Draft pending legal review. This policy describes how the service is built to handle your information today. It is a working draft and will be reviewed by counsel and finalized before the service is offered to paying clients. Items shown as [in brackets] are firm details being finalized.

PelPush keeps the books, prepares the returns, and reads the business for small business owners. To do that, you trust us with some of the most sensitive information there is — tax identifiers, bank activity, and full income detail. This policy explains what we collect, why, how we guard it, and the few outside services that ever touch it.

1Who we are

PelPush is operated by [legal entity name pending formation] (“PelPush,” “we,” “us”), a tax-preparation and bookkeeping firm operating from [city, state pending], United States. We are the data controller for the information described here. Questions go to privacy@pelpush.com.

2Information we collect

We collect only what we need to keep your books, prepare your returns, and produce your insights:

Account & identity

• Your email address and the sign-in factors you choose (a one-time email code, and a passkey or authenticator app). We do not use or store account passwords.
• Questionnaire answers that classify your tax situation — filing status, household, and the business entities you own and their types.

Documents & the facts in them

• Files you upload — bank and card statements, W-2s, 1099s, 1098s, prior returns, and similar records — and the typed facts we extract from them.
• These records contain direct identifiers such as Social Security numbers, Employer Identification Numbers, legal names, dates of birth, addresses, and bank or account numbers. We treat these as the most sensitive category we hold (see “How we protect it”).

Financial & accounting data

• Transactions, balances, and categories — either derived from the statements you upload or read from your QuickBooks Online company if you connect one (see section 6).

Support & usage

• Messages you send our support team.
• Basic technical and security logs (for example, sign-in events and the source of every value on a finished form) needed to operate the service securely and keep an audit trail.

3How we use your information

We use your information only to deliver the service you asked for and to keep it secure:

• Keep your books and build your financial statements.
• Prepare your business and personal tax returns and the supporting schedules.
• Produce the plain-language weekly read and insights about your business.
• Respond to your support requests through a person.
• Secure the service, prevent abuse, keep the line-level audit trail, and meet our legal and professional obligations as a paid tax preparer.

We do not sell your personal information, and we do not use it for third-party advertising.

4How we protect your information

Protecting this data is the center of how the product is built, not an afterthought:

• Tokenization of direct identifiers. The moment a document is processed, raw direct identifiers (Social Security numbers, account numbers, legal names, and the like) are replaced with opaque tokens. The real values are stored only in a separate, encrypted identifier vault inside our own infrastructure.
• Encryption. Your data is encrypted in transit (TLS everywhere) and at rest, with additional application-level encryption for the identifier vault.
• Minimized exposure. Routine processing works on de-identified, tokenized data. Real identifiers are re-inserted only at the moment a finished PDF is produced, on our servers.
• Access controls. Staff access is role-based and protected by multi-factor authentication. The database and document storage are reachable only over private networking, never the public internet.
• Audit trail. Every value on every output form is linked to its source document or questionnaire answer, so any figure can be traced.

5When we share your information

We share your information only in these limited cases, and only as needed:

Service providers (sub-processors)

A small set of vetted providers helps us run the service. Each is bound by a contract that limits use of your data to providing their service to us:

Provider	What it does	What it may receive
Anthropic	Document reading and de-identified reasoning, through a controlled, audited gateway	The contents of an uploaded document during processing; otherwise only tokenized, de-identified data — under a contract that bars training on your data
Amazon Web Services	Transactional email and off-site encrypted backup storage	Email addresses and notification text; encrypted backup files we cannot read off-site
OVHcloud	Hosting and infrastructure (United States)	Encrypted application data at rest
Intuit / QuickBooks	The accounting data source you choose to connect	Read access you authorize to your QuickBooks company (see section 6)

A current list of sub-processors is available on request at privacy@pelpush.com.

Tax authorities, with your consent

To prepare and file your returns we transmit return information to the relevant tax authorities (for example, the IRS and your state) through approved filing channels. For US returns this happens under the consent you provide as described in section 7.

Legal & safety

We may disclose information if required by law, to comply with legal process, or to protect the rights, safety, and security of our clients, the public, or PelPush.

Business transfers

If the business is involved in a merger, acquisition, or sale of assets, information may transfer as part of that transaction, subject to this policy.

6QuickBooks & Intuit data

If you connect a QuickBooks Online company, you authorize PelPush — through Intuit’s official, consent-based connection — to access it. Specifically:

• Access is read-only. We read your chart of accounts and general ledger for the period being worked; we never write to, or change, your QuickBooks company.
• We use that data only to build your financial statements, derive net income, and prepare the related parts of your return.
• The connection tokens are stored encrypted in our identifier vault, and free-text memos are tokenized like any other identifier.
• You can disconnect at any time from your QuickBooks “Apps” settings or by asking us; disconnecting stops further access.
• Our use of information received through the Intuit Developer connection adheres to Intuit’s requirements, and your QuickBooks data is never used for advertising and is never sold.

7Tax information & your consent (IRC §7216)

As a paid tax-return preparer, our use and disclosure of your tax-return information is governed by US law, including Internal Revenue Code §7216. We will obtain your specific, informed consent before using or disclosing your tax-return information for any purpose beyond preparing your return, and before any disclosure that would send your tax-return information outside the United States. You can decline or withdraw that consent; some features may then be unavailable.

8How long we keep your information

We keep your information for as long as your account is active and as long as we are required to as a tax preparer — tax records are generally retained for the periods required by the IRS and applicable state rules [final retention schedule pending]. When data is no longer needed for those purposes, we delete it or render it permanently de-identified.

9Your choices & rights

You can:

• Access, correct, or request a copy of your personal information.
• Request deletion of your information, subject to records we must retain by law.
• Withdraw a consent you previously gave (including the §7216 consent above).
• Disconnect a connected QuickBooks company at any time.

Depending on where you live, you may have additional rights under laws such as state privacy laws. To exercise any right, contact privacy@pelpush.com; we will verify your identity before acting and will not discriminate against you for exercising a right.

10Children

The service is for business owners and is not directed to children under 13, and we do not knowingly collect their information. (Dependent information you provide for a return is treated as your tax information, handled as described above.)

11Where we process data

We process and store data in the United States. As noted in section 7, we will not send your tax-return information outside the United States without your specific consent.

12Changes to this policy

We may update this policy as the service evolves or the law changes. We will post the updated policy here with a new effective date and, for material changes, notify you through the service or by email.

13How to reach us

Privacy questions or requests: privacy@pelpush.com.
General: hello@pelpush.com.
Mailing address: [firm mailing address pending].

↑ Back to top · Terms of Service