Information we get from elsewhere

Your public social media info (like from LinkedIn if you interact with our pages) if platforms share it with us. Data from marketing partners or public sources.

To understand how you interact with us on public platforms and get insights for improving our service. (We treat this info just like anything else you give us directly.)

Information we collect automatically

Device data: Your computer or phone's operating system, model, browser, screen size, IP address, unique IDs, location (like city/state), and network info.


Online activity data: Which pages you visit, how long you stay, what you click, your Browse history, and access times.


Email interaction data: If you open our emails or click links in them (we use tiny, invisible pixels for this).

To make sure Deduction works on your specific device, fix bugs, measure how well our website and app perform, and keep Deduction fast and reliable. This also helps us understand what content is helpful to you in our communications.

Additionally, we and our service providers rely on standard technologies to collect this data, namely we use:

3. How we use your personal data

We use your personal data to deliver our services to you and to work towards consistently making the experience better for you and all of our users. At a high level, this includes using your personal data to power our services and to communicate with you.

As some examples, we use your personal data for:

We do not sell your personal data to third parties. Period.

We may also use this data for research and development to analyze and improve Deduction and our business, sometimes creating aggregated or anonymous data that doesn't identify you personally. Sometimes, we might send you direct marketing, like newsletters, but you can always opt out of receiving these communications by clicking "unsubscribe."

Finally, we may use this data to fulfill our obligations under applicable laws, to protect our company and our legal rights and defend ourselves against legal claims or disputes. This means we might use your personal data to comply with valid subpoenas or government requests, protect our rights (and yours, and others'), audit our processes for compliance, enforce our terms, and prevent fraud, cyberattacks, or any other illegal activity.

4. When we share personal data (and why)

When it comes to sharing your data with third parties for the purpose of provide you our services, we share your data externally as needed for preparing and filing your taxes:

  1. Government tax authorities – We electronically transmit the personal data you approve—including your full Social Security Number—directly to the IRS and any state revenue departments you select. This is required to file your return.
  2. Trusted service providers – Third‑party companies and advisors we rely on to operate Deduction.:
    • Cloud infrastructure & storage (e.g., AWS, GCP) that host our encrypted databases and backups.
    • AI model providers that extract numbers from your documents. They process text in secure memory and we do not permit them to store your SSN or other data once extraction is complete or to improve their own models using your data.
    • Tax engine & e‑file transmitter that formats your return and sends it to the IRS/state systems. This vendor is an IRS‑authorized transmitter, complies with GLBA, and passes annual Modernized e‑File (MeF) testing.
    • Identity‑verification, e‑signature, and email services that help us confirm it’s really you and deliver signed forms.
  3. With your explicit written direction – For example, if you ask us to pre‑fill a mortgage or credit‑card application or email your filed return to a lender, we will first obtain your signed consent on an IRS‑approved form and then share only the data that lender needs.

Additionally, like all business, we may also share your data with third parties for purposes related to running and maintaining our business. This includes:

  1. Authorities and others – We may disclose your personal data to law enforcement, government authorities, and private parties, as we believe in good faith to be necessary or appropriate for the compliance and protection purposes.
  2. Advertising partners, which are third party advertising companies, including for the interest-based advertising 2. purposes described in this privacy policy.
  3. Business transfers – We may sell, transfer or otherwise share some or all of our business or assets, including your personal data, in connection with a business transaction (or potential business transaction) such as a corporate divestiture, merger, consolidation, acquisition, reorganization or sale of assets, or in the event of bankruptcy or dissolution.

7. Your choices & rights

You have control over your account. Within your account settings, you can:

Opt‑out of marketing email – Additionally, you may opt out of marketing-related emails by clicking “unsubscribe” at the bottom of any email we send you. You may continue to receive service-related and other non-marketing emails.

Limit Online Tracking – Further, there are many ways to limit online tracking, which we have summarized below. These tools are not associated with us and we cannot guarantee that they work as their providers advertise them, but we have included this information for your knowledge:

Note that because these opt-out mechanisms are specific to the device or browser on which they are exercised, you will need to opt out on every browser and device that you use.

Do Not Track. Some Internet browsers may be configured to send “Do Not Track” signals to the online services that you visit. We currently do not respond to “Do Not Track” or similar signals. To find out more about “Do Not Track,” please visit http://www.allaboutdnt.com.

8. Data retention

Where required under applicable laws, we retain personal data only for as long as is necessary to fulfill the purposes for which it was collected and processed, in accordance with our retention policies, and in accordance with applicable laws and regulatory obligations. For example, we keep the records the IRS requires for at least 7 years, unless you ask us to delete sooner and the law allows it. Backup tapes roll off after 35 days.

To figure out how long we keep personal data, we look at things like how much data it is, what kind of data it is, and how sensitive it is. We also consider the risk if someone unauthorized got hold of it, why we need it, and if we can still achieve those goals without keeping it as long.

9. Children’s privacy

Deduction is designed for adults. However, preparing an accurate U.S. tax return often requires details about your dependents — sometimes children under 13 — such as their name, date of birth, and Social Security Number. We collect this personal data only when you, the parent or legal guardian, provide it to us. If we learn that we have collected personal data through the website directly from a child under 13 without the consent of the child’s parent or guardian as required by law, we will delete it.

We do not let children create accounts or submit data themselves, and we do not use children’s personal data for marketing or profiling.

10. Changes to this policy

We reserve the right to modify this Privacy Policy at any time. For regular updates, we will post the updated policy within the service and on deduction.com. If we make material changes, we’ll also notify you via email within the service before it takes effect.

11. How to contact us

Questions or concerns? We’re here to help.

Email: support@deduction.com

Mail: 1500 South Grant Street, #4201, Denver, CO 80210, US

12. Gramm‑Leach‑Bliley Act (GLBA) notice

Please review our GLBA Privacy Notice to learn more about our collection, use and sharing of your financial information. We do not disclose your non‑public personal information to anyone outside the limited sharing described in Section 4 and in our GLBA Privacy Notice.

If we ever change the way we share or protect your non-public personal information under the GLBA, we will issue an updated notice as required and give you the legally required time to review your options.