Information Processed
The interviews may process names, addresses, SSNs/TINs, EINs, signer facts, owner or donee facts, dates, descriptions, values, basis, classification/election facts, and generated draft packet PDFs depending on the form.
What Stays Local
The current public preview does not require an account and does not store return data on an application server. Project files and draft PDFs are downloaded to the user's device when requested.
- Return data lives in browser memory while the interview is open.
- Encrypted project export uses browser WebCrypto before download.
- Plain project export is not part of the public preview; encrypted local export is the supported save/resume path.
Review the public-preview data flow for the current browser-local network boundary.
Address Autofill
Address entry uses browser-native autofill and local state dropdowns by default. The app does not call a third-party address autocomplete API in the current workflow.
Account Metadata
Public-preview draft PDFs do not require an account. Any account status page is limited to email sign-in, access records, support routing, and audit metadata. It is not for storing return payloads, generated PDFs, project files, SSNs/TINs, EINs, addresses, gift facts, owner facts, or election facts.
Analytics
Return-entry pages should not use session replay, ad pixels, or analytics that capture taxpayer data. Public marketing pages may use aggregate, non-PII analytics.
Service Providers
Public-preview service providers should receive only the minimum data needed for hosting, security, availability, account access, and support routing. No provider receives form return payloads for public-preview PDF creation.
User Choices
Users can avoid cloud storage by downloading their own project file and packet. Once a file is downloaded, securing that local file is the user's responsibility.