Privacy Policy

Legacy Software Solution collects only the information necessary to deliver secure, IRS-compliant tax preparation services and operates under strict privacy standards, including IRS e-file requirements and the California Consumer Privacy Act (CCPA). Legacy Software Solution never sells personal data, and clients have robust rights to access, correct, or delete information. This policy describes the categories of data collected, how data is used and shared, the security measures employed, and user privacy rights, all in clear, user-friendly language aligned with Google’s privacy policy guidance.

Scope & Applicability

This policy applies to all personal information collected when a user interacts with the website or mobile applications, accesses the cloud-based software platforms (TaxSlayer Pro, OLT Pro, CrossLink), or communicates by email, phone, or in person.

Information Collected

Legacy Software Solution collects personal data such as full names, mailing addresses, Social Security numbers, and financial account details strictly to prepare and file tax returns (Federal Trade Commission). Technical and usage data—including IP addresses, browser type, device identifiers, and pages visited—is also collected to monitor performance, troubleshoot issues, and enhance security (Michel & Associates). Cookies and similar technologies record browsing preferences; non-essential cookies can be managed or disabled via browser settings.

Use of Information

Data is processed to deliver tax preparation and e-filing services, communicate account updates and support, process client payments, and comply with IRS reporting requirements (IRS). Aggregated, non-identifiable data is used for trend analysis and product improvement (DataGuard). Legacy Software Solution does not sell personal information to third parties under any circumstances.

Legal Bases for Processing

Processing is based on contractual necessity to fulfill service agreements (e.g., tax return preparation), legal compliance with IRS e-file security and privacy mandates, and legitimate interests in fraud prevention, system security, and service optimization.

Cookies & Tracking Technologies

Cookies are categorized as strictly necessary (to enable core site functionality), performance (to measure usage and optimize responsiveness), and functional (to remember preferences). Users may opt out of non-essential cookies via browser settings. Consent and retention practices follow industry best practices.

Information Sharing & Disclosure

Data is shared only with trusted service providers—such as payment processors, hosting partners, and IRS e-file transmitters—under strict confidentiality and security agreements. Disclosure to legal authorities occurs only when required by law enforcement or to prevent fraud. All third parties are contractually obligated to meet IRS and industry security standards.

Data Security Measures

Industry-standard safeguards include Extended Validation SSL encryption (minimum 128-bit AES), multi-factor authentication, regular external vulnerability scans by certified vendors, and role-based access controls. Only authorized personnel trained in IRS security standards may access sensitive data.

Data Retention & Deletion

Personal data is retained only as long as necessary for service delivery and legal recordkeeping requirements—typically between 30 days and three years under IRS guidelines. After retention periods lapse, data is securely deleted or anonymized.

User Privacy Rights

California residents may request disclosure of the categories and specific pieces of personal data collected, access or correct personal information, request deletion (subject to legal exceptions), and opt out of any data sales or sharing (though no data is sold). Requests can be submitted via email or online form, with responses provided within CCPA-mandated timeframes.

Data Breach Notification

In the unlikely event of a data breach, Legacy Software Solution will promptly investigate, contain the incident, notify affected individuals, and report to relevant authorities as required by federal and state laws, including breach notification statutes.

Children’s Privacy

Services are intended for adult tax professionals. Legacy Software Solution does not knowingly collect information from individuals under age 13; any such data discovered will be promptly deleted.

International Data Transfers

As a U.S.-based provider, Legacy Software Solution does not routinely transfer personal data outside the United States. If international transfers become necessary, appropriate safeguards will be implemented to comply with applicable data protection laws.

Policy Updates

This Privacy Policy is reviewed at least annually or whenever legal or operational changes occur. The “Effective Date” at the top reflects the most recent revision. Continued use of services indicates acceptance of updates.

User privacy is paramount. Clear data practices and transparency enable clients to focus on serving their customers with confidence.