Privacy Policy

This summary highlights the main points of this Privacy Policy. The sections that follow give the details, and where the two differ, the sections control.

Information and purposes. We collect account, organization, return, payment, communications and activity information from you, your organization and your use of the Services. We use it to file what you authorize, run your account, take payment, provide support, send email, understand how the Services are used, keep them secure and meet legal obligations. Returns can contain financial details and information about people other than the account holder.

Disclosures and protection. We disclose information to service providers working for us, to authorized members of your organization, to the IRS, and in the other circumstances described below. The text extraction services that read uploaded documents do not retain them. We do not sell personal information. We work with advertising providers to measure and improve our advertising, which California law may treat as sharing; the section on cookies says what this involves and how to opt out. We use encryption and access controls, though no system is perfectly secure. The IRS makes most of a filed return public; within the Services, we keep returns confidential.

Retention and choices. Unused uploads, unfinished drafts and unconfirmed reminder requests are deleted on fixed schedules; a PDF read into a return is kept with it, and required filing records may be kept after an account closes. You can unsubscribe from marketing email and can contact support to request access, correction or deletion, subject to applicable law, verification and retention obligations.

We collect personal information that you provide, that your organization submits, and that is generated when the Services are used. In this Policy, "personal information" means information about an individual in the account, organization, filing, payment and activity records described below, whoever supplied it.

Account and organization information. Your name and email address; your sign-in credentials are held by our authentication provider. If you sign in with an account from another provider instead of a password, that provider sends us your name, email address and profile photo, and knows that you used that account to sign in to the Services. We do not receive your password for that account. For your organization, its legal name, EIN, address, officers and members. Under the Legal Terms, you are responsible for having permission to provide other people's information.

Return information. Uploaded PDFs and everything entered in a return, including financial information, officer and director names and compensation, and, where the return requires them, contributor names, addresses and contribution amounts. This Policy covers people named in a return whether or not they have an account with us.

Payment, communications and activity information. Payment records include transaction identifiers from our payment processor and the last four digits of the card used; we never see or store full card numbers. We also keep support email and record page views, clicks, errors, campaign parameters (including the click identifiers advertising providers attach when you arrive from an ad) and server logs.

Reminder requests. If you ask for an email reminder without an account, we collect your email address, the form and the month your tax year ends, the dates of the reminder, and when, and from which internet address and browser, you asked for, confirmed or cancelled it.

We use information to create and administer accounts, manage organization access, read uploaded documents, prepare returns, collect signatures, transmit authorized filings and report IRS acknowledgements.

We also use information to collect fees, answer support requests, send notices and marketing email, understand how the Services are used, diagnose errors, prevent abuse and meet legal and recordkeeping obligations. Marketing email includes filing reminders and service news; account and filing notices are transactional. A reminder asked for without an account is sent only after its address is confirmed, and that address receives no other marketing email.

Service providers. We disclose information to providers that host and store data, authenticate users, process payments, deliver email, measure product use, and read uploaded documents (text extraction services). Each provider may use the information only to provide its service to us. We name providers here by role; a current list is available from support.

Text extraction services. We send uploaded documents to text extraction services to be read. We use only services that do not retain the documents they read: each returns the extracted information to us and keeps neither the document nor the result once the request is complete. A provider's terms may allow narrow exceptions, such as keeping material flagged as unlawful. Subject to those exceptions, once a document is deleted from our storage, no text extraction service holds a copy.

Your organization and the IRS. Authorized members of your organization can see its information. Filings you authorize are sent to the IRS. Removing a member does not withdraw a transmitted filing or remove records we must keep.

Other disclosures. We may disclose information when the law requires it, to protect the Services, or as part of a sale or transfer of our business, subject to the legal limits on return information. We do not sell personal information. Apart from the advertising described under DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?, we do not share it with advertisers or for cross-context behavioral advertising.

Public filings. Most of an exempt organization's annual return is public, and the IRS publishes returns through Tax Exempt Organization Search. Contributor names and addresses are generally withheld from public inspection for public charities but are public for private foundations, and other disclosure rules and exceptions may apply. These rules apply to people named in a filing whether or not they have an account with us.

Confidentiality within the Services. We treat the entire return as confidential, whether or not the IRS would make a given part public. Apart from access you authorize and the disclosures described above, only the IRS and the providers that operate the Services receive it, and we never publish your uploaded return. Our practices do not change the IRS's public-disclosure rules.

Analytics. Our analytics provider sets a cookie, shared by the website and the filing application, to measure page views, clicks, errors and campaign parameters across both. The provider may use this information only to provide its service to us, and it is not sold or shared with advertisers.

Advertising. We advertise the Services online and work with advertising providers to measure and improve that advertising. These providers may use cookies and similar technologies on our website and filing application to recognize visitors who arrive from one of our ads or who have visited before, and we may tell them about actions taken on our sites, such as a purchase and its amount. They may use this information to measure our ads and to show our ads to people who have visited our sites. We never give advertising providers names, email addresses, EINs or anything from a return.

Browser storage. If you start filling in a return before you have an account, what you enter is kept only in your browser's storage on your device, and we do not receive it. Anyone who uses that browser can see it. You can clear it from the page, or by clearing your browser's data for our sites, and our pages stop using it 30 days after your last change. It is sent to us only once you have an account and your organization is set up, when you continue that return, and from then on it is return information.

Your choices. If your browser sends a Global Privacy Control signal, we treat it as an opt-out: advertising providers' cookies are not set on our sites and nothing is reported to them. You can also block or delete cookies in your browser, and use the ad settings each advertising provider offers. Blocking cookies may affect how the Services work. Cookie settings and email preferences are separate: unsubscribing from marketing email does not change your cookie settings, and cookie settings do not affect email.

An uploaded PDF that we read into a return is kept with that return, so we can check how it was read. Uploads not used within 24 hours, and uploads that fail verification, are deleted. In-progress drafts left untouched for 30 days are deleted. Records of upload activity are kept for 90 days. A reminder request that is not confirmed within 7 days is deleted.

Filed returns, prepared PDFs and IRS acknowledgements are kept while your account exists and for as long as IRS e-file provider rules require. We archive the emails we send, and keep confirmed reminder requests with the record of each confirmation and cancellation. Keep your own copies of the records you need.

You may ask support to delete your account. We then delete or de-identify your personal information, except what we must keep for tax, legal or security reasons. Deleting an account does not delete IRS records or withdraw a transmitted filing, and one member's request cannot remove records the organization is required to keep.

Text extraction services do not retain uploaded documents after reading them, subject to the exceptions described under WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

We use encryption in transit and at rest, access controls, logging, and an authentication provider that supports multi-factor authentication. We delete unused uploads and unfinished drafts on fixed schedules rather than keeping them indefinitely.

No system is perfectly secure. Protect your sign-in credentials and the devices you use, keep your organization's membership limited to people who are currently authorized, and contact support promptly if you suspect unauthorized access.

The Services are for business use by people 18 or older, and you may not create an account for a child. This age requirement applies to account holders. It does not limit the information about other people that an organization's filing may need, which this Policy covers like any other return information.

You may contact support to request access to, correction of or deletion of your personal information, or to close your account. Requests are subject to applicable law, identity verification and retention obligations. California rights are described under DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?

Marketing email. Marketing email, including filing reminders and service news, contains an unsubscribe link and supports one-click unsubscribe. Unsubscribing stops all of our marketing email. A reminder asked for without an account has its own cancel link, which also works as one-click unsubscribe.

Transactional email. Filing-status messages, IRS acknowledgements and account notices are transactional. They continue while your account is open, even if you unsubscribe from marketing email.

Financial companies must explain how they collect, share and protect personal information. The table below shows our practices and your choices. Everyday business purposes include processing transactions, maintaining accounts, filing with the IRS and responding to legal requirements.

How does Fast File Exempt protect my personal information? We use encryption, access controls, authentication and logging, described under HOW DO WE KEEP YOUR INFORMATION SAFE?

How does Fast File Exempt collect my personal information? We collect it when you open an account, upload or enter a return, pay, or contact support, and from your organization and your use of the Services.

Affiliates are companies related by common ownership or control; we have none. Nonaffiliates are companies not related by common ownership or control, including our service providers. Joint marketing is a formal agreement between nonaffiliated financial companies to market products or services together; we do not engage in joint marketing.

To limit our marketing email, use the unsubscribe link in any marketing message. Transactional notices continue while your account is open. Send questions about this notice to support@fast-file-exempt.com.

California residents. We collect these categories of personal information: identifiers, such as names, email addresses and EINs; customer records, such as contact and account details; commercial information, such as filing purchases and payment records; internet activity, such as page views, clicks, ad click identifiers and logs; professional information, such as officer and director roles; and financial information in returns, including compensation and contributions.

We collect these categories from you, your organization, any provider you sign in through, and use of the Services for the purposes described in this Policy, disclose them to the recipients described above, and keep them under the retention rules above. We do not sell personal information. Disclosing identifiers and internet activity, such as cookie identifiers, ad clicks and purchases, to advertising providers as described under DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES? may count as sharing for cross-context behavioral advertising under California law, and we honor the Global Privacy Control signal as an opt-out of it.

Subject to the law's exceptions, you may ask to know what personal information we hold about you, including its sources, the purposes for which we use it and the recipients to whom we disclose it; obtain a copy; have it deleted; or have inaccurate information corrected. We will not discriminate against you for exercising these rights.

California law also provides rights to opt out of the sale or sharing of personal information and to limit the use of sensitive personal information. We do not sell personal information. To opt out of the sharing described above, turn on Global Privacy Control in your browser; we honor it automatically, without an account. You may also contact us about any of your rights.

To exercise these rights, email support@fast-file-exempt.com yourself or through an authorized agent. We may need to verify your identity, and your agent's authority, before providing or changing records. We may keep information required for tax, legal or security reasons, and no request gives access to another person's confidential return.

We will post any change to this Privacy Policy here with a new effective date. The version with the latest effective date is the one in force.

For questions about this Privacy Policy, requests about your information, or the current list of service providers, email support@fast-file-exempt.com or write to Fast File Exempt LLC, 2108 N St. #15941, Sacramento, CA 95816.

Send requests to review, obtain a copy of, correct or delete your personal information, or to close your account, to support@fast-file-exempt.com. An authorized agent may send a request for you, subject to verification of your identity and the agent's authority.

We may keep information required for tax, legal or security reasons. One member's request cannot delete records an organization is required to keep, and no request gives access to another person's confidential return. Deleting an account does not delete IRS records. Text extraction services hold no copies of uploaded documents, subject to the exceptions described above.