Privacy Policy

Effective November 12, 2026

This policy explains what information Galvea LLC ("Galvea," "we," "us") collects when you use TaxMemo at taxmemo.ai (the "Service"), how we use it, and the choices you have. We collect as little as we need to run the Service.

1. Information we collect

• Your email address. It is how you sign in and how we contact you about your account. We do not ask for your name, company or any other profile information.
• Your questions and our answers. We store the questions you ask, the Chinese search query generated from each one, the answer and its list of sources, so that you can see your conversation history.
• Usage and account records. The number of questions you have asked, your plan, your team membership if you are on a team plan, and records of your orders.
• Payment information. Payments are handled by Stripe. We receive a customer reference, the status of your subscription and invoice records. We never receive or store your full card number.
• Technical information. When you use the Service, our servers and our network provider process your IP address and basic request information for security, abuse prevention and troubleshooting.

2. How we use information

• to provide the Service, including answering your questions and keeping your history;
• to send sign-in codes, receipts, subscription notices and messages about your account;
• to enforce usage limits, prevent abuse and keep the Service secure;
• to understand how the Service is used and to improve the quality of its answers;
• to meet legal, tax and accounting obligations.

We do not sell your personal information, and we do not use it for targeted advertising.

3. Service providers

We share information only with providers that help us run the Service, and only as needed for that purpose:

• Hosting and network: our cloud hosting provider and Cloudflare, which delivers and protects the website.
• Email: Resend, which sends our sign-in and account emails.
• Payments: Stripe.
• AI model providers: to translate questions, search the library and write answers, the text of your question and the retrieved source material are sent to third-party providers of language and search models. Some of these providers process data outside the United States.

Because questions are processed by third parties, do not include information that identifies your clients or other individuals, such as names, taxpayer identification numbers or account details.

We may also disclose information if the law requires it, to protect the rights and safety of Galvea or others, or as part of a merger, acquisition or sale of assets, in which case this policy will continue to apply.

4. Cookies and local storage

We do not use advertising or tracking cookies. When you sign in, your browser stores a session token so that you stay signed in. Fonts are loaded from Google Fonts, which receives your IP address when the page loads.

5. Retention

We keep your account information while your account is open. Conversation history is limited to your most recent 300 questions; older entries are deleted automatically, and you can delete any conversation at any time. Order and invoice records are kept as long as tax and accounting rules require. If you ask us to close your account, we delete your personal information except what we must keep for those purposes.

6. Security

Traffic to the Service is encrypted. Sign-in codes expire after ten minutes and are stored only in hashed form, and access to production systems is restricted. No system is completely secure, but we work to protect your information and will notify you if a breach affects it as required by law.

7. Your choices and rights

You can delete conversations in the Service and change your sign-in email in your account. You can ask us to access, correct, export or delete your personal information by writing to [email protected] from the email address on your account. Depending on where you live, you may have additional rights under applicable law; we will honor them, and we will not treat you differently for exercising them.

8. Where we process information

Galvea is based in the United States. Our providers may process information in the United States and other countries. Where we transfer information internationally, we rely on our providers' contractual and security commitments.

9. Children

The Service is intended for professionals and is not directed to anyone under 18. We do not knowingly collect information from children.

10. Changes

We may update this policy. If a change is material, we will notify you by email or in the Service before it takes effect.

11. Contact