Skip to main content
← Back to ShopTally

Privacy Policy

Last updated: March 7, 2026

ShopTally ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our tax form generation software.

1. Information We Collect

We collect the following categories of information:

  • Account information: Your name, email address, and encrypted password when you create an account.
  • Business information: Business name, address, EIN, and other details you provide for your Schedule C filing.
  • Financial data: Income records (e.g., platform settlement data), expense records, and deduction information you enter or import.
  • Receipt data: Receipt images or data you upload for expense documentation.
  • Usage data: Information about how you interact with our application, collected through analytics tools.
  • Payment information: Payment details are processed directly by Stripe; we do not store your credit card numbers.

We do not collect or store Social Security Numbers (SSNs). You add your SSN directly on your tax forms after downloading them.

2. How We Use Your Information

  • Tax form generation: To calculate your tax obligations and generate IRS Schedule C and Schedule SE forms based on the data you provide.
  • AI-powered features: Your financial data may be sent to our AI service to power the ShopAI chat assistant and automated expense categorization.
  • Analytics: To understand how our product is used and improve the user experience.
  • Communication: To send transactional emails such as welcome messages, password resets, payment receipts, and deadline reminders.
  • Customer support: To respond to your inquiries and resolve issues.

3. Third-Party Services

We share data with the following third-party service providers, each for a specific purpose:

  • Stripe: Processes your payments securely. Stripe receives your payment information directly. See Stripe's Privacy Policy.
  • PostHog: Provides product analytics to help us understand usage patterns. PostHog may collect session recordings with sensitive input fields masked. See PostHog's Privacy Policy.
  • Resend: Delivers transactional emails (welcome, password reset, payment receipt, deadline reminders). See Resend's Privacy Policy.
  • Anthropic: Powers the ShopAI chat feature. Your financial data may be sent to Anthropic's API for AI-assisted tax guidance and expense categorization. See Anthropic's Privacy Policy.

We do not sell your personal data to any third party.

4. Data Security

  • Passwords are hashed using bcrypt before storage.
  • All data is transmitted over HTTPS.
  • We do not store Social Security Numbers.
  • Payment information is handled entirely by Stripe and never touches our servers.
  • Session tokens use secure, HTTP-only cookies with appropriate expiration.

5. Your Rights

You have the right to:

  • Access: Request a copy of the personal data we hold about you.
  • Correction: Update or correct inaccurate data through your account settings or by contacting us.
  • Deletion: Request deletion of your account and associated data by emailing support@shoptally.com.

6. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

  • Right to Know: You may request the categories and specific pieces of personal information we have collected about you, the categories of sources from which it was collected, the business purpose for collecting it, and the categories of third parties with whom we share it.
  • Right to Delete: You may request deletion of your personal information, subject to certain exceptions (e.g., completing a transaction, detecting security incidents, complying with legal obligations).
  • Right to Opt-Out of Sale/Sharing: We do not sell your personal information. We share limited analytics data with PostHog for product improvement purposes. You may opt out of analytics data collection via the cookie consent banner or in Settings.
  • Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.

To exercise these rights, email privacy@shoptally.io or use the account deletion feature in Settings. We will respond to verifiable consumer requests within 45 days.

Categories of personal information collected: Identifiers (name, email), commercial information (income, expenses, business data), internet activity (usage analytics), and financial information (payment records via Stripe).

7. Data Retention

We retain your account data and financial records for as long as your account remains active. If you delete your account, all associated data will be permanently removed from our systems. Anonymized analytics data may be retained for product improvement purposes.

8. Cookies

We use the following cookies and similar technologies:

  • Authentication cookies: Essential cookies to keep you signed in.
  • PostHog analytics cookies: Used to understand product usage patterns, including session recording. Sensitive input fields (passwords, financial data) are masked in recordings.

9. Children's Privacy

ShopTally is not intended for use by individuals under the age of 18. We do not knowingly collect data from minors.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through a notice on our website. Your continued use of ShopTally after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or your data, contact us at: support@shoptally.com