Privacy Policy

Last updated: December 04, 2024

This Privacy Policy describes Our policies and procedures on the collection, use and disclosure of Your information when You use the Service and tells You about Your privacy rights and how the law protects You.

We use Your Personal data to provide and improve the Service. By using the Service, You agree to the collection and use of information in accordance with this Privacy Policy. This Privacy Policy has been created with the help of the Free Privacy Policy Generator.

Interpretation and Definitions

Interpretation

The words of which the initial letter is capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.

Definitions

For the purposes of this Privacy Policy:

Account means a unique account created for You to access our Service or parts of our Service.

Affiliate means an entity that controls, is controlled by or is under common control with a party, where “control” means ownership of 50% or more of the shares, equity interest or other securities entitled to vote for election of directors or other managing authority.

Company (referred to as either “the Company”, “We”, “Us” or “Our” in this Agreement) refers to ECPA LLC, 1908 Thomes Ave STE 12165 Cheyenne, WY 82001.

Cookies are small files that are placed on Your computer, mobile device or any other device by a website, containing the details of Your browsing history on that website among its many uses.

Country refers to: Wyoming, United States

Device means any device that can access the Service such as a computer, a cellphone or a digital tablet.

Personal Data is any information that relates to an identified or identifiable individual.

Service refers to the Website.

Service Provider means any natural or legal person who processes the data on behalf of the Company. It refers to third-party companies or individuals employed by the Company to facilitate the Service, to provide the Service on behalf of the Company, to perform services related to the Service or to assist the Company in analyzing how the Service is used.

Third-party Social Media Service refers to any website or any social network website through which a User can log in or create an account to use the Service.

Usage Data refers to data collected automatically, either generated by the use of the Service or from the Service infrastructure itself (for example, the duration of a page visit).

Website refers to Rewiring My Brain, accessible from www.rewiringmybrain.com

You means the individual accessing or using the Service, or the company, or other legal entity on behalf of which such individual is accessing or using the Service, as applicable.

Collecting and Using Your Personal Data

Types of Data Collected

Personal Data

While using Our Service, We may ask You to provide Us with certain personally identifiable information that can be used to contact or identify You. Personally identifiable information may include, but is not limited to:

Email address

First name and last name

Phone number

Address, State, Province, ZIP/Postal code, City

Usage Data

Usage Data

Usage Data is collected automatically when using the Service.

Usage Data may include information such as Your Device’s Internet Protocol address (e.g. IP address), browser type, browser version, the pages of our Service that You visit, the time and date of Your visit, the time spent on those pages, unique device identifiers and other diagnostic data.

When You access the Service by or through a mobile device, We may collect certain information automatically, including, but not limited to, the type of mobile device You use, Your mobile device unique ID, the IP address of Your mobile device, Your mobile operating system, the type of mobile Internet browser You use, unique device identifiers and other diagnostic data.

We may also collect information that Your browser sends whenever You visit our Service or when You access the Service by or through a mobile device.

Information from Third-Party Social Media Services

The Company allows You to create an account and log in to use the Service through the following Third-party Social Media Services:

• Google
• Facebook
• Instagram
• Twitter
• LinkedIn

If You decide to register through or otherwise grant us access to a Third-Party Social Media Service, We may collect Personal data that is already associated with Your Third-Party Social Media Service’s account, such as Your name, Your email address, Your activities or Your contact list associated with that account.

You may also have the option of sharing additional information with the Company through Your Third-Party Social Media Service’s account. If You choose to provide such information and Personal Data, during registration or otherwise, You are giving the Company permission to use, share, and store it in a manner consistent with this Privacy Policy.

Tracking Technologies and Cookies

We use Cookies and similar tracking technologies to track the activity on Our Service and store certain information. Tracking technologies used are beacons, tags, and scripts to collect and track information and to improve and analyze Our Service. The technologies We use may include:

• Cookies or Browser Cookies. A cookie is a small file placed on Your Device. You can instruct Your browser to refuse all Cookies or to indicate when a Cookie is being sent. However, if You do not accept Cookies, You may not be able to use some parts of our Service. Unless you have adjusted Your browser setting so that it will refuse Cookies, our Service may use Cookies.
• Web Beacons. Certain sections of our Service and our emails may contain small electronic files known as web beacons (also referred to as clear gifs, pixel tags, and single-pixel gifs) that permit the Company, for example, to count users who have visited those pages or opened an email and for other related website statistics (for example, recording the popularity of a certain section and verifying system and server integrity).

Cookies can be “Persistent” or “Session” Cookies. Persistent Cookies remain on Your personal computer or mobile device when You go offline, while Session Cookies are deleted as soon as You close Your web browser. Learn more about cookies on the Free Privacy Policy website article.

We use both Session and Persistent Cookies for the purposes set out below:

Necessary / Essential Cookies

Type: Session Cookies

Administered by: Us

Purpose: These Cookies are essential to provide You with services available through the Website and to enable You to use some of its features. They help to authenticate users and prevent fraudulent use of user accounts. Without these Cookies, the services that You have asked for cannot be provided, and We only use these Cookies to provide You with those services.

Cookies Policy / Notice Acceptance Cookies

Type: Persistent Cookies

Administered by: Us

Purpose: These Cookies identify if users have accepted the use of cookies on the Website.

Functionality Cookies

Type: Persistent Cookies

Administered by: Us

Purpose: These Cookies allow us to remember choices You make when You use the Website, such as remembering your login details or language preference. The purpose of these Cookies is to provide You with a more personal experience and to avoid You having to re-enter your preferences every time You use the Website.

For more information about the cookies we use and your choices regarding cookies, please visit our Cookies Policy or the Cookies section of our Privacy Policy.

Use of Your Personal Data

The Company may use Personal Data for the following purposes:

To provide and maintain our Service, including to monitor the usage of our Service.

To manage Your Account: to manage Your registration as a user of the Service. The Personal Data You provide can give You access to different functionalities of the Service that are available to You as a registered user.

For the performance of a contract: the development, compliance and undertaking of the purchase contract for the products, items or services You have purchased or of any other contract with Us through the Service.

To contact You: To contact You by email, telephone calls, SMS, or other equivalent forms of electronic communication, such as a mobile application’s push notifications regarding updates or informative communications related to the functionalities, products or contracted services, including the security updates, when necessary or reasonable for their implementation.

To provide You with news, special offers and general information about other goods, services and events which we offer that are similar to those that you have already purchased or enquired about unless You have opted not to receive such information.

To manage Your requests: To attend and manage Your requests to Us.

For business transfers: We may use Your information to evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of Our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which Personal Data held by Us about our Service users is among the assets transferred.

For other purposes: We may use Your information for other purposes, such as data analysis, identifying usage trends, determining the effectiveness of our promotional campaigns and to evaluate and improve our Service, products, services, marketing and your experience.

We may share Your personal information in the following situations:

• With Service Providers: We may share Your personal information with Service Providers to monitor and analyze the use of our Service, to contact You.
• For business transfers: We may share or transfer Your personal information in connection with, or during negotiations of, any merger, sale of Company assets, financing, or acquisition of all or a portion of Our business to another company.
• With Affiliates: We may share Your information with Our affiliates, in which case we will require those affiliates to honor this Privacy Policy. Affiliates include Our parent company and any other subsidiaries, joint venture partners or other companies that We control or that are under common control with Us.
• With business partners: We may share Your information with Our business partners to offer You certain products, services or promotions.
• With other users: when You share personal information or otherwise interact in the public areas with other users, such information may be viewed by all users and may be publicly distributed outside. If You interact with other users or register through a Third-Party Social Media Service, Your contacts on the Third-Party Social Media Service may see Your name, profile, pictures and description of Your activity. Similarly, other users will be able to view descriptions of Your activity, communicate with You and view Your profile.
• With Your consent: We may disclose Your personal information for any other purpose with Your consent.

Retention of Your Personal Data

The Company will retain Your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use Your Personal Data to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies.

The Company will also retain Usage Data for internal analysis purposes. Usage Data is generally retained for a shorter period of time, except when this data is used to strengthen the security or to improve the functionality of Our Service, or We are legally obligated to retain this data for longer time periods.

Transfer of Your Personal Data

Your information, including Personal Data, is processed at the Company’s operating offices and in any other places where the parties involved in the processing are located. It means that this information may be transferred to — and maintained on — computers located outside of Your state, province, country or other governmental jurisdiction where the data protection laws may differ than those from Your jurisdiction.

Your consent to this Privacy Policy followed by Your submission of such information represents Your agreement to that transfer.

The Company will take all steps reasonably necessary to ensure that Your data is treated securely and in accordance with this Privacy Policy and no transfer of Your Personal Data will take place to an organization or a country unless there are adequate controls in place including the security of Your data and other personal information.

Delete Your Personal Data

You have the right to delete or request that We assist in deleting the Personal Data that We have collected about You.

Our Service may give You the ability to delete certain information about You from within the Service.

You may update, amend, or delete Your information at any time by signing in to Your Account, if you have one, and visiting the account settings section that allows you to manage Your personal information. You may also contact Us to request access to, correct, or delete any personal information that You have provided to Us.

Please note, however, that We may need to retain certain information when we have a legal obligation or lawful basis to do so.

Disclosure of Your Personal Data

Business Transactions

If the Company is involved in a merger, acquisition or asset sale, Your Personal Data may be transferred. We will provide notice before Your Personal Data is transferred and becomes subject to a different Privacy Policy.

Law enforcement

Under certain circumstances, the Company may be required to disclose Your Personal Data if required to do so by law or in response to valid requests by public authorities (e.g. a court or a government agency).

Other legal requirements

The Company may disclose Your Personal Data in the good faith belief that such action is necessary to:

• Comply with a legal obligation
• Protect and defend the rights or property of the Company
• Prevent or investigate possible wrongdoing in connection with the Service
• Protect the personal safety of Users of the Service or the public
• Protect against legal liability

Security of Your Personal Data

The security of Your Personal Data is important to Us, but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. While We strive to use commercially acceptable means to protect Your Personal Data, We cannot guarantee its absolute security.

Children’s Privacy

Our Service does not address anyone under the age of 13. We do not knowingly collect personally identifiable information from anyone under the age of 13. If You are a parent or guardian and You are aware that Your child has provided Us with Personal Data, please contact Us. If We become aware that We have collected Personal Data from anyone under the age of 13 without verification of parental consent, We take steps to remove that information from Our servers.

If We need to rely on consent as a legal basis for processing Your information and Your country requires consent from a parent, We may require Your parent’s consent before We collect and use that information.

Links to Other Websites

Our Service may contain links to other websites that are not operated by Us. If You click on a third party link, You will be directed to that third party’s site. We strongly advise You to review the Privacy Policy of every site You visit.

We have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites or services.

Changes to this Privacy Policy

We may update Our Privacy Policy from time to time. We will notify You of any changes by posting the new Privacy Policy on this page.

We will let You know via email and/or a prominent notice on Our Service, prior to the change becoming effective and update the “Last updated” date at the top of this Privacy Policy.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

Contact Us

If you have any questions about this Privacy Policy, You can contact us:

By email: [email protected]

Intuit responsibly leverages technology to power prosperity around the world. We believe that everyone has a right to privacy. As a financial services and technology company, we’re providing this Global Privacy Statement (“Privacy Statement”) to explain how we, Intuit Inc. and the Intuit group companies (collectively “Intuit,” “we,” “us,” or “our”), collect, use, share, or otherwise process information that we collect through our services. These services include, as applicable, our websites, mobile applications, social media pages, marketing activities, and other activities described in this Privacy Statement, or when other businesses provide us your personal information (collectively, the “Services”). This Privacy Statement is global, meaning it applies to all Intuit Services. We may provide additional or supplemental privacy statements for certain products or services.

This Privacy Statement describes our privacy practices when we process:

Personal information for the purposes of preparing a tax return or in connection with the preparation of a tax return (collectively, “Tax Preparation Information”) as part of providing TurboTax tax preparation services;

Personal information for the purposes of providing the benefits of our websites and the Intuit platform, which includes all of Intuit’s services, sites, experiences and software (including through our mobile applications and desktop applications) other than Tax Preparation Information (the “Intuit Platform”); and

Personal information as necessary to manage, run, improve, and develop our business and personalize your experience while interacting with the Intuit Platform. Depending on your settings, this may include showing you personalized ads or recommending certain Intuit products based on your interests.

Intuit determines the purposes and means of the processing of your personal information as described in this Privacy Statement, and therefore acts as a ‘data controller’ (or equivalent/similar terms under applicable data privacy laws) of such information. We may share your personal information within the Intuit group companies and conduct processing activities as controllers or joint controllers for the purposes set out in this Privacy Statement.

In certain circumstances, there may be more than one data controller processing your personal information. For example, your employer or a financial partner may also act as a data controller. In these situations, we act as an independent data controller over our processing activities. This means we determine how your personal information will be processed independently from the other data controllers. The other data controllers have their own obligations under applicable data privacy laws. Intuit is not responsible for other data controllers’ processing activities, and you should contact them directly for questions about how they process your personal information and about how to exercise your privacy rights in relation to such processing.

This Privacy Statement does not apply to certain processing activities where we are not the controller. For example, where Intuit processes personal information as a processor or service provider on behalf of our customers, including when we process personal information on behalf of customers of our professional tax software products. When we act as a processor or service provider, the privacy statement of the customer who uses our Services applies, instead of this Privacy Statement, and our processing of such personal information is governed by our agreements with such customers. If you have concerns about personal information that we process on behalf of a customer, or wish to exercise your privacy rights regarding such personal information, please contact the customer directly.

This Privacy Statement also does not apply to Intuit Financial Services or Intuit’s processing of education records subject to state or federal laws or children’s data in our education curriculum products. You may find the privacy statement for Intuit Financial Services here, and the privacy statement for Intuit for Education here.

If you have any questions about how Intuit processes your personal information, please see How to contact us below.

The Intuit Platform and your personal information

When we say “platform,” we mean that when you choose to share data with us, or bring over information from third parties (like a bank or loan provider), Intuit uses that data together, not just within the individual offering(s) you’re using. This means that, for example, we may use your bookkeeping details from QuickBooks, contact and purchase history details from Mailchimp, and/or recommendations from Credit Karma. The personal information we use in this centralized way may relate to you as an end user of our Services or as a customer or vendor of an Intuit customer whose personal information has been included in the Intuit Platform.

Business account information

Some experiences and services within the Intuit Platform allow you to interact with a business (such as your employer). If you are granted access to a business account (for example, in QuickBooks), the business owner or a designated administrator may control and administer details of your account, for example, by deciding your access rights; making decisions about your personal information (such as details about your payroll); or requiring you to take certain actions (for example, use location tracking to clock in for a shift). If the owner or designated administrator changes your access rights, then you may lose access to the information the business controls.

Your use of the Intuit Platform as part of a business account may be subject to the business’s policies, which may differ from this Privacy Statement. We are not responsible for the privacy or security practices of other businesses, and you should consider both the business’s policies and whether you are comfortable giving the business access to your personal information before connecting to their services.

The personal information that we collect or otherwise receive about you depends on the context of your interactions with Intuit, how you configure your account, and the choices you make, including your privacy settings. The way we process your personal information may also depend on the particular Services, functionalities, or experiences you use, your location, and applicable law.

Information you provide to us

You may provide us with your information as follows:

Contact data and account profile data. We collect information when you (or your organization) create an account, activate a subscription, and/or upload information to the Intuit Platform. Personal information may include your name, previous name(s) and/or nicknames, title and honorifics, professional title and company name, education, billing and mailing addresses, phone number and email address, profile photo, billing information (your payment information), purchase history, demographic information, preferences, subscription data, and your username and account credentials.

Identity verification information. We collect information to verify your identity, including your name, date of birth, social security number, social insurance number, driver’s license number, passport number, government-issued identification details, and similar information to verify your identity and to help you file your tax return.

Communications, feedback and survey data, and related data. We may collect personal information such as your name, email address, telephone number and any other personal information you choose to share when you reach out to us for support, give us feedback, participate in optional surveys, attend our events, participate in product research or training, or otherwise interact or communicate with us. This information may include: call center recordings and call monitoring records, chat and text records, voicemails, photographs, and video images.

Marketing data. You may provide us with your contact information and preferences for receiving marketing communications.

Social and community content. We receive content you post on our social media pages and our community pages.

Business and financial information. We may receive information about your business, your finances, expenses, invoices, financial statements, details of your financial transactions, payroll details, payment details, tax return details, details about your customers, vendors, or employees, income and wage information, and/or investment information.

Interactions with experts. The Intuit Platform provides many opportunities for you to connect with live experts, including, for example, accountants or tax preparers. When you interact with these experts, we may receive information about the questions you ask, the details of your accounts, and the guidance provided to you.

Interactions with chatbots. We may receive information from you through your use of chatbots, digital assistants, or other interactive bots across the Intuit Platform.

Device and contact data. If you grant permission in your device settings, certain features may have access to your device and contacts.

Business connection data. We may collect information about you when you interact with the Intuit Platform through our customers. If you are a customer, vendor or prospect of an Intuit customer and interact with the Intuit Platform (for example, to pay an invoice, make a purchase, interact with an email, provide contact details or complete a survey), we will use this information to make recommendations about you to our customers. Our customers may also provide business connection data directly about you to us; this is described below under ‘Other users’.

Third-party sources

The Intuit Platform is designed to help you connect with other people and businesses. As a result of those connections, others may be able to input personal information about you, including other customers using the Intuit Platform. For example, an Intuit customer may share personal information about you with us in order to use and benefit from the Intuit Platform. You also may be able to input or process personal information about others, for example, if you are an account administrator of one of our products or use Intuit to manage customer lists. If you input information about others into the Platform, you must only do so if you have first provided sufficient notice and received any required permissions, and have an appropriate legal basis if required by applicable law.

We may also receive personal information about you from other third parties where you have provided consent or where permitted by applicable law. We protect and process the personal information obtained from those third parties as described in this Privacy Statement, consistent with any additional restrictions imposed by the source of the information. Our third-party sources may vary over time and depend upon how you use the Intuit Platform. For example, we receive information from:

Linked third-party services. If you choose to sync a non-Intuit account/service with your Intuit account, we will receive information from that account/service according to your settings with that account/service. This may include details of your bank account information, social media information, purchase history or your business’s sales records through a point of sale application. 

Supplemental information and identity verification providers. We work with certain third parties to help us verify your identity, the specifics of your business, and/or supplement the personal information you have provided and ensure the accuracy of your personal information. For example, we use third-party providers to validate your contact information (e.g., name, mailing address, email address, phone number) or to provide additional details about your business. These providers may include, for example, your financial institution, telecommunications provider, or email provider.

Customer support providers. We receive personal information about you or your interaction with the Intuit Platform from certain third parties for troubleshooting purposes. For example, we may obtain information about your interaction(s) with customer support and information about technical issues you have raised, including call center recordings, call monitoring records, voicemails, photographs and chat records.

Credit bureaus and related third parties. Many Intuit features rely on information we receive from credit bureaus and related third parties. For example, in some countries, we may offer free credit reports and credit scores. We request these reports and credit scores on your behalf from credit bureau partners, like TransUnion, Experian and Equifax. These partners may also provide personal information such as employment or income data, social security number, vehicle or driver information, or information about special offers available based on your credit profile so we can make more personalized recommendations for you.

Other users. As described above, we may receive personal information about you from other Intuit Platform users, such as your accountant, bookkeeper, tax preparer, spouse, employer, or other business customers using the Intuit Platform (e.g., businesses from which you buy products or services, or with which you otherwise interact). We may also collect such personal information through features like member referral programs.

Risk management, cybersecurity & anti-fraud providers. We may receive personal information from third parties that help us assess risks associated with our offerings, including to help combat fraud and illegal activity and to help protect your personal information.

Data providers. We may receive information from information services and data licensors that provide demographic and preference information to us.

Content providers. We may receive personal information from companies that make user-generated content from their service available to others, such as local business reviews or public social media posts.

Joint offering partners. We may offer co-branded services or experiences or engage in joint-marketing activities with others, including through our conferences or live events.

Government agencies. We receive information from government agencies, including from various tax agencies, such as your tax filing confirmation from the IRS.

Public information. We collect individual and household demographic information and preference information from publicly available sources, such as open government databases, social media platforms, and others.

Automatic data collection

We, our service providers, and our business partners may automatically log personal information about you, your computer or mobile device, and your interaction over time with the Services, such as:

Device information. We may collect information about your device(s) such as IP addresses, log information, error messages, device type, and unique device identifiers. For example, we may collect IP addresses from you as part of our sign in and security features.

Usage information. We may collect information about your use of the Intuit Platform, such as the pages you viewed, the services and features you used or interacted with, your browser type, and details about any links or communications with which you interacted.

Location information. Certain features in the Intuit Platform may collect your precise location information, device motion information, or both, if you or your organization grant(s) us permission to do so through your device settings (for example, if you use QuickBooks’ time-tracking service, participate in Karma Drive, or use CK Money to locate nearby ATMs).

Information stored locally. Some of our web-enabled desktop services and offerings synchronize with the information on your computer. In doing so, we may collect information such as device information, product usage, and error reports. We may also store personal information locally on your device.

Communication interaction data. We or our third-party service providers may collect information from email providers, communication providers and social networks, such as your interactions with our email, text or other communications (e.g., whether you open and/or forward emails) – we may do this through use of pixel tags (which are also known as clear GIFs), which may be embedded invisibly in our emails.

Online behavioral data. We may automatically collect certain personal information about your use and interactions with our websites, customers’ websites or e-commerce stores, social media websites, and marketing campaigns that we or our customers organize, including device information (such as your IP address and unique device IDs), page view information and search results, links, and if you are a customer contact, whether or not a campaign presented or sent to you using our offerings has been viewed, delivered, opened, clicked on, whether it has bounced or was treated as spam.

Cookies and similar technologies

Intuit and our service providers may use commonly used tools such as cookies, web beacons, pixels, local shared objects and similar technologies (collectively “cookies”) to collect information about you (“Cookie Information”) so we can provide the experiences you request, recognize your visit, track your interactions, and improve your and other customers’ experiences. For example, we may use session-replay technologies, such as those provided by FullStory and Medallia, that employ software code to record users’ interactions with the Services in a manner that allows us to watch video replays of those user sessions. The replays include users’ clicks, mobile app touches, mouse movements, scrolls and keystrokes/key touches during those sessions. These replays help us diagnose usability problems and identify areas for improvement. You can learn more about FullStory at https://www.fullstory.com/legal/privacy-policy and you can opt-out of session recording by FullStory at https://www.fullstory.com/optout/. You can learn more about Medallia at https://www.medallia.com/privacy-policy/.

You have control over some of the information we collect from Cookies and how we use it. Please see Your Personal Information Rights and Choices section for more information. For full details on how we use cookies and similar technologies please see our Intuit Cookie Policy. For full details on how we use cookies and similar technologies when you use or interact with our Mailchimp offerings, please also see our Mailchimp Cookie Statement.

Biometric Information

Certain parts of the Intuit Platform make use of biometric personal information (“Biometric Information“). We will not collect your Biometric Information without first providing notice and obtaining your consent. For more details about how we use Biometric Information, please see our Biometric Notice.

We may use your personal information in a number of ways or as otherwise described at the time of collection:

Service delivery and operations. We may use your personal information to:

• Provide you with the Intuit Platform, create your account and manage our relationship with you
• Run and manage our business, including resolving billing and financial disputes
• Evaluate your eligibility for marketing offers, products and services
• Provide features to you, such as your free credit reports and scores
• Provide a product or service that you have requested through the Intuit Platform
• Connect you with experts and other users
• Communicate with you, such as sending you electronic notifications concerning your financial privacy
• Understand your needs and interests, and personalize your experience with the Services and our communications.
• Provide you with support and resolve disputes
• Authenticate your identity
• Manage event registrations and attendance, including sending related communications to you
• Register visitors to our offices for security reasons and manage non-disclosure agreements that visitors may be required to sign

Research and development. We may use your personal information to:

Improve and develop our products and services by analyzing how they are used and interacted with, by training our artificial intelligence models and other machine learning models, as well as by assessing the use of and interactions with our Platform and certain content our customers send or display through the Platform, including by conducting data analytics to develop insights about you, your needs, and your preferences, so we can make more informed predictions, recommendations, and products for our customers.

Please note any data obtained through Google Workspace APIs is not used to develop, improve, or train any generalized AI and/or ML models. Any data originating from the Google Workspace API is instead ingested only by Intuit’s and our third-party providers’ artificial intelligence tools to deliver services on the customer’s behalf and to ensure safety, not for model retraining.

Combine and anonymize information about your interactions with Intuit to create aggregate, anonymized statistics for use in research (including by contracting with academic institutions) and for marketing, promoting, improving, and developing our platform.

Marketing and advertising. We, our service providers and our third-party advertising partners may collect and use your personal information for marketing and advertising purposes to:

Market services, products and experiences, including to deliver gifts and promotional materials, product recommendations and other non-transactional communications via email, post, telephone, SMS or push notifications, in accordance with your marketing preferences.

Personalize your experience and tailor recommendations, advertising, and offers presented to you, including through the development of insights about you and your needs based on your interactions with the Intuit Platform’s products, services, and offerings. These advertisements may be displayed to you on Intuit’s digital properties, including our websites and mobile apps, media platforms, connected devices, or other third-party platforms and channels.

Whistleblower Reporting.

When you report any concern of non-compliance, unethical conduct, or other alleged violation of our Code of Conduct and Ethics, personal information you provide will be processed as a part of the investigation of the allegations and retained in accordance with our internal policies until the investigation is complete. While we make every effort to maintain confidentiality, depending on the investigation, disclosing your identity to other individuals may be necessary.

Compliance and protection. We may use your personal information to:

Protect against misuse or abuse of our Services and ensure compliance with our Terms of Service, including in relation to content our customers send or display through the Platform

Comply with legal and regulatory requirements

Protect the rights, property, safety or security of the Intuit Platform, our customers, employees or others and prevent fraudulent or illegal activity

Exercise our rights in the course of judicial, administrative, or arbitration proceedings

Enforce, remedy, or apply our Terms of Service or other agreements

With your consent. In some cases, we may specifically ask for your consent to use your personal information, such as when required by law. 

We may process your personal information for other purposes that are compatible with the above purposes where permitted by applicable law.

Artificial Intelligence (AI) and Automated processing

When you use or interact with features on the Intuit Platform like chatbots, digital assistants, or other digital conversational experiences powered by artificial intelligence, we may process your personal information using automated and manual (human) methods. For example, when we use automated processing on your personal information to provide a more personalized and enhanced experience in the Intuit Platform, you may see instantly tailored recommendations and insights to manage your cash flow and grow your business. Or when we analyze personal information and transactions we have collected or received about you, we can provide you with personalized advice, predictions, recommendations and experiences, including showing your largest tax deductions, sharing how to get your largest tax refund, and providing personalized recommendations for credit products. Certain laws may provide you with the right to object to the automated processing of your personal information. Please review these rights in the “Region and state-specific terms” section below.

When you interact with our services.

We may share your personal information in the following circumstances:

For certain product features. We may use third party API services, such as YouTube and Twilio, for certain product features. If you choose to use those features, you acknowledge and agree that you are also bound by the third party’s privacy policy. You may manage your YouTube API data by visiting Google’s security settings page here. You may make choices about your Twilio API data by visiting Twilio’s privacy notice here.

When you connect with an Intuit Platform partner. You may be provided with offers, products, and services from third-party companies who integrate with our Intuit Platform. If you choose to interact with a platform partner, apply for their services or offerings, or otherwise link or sync your account to a platform partner’s product or service, you consent and direct us to share your personal information to the platform partner providing the service or offering. For example, when we send your personal information to partners in order to generate offers for you to review, when we send your application information directly to our partners, or when we send you to the partner’s site for you to provide the information directly to them.

In some cases, if you click through to go to a platform partner’s site, you will automatically be sending your personal information to that platform partner. When this happens, you will still have to submit your application on the platform partner’s site. Remember that any information you provide to a platform partner, whether through us or on your own, will be subject to their privacy practices and terms and conditions.

When you connect to your social media account. Some of our features enable you to connect to a social media account or share information on social media platforms, like Facebook and Twitter. Any information you choose to share on social media may potentially be visible to a global audience and will be subject to the social media provider’s privacy policies (not this Privacy Statement). You should take care only to share information on social media that you are comfortable sharing.

For joint features, sales, promotions and events. With your consent we may share your personal information with third parties who are jointly providing features, sales initiatives, promotions or events with us.

When you publicly post the information. We may provide opportunities for you to publicly post reviews, questions, comments, suggestions, or other content that may include personal information, such as your name or username. Anything you share in a public forum is public, and you should think carefully before you decide to share.

With your wireless carrier. When you use your wireless device in connection with the Intuit Platform, you authorize your wireless carrier to use or disclose information about your account and your wireless device, if available, to Intuit or its service provider for the duration of your business relationship, solely to help them identify you or your wireless device and to prevent fraud.

When you participate in the short code program. Personal information collected through the short code program (i.e., when you sign up for SMS texts), will not be shared, sold, or rented to affiliated or unaffiliated third parties for their own marketing purposes.

Other circumstances.

We also share your personal information with third parties in the following circumstances.

For research. With appropriate controls, we may share information with third parties, such as academic institutions, government and non-profit organizations, for research purposes or to publish academic or policy-related materials. We only share information in a way that does not identify any individual.

With financial services providers. In connection with our financial products, we may share personal information with collection agencies, credit bureaus and loan services providers, and payment card association members. We may also share your personal information with other companies, lawyers, credit bureaus, agents, government agencies, and card associations in connection with issues related to fraud, credit, defaults, or debt collection.

With service providers or agents. We share personal information with our service providers or agents who provide services on our behalf for the purposes described in this Privacy Statement. Service providers or agents are required to implement reasonable privacy and information protection controls to maintain the privacy and security of information provided to them consistent with the privacy practices outlined in this Privacy Statement. Service providers or agents may include companies that assist us with our advertising, marketing, and sales efforts, help us with our technology offerings (such as a hosting, security or anti-fraud providers) and help us run our business. Service providers or agents also include AI providers, including generative AI providers.

For mergers and acquisitions. If we are involved with a merger, asset sale, financing, liquidation, bankruptcy, or the acquisition of all or part of our business to another company, we may share your personal information with that company and its advisors before and after the transaction date.

With our affiliates and subsidiaries and your right to limit information sharing. We may share your personal information with our affiliates and subsidiaries for everyday business purposes as described in this Statement, including for marketing purposes, for improving and developing our offerings, and for personalizing your experience on our Platform. Certain laws may provide you with the right to limit our information sharing activities in certain circumstances. Please review these rights in the “Region and state-specific terms” section below.

For advertising and analytics. Intuit may use advertising networks and other providers to display advertising on our Intuit Platform or on other sites. Intuit may share personal information with advertising networks and other providers to tailor advertising and offers presented to you based on your interactions with the Intuit Platform’s products, services, and offerings. Our advertising partners may place cookies on unaffiliated websites in order to serve advertisements that may be relevant to you based on your browsing activities and interests and determine the effectiveness of such advertisements. See also the “Region and state-specific terms” section below for additional information.

Intuit (excluding Credit Karma) responds to the Global Privacy Control signal for US residents, as described further in the United States section below. However, we do not respond to “Do Not Track” signals because there is no formal “Do Not Track” standard.

For legal reasons. We may share your personal information with third parties for legal reasons without your consent, and as permitted by law, including:

When we reasonably believe disclosure is required in order to comply with a subpoena, court order, or other applicable law, regulation or legal process;

To protect the rights, property, or safety of Intuit, TurboTax, the Intuit Platform, our customers or others;

To protect or defend against attacks;

To enforce, remedy, or apply our Terms of Service or other agreements;

To prevent fraud, cybersecurity attacks or illegal activity;

For debt collection; and

With regulatory agencies, including government tax agencies, as necessary to help detect and combat fraud and/or protect our customers, users and/or the Intuit Platform, or in required institutional risk control programs.

Your choices

At Intuit, we believe that you have choices about information that pertains to you or your business.

We provide all customers, including those in the EU, UK (and Gibraltar), and Switzerland, with options to manage the privacy of their personal information.

Update your privacy settings. You may update your privacy settings by visiting your account settings.

Correct your personal information. You can edit and correct certain personal information at any time by changing it directly in our products and services.

Access your personal information. You may download a copy of the personal information we have about you by visiting your account, the Intuit Privacy Center, or by calling us toll-free at 1 (877) 261-6470. If your inquiry is specific to Credit Karma, visit the Credit Karma Help Center (for US members), the Credit Karma UK Help Centre (for Credit Karma UK members), or the Credit Karma Canada Help Centre (for Credit Karma Canada members). If your inquiry is specific to Mailchimp, visit the Mailchimp Privacy Rights Request Page.

Delete your personal information. You may ask us to delete your personal information by visiting your account settings or the Intuit Privacy Center or calling us toll-free at 1 (877) 261-6470. If your inquiry is specific to Credit Karma, visit the Credit Karma Help Center (for US members), the Credit Karma UK Help Centre (for Credit Karma UK members), or the Credit Karma Canada Help Centre (for Credit Karma Canada members). If your inquiry is specific to Mailchimp, please visit the Mailchimp Privacy Rights Request Page.

Cookies and other tracking technologies. You may be able to opt-out of interest based advertising by visiting the NAI Opt-Out Page or the Choices Opt-Out Page (or the Digital Advertising Alliance of Canada Opt-Out Page, if you are based in Canada) or by visiting the Intuit Privacy Center. If you reside in California, Connecticut, Colorado, Montana, Oregon, Texas, Utah or Virginia, please refer to the relevant sections below under Region and state-specific terms for more information about opting out of tracking for targeted advertising purposes,or opting-out of sales and/or sharing.

Manage marketing communications from us. To update your marketing communication preferences, you can go to the marketing preference tools in your account settings or you may use the links below. You may also unsubscribe using the link found at the bottom of all marketing and promotional emails. If you receive marketing text messages from us through Intuit’s SMS shortcode program, you may opt out of receiving further marketing text messages from us by replying STOP to the message.

For more information, please visit:

Intuit communications preferences

Credit Karma US and Credit Karma UK communications preferences

Mailchimp communications preferences

Your Rights

Depending on where you live, you may also have certain state- or country-specific rights with respect to your personal information. Please see the Region and state-specific terms section for your country, below.

Verification

To help protect privacy and the security of your personal information, you may be asked to provide additional information to verify your identity and/or ownership rights before we can fulfill your data rights request. If we cannot verify your identity or your ownership rights to the data, we may not be able to service your request until you provide proper documentation.

Data retention

Unless you specifically ask us to delete your personal information, we retain your personal information as long as it is necessary to comply with our data retention requirements and provide you with services and the benefits of the Intuit Platform and successfully run our business. Even if you submit a deletion request, we may be required to maintain your personal information for as long as necessary to:

comply with our legal or regulatory compliance needs (e.g., maintaining records of transactions you have made with us);

to exercise, establish or defend legal claims; and/or

to protect against fraudulent or abusive activity on our service.

This means we may keep different information for different periods. If your account is canceled because you haven’t used it for a long time, we may delete this information immediately.

There may be occasions where we are unable to fully delete, anonymize, or de-identify your personal information due to technical, legal, regulatory compliance, or other operational reasons. Where this is the case, we will take reasonable measures to securely isolate your personal information from any further processing until such time as we are able to delete, anonymize, or de-identify it.

International data transfers

Unless you have provided us with consent to transfer your personal information, US Tax Preparation Information shall be processed and stored in the United States in accordance with applicable law.

With the exception noted above, Intuit reserves the right to store and process your personal information in the United States and in any other country where Intuit or its affiliates, subsidiaries, or service providers operate facilities in accordance with and as permitted by applicable laws and regulations. Some of these countries may have data protection laws that are different from the laws of your country (and, in some cases, may not be as protective).

When we transfer, store or process personal information outside of your jurisdiction (including to or in the United States, as described above), we take appropriate safeguards to require that your personal information remain protected in accordance with this Privacy Statement and applicable law.

Some of these recipients of your personal information are located in countries for which the European Commission, the UK (and Gibraltar) Government, and the Swiss Government (as and where applicable) have issued adequacy decisions, which means that these countries are recognized as providing an adequate level of data protection under applicable UK (and Gibraltar), European, and Swiss data protection laws and the transfer is therefore permitted under Article 45 of the GDPR.

Other recipients of your personal information are located in countries outside the EEA and/or the UK that are not the subject of an adequacy decision. In these cases, we may use the Standard Contractual Clauses approved by the European Commission or, as may be applicable, the International Data Transfer Agreement approved by the UK Government, to help ensure your personal information is protected. For more information on the transfer safeguards we rely on, please contact us by using the details in the “How to contact us” section below.

Intuit (excluding Credit Karma) and Mailchimp comply with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) regarding the collection, use, and retention of personal information transferred from the European Union (EU), the United Kingdom (and Gibraltar), and Switzerland to the United States. Intuit and Mailchimp rely on the EU-U.S. DPF to transfer data and will rely on the UK Extension to the EU-U.S. DPF and Swiss-U.S. DPF once approved by the appropriate authorities. We are subject to the investigatory and enforcement powers of the Federal Trade Commission. You can find more information about Intuit’s and Mailchimp’s Data Privacy Framework certification here.

Security of your personal information

We use reasonable physical, technical and organizational safeguards that are designed to protect your personal information. However, despite these controls, we cannot completely ensure or warrant the security of your personal information. You can find out more about how we protect your personal information here.

Changes to our Privacy Statements

From time to time we may change or update our Privacy Statement. We reserve the right to make changes or updates at any time. If we make material changes to the way we process your personal information, we will notify you by posting a notice in the Intuit Platform or on a community post; by sending you a notification; or by other means consistent with applicable law.

You can see when this Privacy Statement was last updated by checking the “last updated” date at the top of this Privacy Statement. Please review this Privacy Statement periodically to stay informed about how Intuit protects your privacy.

Children

Our services are not intended for or directed to children under the age of 13. We do not knowingly collect personal information from children. If you believe we may have information from a child, please contact us.

If you have questions or comments about this Privacy Statement or our practices, please contact us.

You can submit Intuit privacy questions. Submit your privacy question here

You can submit Credit Karma privacy questions. Submit your privacy question here

You can submit Mailchimp privacy questions. Submit your privacy question here

If you have an unresolved privacy or information use concern or complaint that we have not addressed satisfactorily, please contact our U.S.-based third party dispute resolution provider (free of charge) at https://feedback-form.truste.com/watchdog/request.