1. Introduction

Sails ("we," "our," or "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our sales tax calculation and compliance service.

Please read this Privacy Policy carefully. By using Sails, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Information You Provide

Account Information: Name, email address, password (stored in hashed form)
Business Information: Business name, address, EIN (optional), business type
Tax-Related Data: Nexus registrations, state registration numbers, filing history
Transaction Data: Sale amounts, product categories, state information for tax calculations
Payment Information: Billing address, payment method details (processed by third-party payment processors)

2.2 Information Collected Automatically

Usage Data: Pages visited, features used, time spent on the service
Device Information: Browser type, operating system, device identifiers
Log Data: IP address, access times, referring URLs

2.3 Cookies and Tracking

We use cookies and similar technologies to enhance your experience. See our Cookie Policy for details.

3. How We Use Your Information

We use your information to:

Provide, maintain, and improve our sales tax calculation services
Process tax calculations and generate compliance reports
Send you important notices about deadlines and rate changes
Respond to your inquiries and provide customer support
Detect, prevent, and address technical issues and fraud
Comply with legal obligations and enforce our terms
Analyze usage patterns to improve our service (in aggregate, anonymized form)

4. Data Sharing and Disclosure

We may share your information with:

Service Providers: Cloud hosting, payment processing, email delivery services
Legal Requirements: When required by law, court order, or government request
Business Transfers: In connection with a merger, acquisition, or sale of assets
With Your Consent: For any other purpose with your explicit permission

We do not sell your personal information to third parties for marketing purposes.

5. Data Security

We implement appropriate technical and organizational measures to protect your data, including:

Encryption of data in transit (TLS/SSL) and at rest
Password hashing using industry-standard algorithms
Regular security assessments and updates
Access controls and authentication measures
Secure data centers with physical security controls

Demo Mode Notice: This demonstration version uses browser localStorage for data storage. In production, all data would be stored in secure, encrypted databases with enterprise-grade security.

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes described in this policy, unless a longer retention period is required by law. Specifically:

Account Data: Retained while your account is active, plus 30 days after deletion request
Tax Calculations: Retained for 7 years to comply with tax record-keeping requirements
Usage Logs: Retained for 90 days
Marketing Preferences: Retained until you opt out

7. Your Rights

7.1 GDPR Rights (EU/EEA Residents)

Under the General Data Protection Regulation, you have the right to:

Access: Request a copy of your personal data
Rectification: Request correction of inaccurate data
Erasure: Request deletion of your data ("right to be forgotten")
Portability: Receive your data in a structured, machine-readable format
Restriction: Request limitation of processing
Objection: Object to certain types of processing
Withdraw Consent: Withdraw consent at any time

7.2 CCPA Rights (California Residents)

Under the California Consumer Privacy Act, you have the right to:

Know what personal information is collected about you
Know whether your personal information is sold or disclosed and to whom
Say no to the sale of personal information
Access your personal information
Request deletion of your personal information
Not be discriminated against for exercising your privacy rights

7.3 Exercising Your Rights

To exercise any of these rights, please visit your Account Settings or contact us at support@sails.tax.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission.

9. Children's Privacy

Our service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal data, please contact us.

10. Third-Party Services

We may integrate with the following types of third-party services:

E-commerce Platforms: Shopify, WooCommerce (and others via API)
Payment Processors: Stripe, PayPal
Analytics: Google Analytics (anonymized)
Customer Support: Help desk software

Each third-party service has its own privacy policy governing the use of your information.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. For material changes, we will provide more prominent notice (including email notification for account holders).

12. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at support@sails.tax or visit our Contact page.