Legal
Last updated August 2026
We collect the contact and company information you give us, what Google or QuickBooks shares if you connect them, and we send company websites to an AI research provider to generate the summaries and credit read you see in a brief or the onboarding chat demo. We don't sell your data. This page explains what we collect, why, and who it's shared with.
What you give us directly. Name, email, phone number, company website, and details you share in a form or the onboarding chat — revenue range, growth stage, industry, team size, headquarters location, how bookkeeping and taxes are currently handled, and your role.
If you sign in with Google. Your name, email address, profile photo, Google account ID, and — if your account is on Google Workspace — your organization's domain.
If you connect QuickBooks Online (onboarding demo only). Read access to your company's financial reports (profit & loss, balance sheet, company info) via Intuit's API. We pull this data live each time it's shown to you rather than storing it — the only thing we keep is an encrypted connection token so you don't have to reconnect every visit.
Company research. When a website is submitted for analysis, we send that URL and publicly available content from it to an AI research provider (OpenRouter) to generate a summary of the company and a read on which tax credits might apply. That summary is stored alongside your other information.
To generate the brief or dashboard preview you asked for, to follow up with you about it, and to understand what's actually resonating so we can improve the product. We don't use your information to train AI models, and we don't use it for advertising.
We don't sell your data. It passes through the services that make the product work:
Sensitive tokens (like your QuickBooks connection) are encrypted at rest. Access to your data is restricted by row-level database policies scoped to your account, and every request that reads or writes it is checked against a verified login session — never a value we just trust from the request itself. That said, no system is completely secure, and we can't guarantee it.
This isn't directed at children, and we don't knowingly collect information from anyone under 13. If you believe a child has given us personal information, email privacy@staxiom.com and we'll delete it.
We don't use advertising or cross-site tracking cookies. Site analytics (Vercel Analytics) doesn't use cookies or collect personal information. If you sign in, your session is kept in your browser's local storage, not a cookie.
Every email we send has an unsubscribe link. To have your information corrected or deleted, email us at privacy@staxiom.com and we'll take care of it.
If this changes in a way that matters, we'll update the date at the top of this page. Material changes will be reflected here before they take effect.
Reach us at privacy@staxiom.com.