Client data,
handled like a firm would
Leads belong to your firm and are processed on your behalf. Here is what we collect, how it's protected, and what remains your responsibility.
How is calculator lead data protected?
Each firm's workspace is isolated from others, connections use HTTPS, sign-in supports two-factor authentication and sensitive credentials are encrypted at rest. Lead data is used only to deliver the service to the firm, is not sold, and is not shared for cross-context advertising.
Controls in place
Encryption in transit
All traffic to the app and the calculators uses HTTPS.
Workspace isolation
Firms only see their own contacts, settings and analytics.
Two-factor sign-in
Protect team accounts with a second factor.
No advertising cookies
Calculators don't set advertising or cross-site tracking cookies.
Private webhooks
Webhook URLs are never included in public embed configuration.
What is collected, and why
| Data | Collected when | Used for |
|---|---|---|
| Contact details | A client submits a lead form | Delivering the request to your firm |
| Calculator inputs and results | With the lead form | Giving your firm the context of the request |
| Aggregate counts | Calculators load or are shared | Your analytics |
| Account details | Your team signs up | Running your account and billing |
What remains your responsibility
Your firm decides how it uses leads, so your privacy notice should mention calculator enquiries and how you follow up. Preparers should keep lead data separate from return data and obtain IRC §7216 consents before using return information for other services. Advisers should keep records consistent with their books-and-records obligations.
If a client asks you to delete their data, delete the contact in the app and in any CRM the webhook fed.
Questions firms ask
Do you sell lead data?
No, and we don't share it for cross-context behavioral advertising.
Who owns the leads?
Your firm. We process them as your service provider.
Where is data stored?
In the United States.
Do you store full card numbers?
No, payments are handled by our payment processor.
Can we require two-factor authentication?
Each user can enable it; we recommend it for all staff.
How do we report a vulnerability?
Email the security contact listed in the privacy policy.
Do calculators collect data without a form submission?
Only aggregate counts; no personal data unless the client submits the form.
Are you SOC 2 certified?
We don't claim any certification. If your policy requires one, ask us what we can provide.
No question matches that filter. Clear it to see them all, search the whole site, or ask us directly; we reply within one business day.
Next entry
Questions from your compliance team?
Send them to us; we reply within one business day.
Firm and Network plans include a 14-day trial. Cancel before it ends and you pay nothing.