Privacy Policy

Rivet – Privacy Policy

Last Updated: September 30, 2026

Rivet Tax Inc. (“Rivet,” “we,” “us,” or “our”) is committed to simplifying your tax experience while maintaining the highest standards of confidentiality, accuracy, and professionalism. This Privacy Policy explains what information we collect, how we use and share it, how we protect it, and the choices you have.

This Privacy Policy describes our data practices. It does not govern the services we provide to you. The services, fees, deadlines, scope, and the rights and obligations of each party are governed by your signed Engagement Terms and applicable statement of work or order form (together, your “Engagement Agreement”). If anything in this Privacy Policy conflicts with your Engagement Agreement, the Engagement Agreement governs.

1. Information We Collect

Information you provide to us

• Name, contact details, and other identifiers
• Tax identification numbers, including Social Security numbers and EINs
• Payment and billing details, including bank account and card information you provide for ACH or card payments
• Tax documentation, financial records, and supporting materials you submit to us
• Emails, messages, and other communications you send to us, including anything you say to us on a recorded line

Information we collect automatically

• IP address, browser and device type, page views, and related technical metrics
• Interaction logs from desktop and mobile access to our website and client portal

Information we receive from others

• Information from your other advisors, bookkeepers, or service providers where you have authorized them to share it with us
• Information from taxing authorities in connection with services we perform for you

Tracking technologies. We use cookies, beacons, and similar tools to monitor website performance and improve user experience. You may adjust cookie preferences in your browser settings.

2. How We Use Your Information

We use your information to:

• Deliver tax preparation, advisory, bookkeeping, and related services
• Manage your account and provide support
• Process payments and manage invoicing
• Meet our legal, regulatory, and professional obligations
• Improve our website, communications, service offerings, and internal processes
• Develop, train, maintain, and improve the artificial intelligence and machine learning models we use to deliver our services, as described in Section 3

3. Artificial Intelligence

Rivet is an AI-enabled tax firm. We use artificial intelligence models, including large language models, to collect, analyze, store, and process client information in the course of preparing returns and delivering our services.

Subject to the terms of your Engagement Agreement and any consent you have provided, we may use client information and tax documents to train, fine-tune, and maintain Rivet’s artificial intelligence models. Where we use third-party providers of artificial intelligence models, we do so under enterprise agreements intended to prevent your information from being used to train those third parties’ models.

Artificial intelligence does not replace professional review. Returns and deliverables are reviewed by our tax professionals before they are identified as final.

4. How We Share Your Information

Service providers. We share information with vendors who support our operations, including hosting, infrastructure, analytics, communications, and payment processing. Payments are processed through Stripe and are governed by the Stripe Services Agreement.

Our tax preparation teams outside the United States. We use tax preparation teams located outside the United States, currently including in India, Canada, the Philippines, and Bolivia. Your information, including your Social Security number, may be transmitted, stored, processed, and accessed by those teams in connection with preparing your returns. Internal Revenue Code section 7216 requires your consent before we disclose your tax return information to a preparer located outside the United States, and we obtain that consent separately. Privacy protections in other countries may differ from those in the United States.

Affiliates. We may share information with our affiliates, including any parent, subsidiary, sister organization, joint venture, or other entity under common control, including Rivet Tax India Private Limited.

Other advisors. Where appropriate to deliver the services, and subject to your Engagement Agreement, we may share information with domestic or international third-party tax professionals. We limit disclosures to the minimum necessary.

Legal and regulatory. We may be required to disclose information under judicial or governmental authority, or in connection with professional obligations such as peer review. Where we are permitted to do so, we will notify you and consider protective measures.

Business transfers. If another organization acquires, or plans to acquire, our company, operations, or assets, we may share information with that organization, including during negotiations.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

5. Confidentiality and Security

We treat the information you share with us as confidential, consistent with our professional duties and obligations under Treasury Department Circular 230 and applicable law.

We implement reasonable technical and organizational safeguards to protect your information. No method of transmission or storage is entirely secure, and communications such as email and mobile messaging may not be fully encrypted. You authorize us to use standard communication methods unless you direct otherwise in writing.

You are responsible for controlling who has access to your Rivet account and data. If you suspect unauthorized access, notify us immediately at team@rivet.tax and revoke access where appropriate.

6. Retention

We return original client records on completion of the services. You should store those records securely for future use, including in the event of an audit or financial transaction.

We retain copies of workpapers and related documentation for seven (7) years, or longer where required for legal, regulatory, or professional compliance, or where retention benefits you. We retain other personal information for as long as needed to provide the services, meet our legal obligations, resolve disputes, and enforce our agreements.

7. Your Choices and Rights

Depending on where you live, you may have the right to request access to the personal information we hold about you, to request correction or deletion, and to receive a copy in a portable format. To make a request, email team@rivet.tax. We will verify your identity before responding.

Some of the information we hold is subject to federal tax and financial privacy laws that govern how it may be used, disclosed, and retained. Those laws may limit our ability to delete or restrict information that we are required to keep. Where that is the case, we will tell you.

You may withdraw a consent you have given us under Internal Revenue Code section 7216 at any time by written notice. Withdrawal applies going forward and does not affect disclosures already made.

8. Children’s Privacy

Our services are not directed to children, and we do not knowingly collect personal information from individuals under 13 years of age. If we learn that we have collected such information, we will delete it promptly. This does not apply to information about a client’s dependents that the client provides to us for tax preparation purposes.

9. Links to Third-Party Sites

Our website may link to external sites. We are not responsible for the privacy practices or content of those sites.

10. Anti-Spam Policy

Rivet does not tolerate spam. That covers unsolicited commercial email and any other unsolicited electronic message promoting rivet.tax or our services.

• No spam. Neither we nor anyone acting for us sends unsolicited bulk or commercial messages on any channel. We never buy, rent, or harvest contact lists.
• Consent and transparency. Our commercial email goes only to people who have a business relationship with us or have asked to hear from us. Each message clearly identifies Rivet, has an accurate subject line, and includes our mailing address and a working unsubscribe link. We honor opt-outs promptly, as CAN-SPAM and other applicable laws require.
• Report abuse. If you receive spam that promotes us or pretends to come from us, forward it with full headers to abuse@rivet.tax. We investigate every report.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will revise the date at the top of this page and, where the change is material, provide additional notice. Your continued use of our services after an update constitutes acceptance of the revised policy.

12. Disputes

Disputes relating to this Privacy Policy are resolved as provided in your Engagement Agreement. If you are not a client, any dispute relating to this Privacy Policy will be resolved through binding arbitration in Delaware under the rules of the American Arbitration Association.

13. Contact Us

Email: team@rivet.tax
Mailing address: Rivet Tax Inc., 11 Cat Swamp Road, Woodbury, CT 06798