Privacy Policy

Two roles

• The practice is the controller of its clients' data. The professional decides which clients to add, what to record, and what to share. We process that data on the practice's instructions.
• We are the controller of professional account data — the sign-in identity, practice settings and usage of the product.

What we collect

• Professional account: name, email, sign-in method (through our identity provider), practice name, credential, practice email, membership and role.
• Client records the practice enters: name, email, phone, filing status, state, notes, and the per-year tax facts the professional records or accepts from a document reading (wages, withholding, 1099 and K-1 amounts, rental property facts, prior-year return figures, real-estate hours).
• Documents: files a professional uploads or a client sends through their portal, plus what our AI read from them. Our prompts are instructed never to extract Social Security numbers, EINs or full account numbers.
• Portal use: the client's email (for the one-time code), the device session, and an access log of each open, upload and download.
• Product telemetry: anonymized usage events and error reports configured to exclude personal data.

How we use it

• To run the practice's workspace: store client records and documents, read documents into proposals for the professional's review, draft planning memos for the professional's review, and operate the client portal.
• To send the emails the product needs: portal links, one-time codes, upload notices, confirmations.
• To keep the service secure and working: malware scanning, access logs, error monitoring.
• We do not sell data, do not advertise, and do not use client documents to train AI models.

AI readings

When a document is read, its contents are sent to our AI model provider to produce a structured proposal. Readings are estimates; nothing reaches a client's profile until the professional reviews and applies it. The provider is bound not to use this data to train models.

Where data lives and who else processes it

Documents are stored in United States data centers, in a storage bucket dedicated to this product and encrypted with a customer-managed key. Records live in a managed database, encrypted at rest. The categories of providers, what each holds and why, are on the Security page; a named list is available to any practice on request.

Retention

• Client records and documents are kept for as long as the practice keeps them. Archiving a client keeps its records; closing a practice retains records under our retention schedule.
• Portal access logs and practice access logs are kept one year; one-time codes seven days; error and usage telemetry 180 days.

Your rights

• Professionals: edit practice settings and account details in Settings; close the practice in Settings; delete the sign-in identity on request.
• Clients: requests about your data go first to the practice that holds it. You may also email us; where a practice instructs us, we act on its behalf, and we will always tell you which practice holds your data.
• Email privacy@nestworthy.ai for any request. We acknowledge within 7 days and complete within 30.

Changes and contact

We will post changes here with a new date and notify practices of material changes by email. Questions: privacy@nestworthy.ai.