1. Purpose

Millionaires Tax Consultants (“MTC,” “we,” “us,” or “our”) respects the privacy and confidentiality of individuals, taxpayers, business owners, tax professionals, employees, contractors, applicants, partners, and other persons who interact with MTC.

This Privacy Policy explains how MTC may collect, use, disclose, retain, protect, and otherwise process information through its websites, forms, portals, applications, communications, professional services, digital products, educational programs, customer-support systems, and related business operations.

This Policy is intended to operate together with any separate privacy notices, engagement agreements, tax-consent forms, §7216 consents, GLBA notices, e-sign disclosures, SMS consents, and contractual data-processing terms applicable to a particular relationship.

2. Important Taxpayer-Information Notice

Tax-return information receives special protection under federal law.

MTC does not treat tax-return information as ordinary marketing data.

Internal MTC procedures must distinguish between:

• General website/contact information
• Customer information
• Nonpublic personal financial information
• Tax-return information
• Sensitive personal information
• Authentication credentials
• Identity documents
• Banking information
• Protected professional information

IRC §7216 generally restricts tax return preparers from knowingly or recklessly using or disclosing tax-return information for unauthorized purposes. Certain uses and disclosures may require a taxpayer's consent.

Accordingly, a general website privacy-policy acceptance does not replace a separate tax-return-information consent when a separate consent is legally required.

3. Information We May Collect

Depending on how you interact with MTC, we may collect:

A. Identity Information

• Name
• Date of birth
• Mailing address
• Email address
• Telephone number
• Government identification information where required
• Taxpayer identification information where required
• Business identification information

B. Tax Information

When you engage MTC for tax services, we may collect information necessary to perform the engagement, including:

• Social Security number
• Employer Identification Number
• Filing status
• Dependents
• Income information
• W-2 information
• 1099 information
• Business income
• Business expenses
• Investment information
• Retirement information
• Education information
• Health-related tax information where relevant
• Tax forms
• Prior-year returns
• IRS correspondence
• State tax correspondence
• Tax account information
• Other information necessary to prepare or resolve tax matters

C. Financial Information

Depending on the service:

• Bank account information
• Routing numbers
• Payment-card information
• Transaction history
• Financial statements
• Payroll information
• Bookkeeping records
• Credit-related information
• Payment history
• Information required to process authorized financial products

D. Business Information

For business clients and partners:

• Entity information
• Ownership information
• EIN
• Business addresses
• Revenue information
• Expense information
• Payroll information
• Accounting records
• Vendor information
• Business documents
• Professional credentials
• PTIN and EFIN information where relevant
• Office and ERO information

E. Communications

We may collect:

• Email communications
• Chat communications
• SMS communications
• Telephone communications
• Appointment information
• Customer-support communications
• Contact-form submissions
• Preferences
• Consent records
• Opt-out records

Where calls are recorded, MTC will provide any notice and obtain any consent required by applicable law.

F. Technical Information

We may collect:

• IP address
• Browser type
• Device type
• Operating system
• Website pages viewed
• Referring website
• Approximate geographic information
• Date/time of website access
• Cookie identifiers
• Analytics identifiers
• Security logs
• Device and session information

4. How We Collect Information

Information may be collected through:

• MTC websites
• Contact forms
• Secure intake forms
• Scheduling forms
• Secure client portals
• Tax-preparation systems
• E-signature systems
• Payment systems
• CRM systems
• Email
• Telephone
• SMS
• Chat
• Social-media interactions
• In-person meetings
• Referrals
• Applications
• Digital-product purchases
• Educational registrations
• Service agreements
• Government or third-party sources where legally permitted

MTC's current automation architecture contemplates a separation between CRM/communications systems, secure TaxDome document and e-sign functions, TaxSlayer tax-preparation functions, intake forms, payment systems, and other integrations.

5. Purposes for Processing Information

MTC may use information to:

• Provide requested services
• Prepare tax returns
• Review tax documents
• Perform bookkeeping
• Perform accounting-related services
• Provide tax planning
• Respond to IRS/state matters
• Schedule appointments
• Process payments
• Maintain client accounts
• Provide secure portal access
• Authenticate identity
• Prevent fraud
• Detect security incidents
• Comply with law
• Maintain business records
• Communicate with clients
• Provide requested educational resources
• Administer digital products
• Send transactional communications
• Send marketing communications where permitted
• Improve website functionality
• Analyze website performance
• Maintain system security
• Manage vendors
• Manage employees and contractors
• Conduct quality assurance
• Resolve complaints
• Protect MTC's rights

6. Tax Return Information

MTC may use tax-return information only as permitted by applicable federal law, including applicable exceptions and taxpayer consents.

MTC will not use a taxpayer's return information for unrelated marketing, recruiting, cross-selling, or other purposes merely because the taxpayer submitted that information to MTC.

Where a proposed use or disclosure requires consent, MTC will seek a legally sufficient consent through the appropriate process.

7. GLBA / Regulation P

MTC provides tax-preparation and related financial services that may cause certain activities to fall within the federal privacy framework applicable to financial institutions.

Regulation P expressly identifies tax-preparation services within the customer relationship provisions.

Where GLBA/Regulation P applies, MTC will provide required privacy notices and comply with applicable restrictions concerning nonpublic personal information.

The required privacy notice will describe applicable information-sharing practices, security practices, and consumer rights.

Where applicable, a separate GLBA privacy notice may be provided through an engagement packet, electronic delivery, account portal, or website.

8. Information Sharing

MTC may disclose information when permitted or required by law or when necessary to perform an authorized service.

Potential recipients may include:

• Employees
• Tax preparers
• Credentialed professionals
• Contractors
• Secure technology providers
• Tax software providers
• E-signature providers
• Payment processors
• Banking-product providers
• Payroll providers
• Cloud-storage providers
• CRM providers
• Scheduling providers
• Communication providers
• Professional advisers
• Insurers
• Auditors
• Government authorities
• Courts or law-enforcement agencies
• Other service providers necessary to perform an authorized engagement

MTC will use contractual and operational controls appropriate to the relationship and applicable law.

MTC's contract library specifically contemplates vendor data-protection agreements, data-processing addenda, security acknowledgments, confidentiality obligations, and vendor safeguards.

9. Service Providers

MTC may use service providers that process information on MTC's behalf.

MTC's internal compliance inventory calls for vendor diligence addressing security, MFA, encryption, access, breach notification, data ownership, deletion, subcontractors, support, and exit procedures.

MTC will seek to require appropriate contractual protections from vendors handling sensitive information.

10. Data Minimization

MTC's systems should collect only information reasonably necessary for the applicable purpose.

MTC's internal architecture specifically prohibits placing full SSNs, tax returns, banking details, and other high-risk data into broad CRM fields or general folders.

11. Marketing Communications

MTC may send marketing communications through email, SMS, telephone, direct mail, social media, or other lawful channels.

Where consent is required, MTC will obtain and maintain the applicable consent.

Marketing consent is separate from transactional consent.

You may unsubscribe from marketing email through the unsubscribe mechanism provided.

You may opt out of marketing SMS by replying STOP where applicable.

Opting out of marketing does not necessarily stop communications required to perform an active service, protect an account, provide security notices, deliver legal notices, or respond to a customer request.

12. SMS Consent Records

For SMS programs, MTC may maintain:

• Telephone number
• Exact consent language
• Date/time of consent
• Consent source
• Website/form where consent occurred
• IP address or other available evidence
• Campaign/program associated with consent
• Opt-out history
• Suppression status

MTC's internal marketing materials specifically call for retention of the exact opt-in language, timestamp, source, and phone number.

13. Cookies and Tracking

MTC may use cookies and similar technologies for:

• Security
• Authentication
• Website functionality
• Preferences
• Analytics
• Performance measurement
• Marketing attribution
• Advertising
• Chat
• Session management

See the separate Cookie Policy for additional information.

14. Artificial Intelligence

MTC may use AI systems to assist with administrative and business processes.

MTC will establish approved-use rules for AI involving protected information.

MTC does not authorize personnel to place full taxpayer returns, Social Security numbers, bank credentials, passwords, authentication codes, or other restricted information into general-purpose AI tools unless the specific system and workflow have been approved for that data.

MTC's internal compliance materials require approved knowledge sources, logging, human review, disclosure where appropriate, refusal rules, and emergency shutdown controls for AI systems.

15. Security

MTC maintains administrative, technical, and physical safeguards appropriate to the nature and sensitivity of information handled.

Potential safeguards include:

• Access controls
• Role-based permissions
• MFA
• Encryption
• Secure portals
• Password controls
• Device security
• Malware protection
• Secure disposal
• Audit logging
• Employee training
• Vendor controls
• Incident response
• Backups
• Business continuity procedures

The IRS identifies security planning as a legal obligation for tax professionals and recommends safeguards appropriate to taxpayer information.

16. Data Breaches

If MTC experiences a security incident involving personal information, MTC will investigate and follow its incident-response procedures.

MTC will provide legally required notifications within applicable deadlines.

Texas law requires notification to affected individuals and requires certain breaches affecting 250 or more Texans to be reported to the Texas Attorney General within the statutory period.

Nothing in this Privacy Policy limits MTC's legal obligations.

17. Data Retention

MTC retains information for as long as reasonably necessary to:

• Provide services
• Complete transactions
• Meet professional obligations
• Meet tax-record requirements
• Meet legal requirements
• Resolve disputes
• Prevent fraud
• Maintain accounting records
• Maintain security
• Protect legal rights
• Satisfy contractual requirements

Retention periods may vary by information type.

Tax records, engagement records, consent records, security records, accounting records, and employment records may have different retention requirements.

MTC's internal compliance inventory specifically calls for a record-retention policy addressing data types, legal holds, deletion, former clients, backups, exports, and vendor termination.

18. Deletion

Where legally permitted, individuals may request deletion of certain information.

Deletion may be denied or limited where information must be retained for:

• Tax law
• Professional obligations
• Legal claims
• Fraud prevention
• Security
• Accounting
• Regulatory requirements
• Contract administration
• Legal holds
• Government requests

19. Your Privacy Rights

Depending on applicable law and your relationship with MTC, you may have rights concerning:

• Access
• Correction
• Deletion
• Data portability
• Opting out of certain processing
• Marketing preferences
• Withdrawal of certain consents
• Information concerning categories of information collected or disclosed

Rights may vary by state and by whether you are a customer, website visitor, employee, applicant, or business contact.

Nothing in this Policy creates rights that do not otherwise exist under applicable law.

20. Texas Privacy Rights

Where applicable, MTC will evaluate requests under the Texas Data Privacy and Security Act and other applicable privacy laws.

Texas law contains specific provisions applicable to covered businesses and special requirements concerning sensitive-data sales by qualifying small businesses.

MTC does not intend this Policy to imply that every statutory right applies to every individual.

21. Children

MTC's websites and professional tax services are generally directed to adults.

MTC does not knowingly request unnecessary personal information from children.

If a parent or guardian believes a child has submitted personal information improperly, contact MTC so the matter can be evaluated.

22. International Visitors

MTC primarily operates in the United States.

If you access MTC websites from outside the United States, your information may be processed in the United States or other jurisdictions where MTC or its service providers operate.

23. Do Not Send Sensitive Information Through Social Media

Social-media messages are not intended to function as secure tax-document portals.

Do not send:

• SSNs
• Tax returns
• Driver's-license images
• Bank credentials
• Passwords
• Authentication codes
• Full financial statements

through ordinary social-media messaging unless MTC specifically provides an approved secure process.

24. Third-Party Websites

MTC may link to external websites.

MTC is not responsible for third-party privacy practices.

Review the privacy policy of the third party before submitting personal information.

25. Privacy Requests

To protect clients, MTC may need to verify identity before fulfilling certain requests.

26. Fraud and Identity-Theft Reporting

If you believe someone has improperly accessed your tax information or MTC account, notify MTC immediately.

Do not wait until the next tax season.

MTC will evaluate the matter under its security incident and identity-theft procedures.

27. Changes to This Policy

MTC may update this Policy periodically.

The revised version will include a new “Last Updated” date.

Material changes will be implemented in accordance with applicable law and contractual obligations.

28. Contact Information

29. Important Separate Notices

Depending on the service you receive, MTC may provide additional documents including:

• GLBA Privacy Notice
• IRC §7216 consent
• Tax engagement letter
• Form 2848
• Form 8821
• Form 8879
• E-sign disclosure
• SMS consent
• Cookie preferences
• Data-processing agreement
• Vendor privacy terms
• Refund/bank-product disclosures
• Referral terms
• Digital-product terms

This Privacy Policy does not replace any legally required separate disclosure or consent.