Privacy Policy
Your privacy and data security are our top priorities
Table of Contents
Introduction
TheITINapp.com ("we," "our," or "us") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Individual Taxpayer Identification Number (ITIN) application assistance services.
As a service handling sensitive tax-related information for individuals from over 50 countries, we understand the critical importance of data protection. We comply with applicable data protection laws including GDPR (General Data Protection Regulation) for European users and CCPA (California Consumer Privacy Act) for California residents.
By using our services, you consent to the data practices described in this policy. If you do not agree with any part of this privacy policy, please do not use our services.
Information We Collect
Personal Information
When you use our ITIN application service, we collect:
- Full legal name (as it appears on your passport)
- Date of birth
- Country of citizenship and tax residency
- Passport number and expiration date
- Foreign address (street, city, country, postal code)
- Contact information (email address, phone number)
- US mailing address (if applicable)
- Parents' names (if required for your application)
Tax-Related Information
For ITIN processing, we collect:
- Reason for ITIN application (treaty benefits, US income, etc.)
- Tax treaty country (if applicable)
- Type of US income or business activity
- Previous ITIN applications or rejections
- Supporting tax documents (W-7, 1040NR, etc.)
Identity Documents
We collect copies of:
- Passport (all pages with stamps and visas)
- National identification cards
- Birth certificates (when required)
- Proof of foreign address (utility bills, bank statements)
- Any additional documents required by the IRS
Technical Information
We automatically collect:
- IP address and approximate location
- Browser type and version
- Device information (type, operating system)
- Pages visited and time spent on our site
- Referral source (how you found our website)
- Cookie data (see our Cookie Policy section)
How We Use Your Information
We use your information for the following purposes:
ITIN Application Processing
- Prepare and submit your Form W-7 to the IRS
- Verify your identity and eligibility
- Communicate with the IRS on your behalf
- Track your application status
Service Delivery
- Provide customer support and respond to inquiries
- Send application updates and notifications
- Process payments for our services
- Maintain records of your application
Legal Compliance
- Comply with IRS regulations and requirements
- Respond to legal requests and court orders
- Prevent fraud and illegal activities
- Maintain required tax records
Service Improvement
- Analyze usage patterns to improve our services
- Develop new features and offerings
- Conduct internal audits and quality assurance
- Generate anonymized statistics and reports
Data Protection & Security
We implement industry-standard security measures to protect your personal information:
Technical Safeguards
- 256-bit SSL encryption for data transmission
- Encrypted storage of sensitive documents
- Regular security audits and updates
- Firewall protection and intrusion detection
Administrative Safeguards
- Limited access on need-to-know basis
- Employee confidentiality agreements
- Regular security training for staff
- Background checks for employees
While we implement robust security measures, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security of your information.
Third-Party Services
We work with trusted third-party services to provide our services:
Payment Processors
We use Stripe and PayPal to process payments. Your payment information is handled directly by these processors and is not stored on our servers.
Cloud Infrastructure
We use Cloudflare for hosting and database services. Data is stored in secure, encrypted databases with regular backups.
Cloudflare Privacy PolicyAnalytics
We use Datafast for privacy-focused analytics to understand how users interact with our website. This data is anonymized and does not include personal information.
Customer Support
We use Chatwoot for customer support chat. Conversations may be recorded for quality assurance and training purposes.
We do not sell, trade, or rent your personal information to third parties. We only share information as necessary to provide our services or as required by law.
International Data Transfer
As we serve clients from over 50 countries, your information may be transferred to and processed in the United States:
For Users in the European Union (EU/EEA)
We transfer data from the EU to the US under appropriate safeguards:
- Standard Contractual Clauses approved by the European Commission
- Your explicit consent for ITIN application processing
- Necessity for the performance of our services contract with you
Data Localization
While your data may be processed in the US for ITIN application purposes, we maintain copies in secure cloud servers with geographic redundancy. We comply with local data protection laws in your country of residence where applicable.
By using our services, you acknowledge and consent to the transfer of your information to the United States for processing your ITIN application.
Your Rights
Depending on your location, you may have the following rights regarding your personal information:
GDPR Rights (European Union)
- Access: Request a copy of your personal data
- Rectification: Request correction of inaccurate data
- Erasure: Request deletion of your data (subject to legal requirements)
- Portability: Receive your data in a portable format
- Restriction: Request limited processing of your data
- Objection: Object to certain processing activities
- Automated Decision-Making: Right not to be subject to automated decisions
CCPA Rights (California)
- Know: Right to know what personal information we collect
- Delete: Request deletion of your personal information
- Opt-Out: Opt-out of sale of personal information (we do not sell data)
- Non-Discrimination: Equal service regardless of privacy choices
How to Exercise Your Rights
To exercise any of these rights, please contact us at:
- 📧 Email: [email protected]
- 📝 Subject Line: "Privacy Rights Request"
- ⏱️ Response Time: Within 30 days
Important: Due to IRS regulations, we must retain certain tax-related information for 7 years. We cannot delete this information even upon request.
Data Retention
We retain your information for different periods based on the type of data and legal requirements:
| Data Type | Retention Period | Reason |
|---|---|---|
| ITIN Application Records | 7 years | IRS requirement |
| Tax Documents | 7 years | Tax compliance |
| Payment Records | 7 years | Accounting requirements |
| Customer Support | 3 years | Service improvement |
| Marketing Communications | Until opt-out | User preference |
| Website Analytics | 26 months | Statistical analysis |
After the retention period, we securely delete or anonymize your data using industry-standard methods.
Children's Privacy
Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at [email protected].
If we discover that we have collected personal information from a child under 18, we will promptly delete such information from our systems.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:
- Updating the "Last Updated" date at the top of this policy
- Sending an email notification to registered users
- Displaying a prominent notice on our website
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.
Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
EU Representative: For GDPR matters, EU residents may also contact our EU representative at [email protected]