Privacy Policy & Data Protection Agreement

1. Comprehensive Introduction & Preamble

At Pick My CPA ("hereinafter referred to as 'we,' 'us,' 'our,' 'the Company,' or 'the Organization'"), we are fundamentally and irrevocably committed to the protection, preservation, and safeguarding of your personal privacy and confidential information in accordance with all applicable federal, state, and international data protection regulations, statutes, directives, and legal frameworks. This comprehensive and detailed Privacy Policy and Data Protection Agreement ("hereinafter referred to as 'this Policy' or 'this Agreement'") constitutes a binding legal document that explicitly and comprehensively elucidates, delineates, and articulates the manner in which we systematically and methodically collect, process, utilize, analyze, disseminate, disclose, and otherwise handle your personally identifiable information, sensitive data, and non-public information when you visit, access, browse, navigate, or otherwise interact with our website, web applications, mobile applications, and digital services. This Policy applies to all individuals, entities, and third parties who access our services, whether directly or indirectly, and establishes the legal framework governing our data management practices.

Your privacy is not merely a secondary consideration in our operations; rather, it constitutes a fundamental and paramount principle that permeates every aspect of our business operations, technological infrastructure, customer service protocols, and organizational policies. We acknowledge and recognize the inherent value, sensitivity, and significance of the personal information you entrust us with, and we undertake comprehensive and systematic measures to ensure its protection, confidentiality, and appropriate use.

2. Extensive Information Collection Protocols & Methodologies

2.1 Voluntarily Provided Information & User-Initiated Data Submission

Information that you consciously, deliberately, and voluntarily provide to us through various channels, mechanisms, and interactive platforms, including but not limited to: direct contact information encompassing your full legal name, electronic mail address, telephone number(s), residential address, and other identifying information; search queries, preferences, and behavioral patterns within our system; account registration details and authentication credentials; feedback, comments, testimonials, and communications; inquiries and requests for information; and any other data you choose to provide through forms, surveys, questionnaires, or communication channels.

2.2 Automatically Collected Information & Technical Data

Information automatically collected and transmitted to our servers through technological means, tracking mechanisms, and system processes, including but not limited to: Internet Protocol (IP) addresses and device identification numbers; browser type, version, and configuration; operating system information; pages visited, content accessed, and navigation patterns; duration and frequency of visits; click patterns, mouse movements, and interaction data; search history and query information; cookies and similar persistent tracking technologies; web beacons and pixel tags; session information; referring source and traffic source identification; and other technical metadata and analytical information derived from your interactions with our digital properties.

2.3 Third-Party Data & Aggregated Information Sources

Information obtained from third-party sources, data aggregators, business partners, and external entities, including but not limited to: publicly available information; information from social media platforms and networks; information from service providers and vendors; information from business partners and affiliated entities; and aggregated and de-identified information compiled from multiple sources for analytical and statistical purposes.

3. Comprehensive Utilization & Application of Collected Information

We utilize, process, and apply the information we collect for a comprehensive array of purposes, including but not limited to:

• Providing, delivering, maintaining, improving, and enhancing our services, products, and digital offerings
• Personalizing, customizing, and tailoring your experience to your individual preferences and interests
• Sending marketing communications, promotional materials, and advertising content (subject to your express consent and applicable opt-out mechanisms)
• Analyzing usage patterns, trends, demographics, and user behavior for statistical and analytical purposes
• Complying with legal obligations, regulatory requirements, court orders, and governmental directives
• Preventing, detecting, investigating, and addressing fraudulent activities, unauthorized access, and security threats
• Protecting our intellectual property, assets, and legal interests
• Resolving disputes, addressing complaints, and providing customer support services
• Conducting research, surveys, and user testing initiatives
• Developing new services and features based on user feedback and analytical insights

4. Information Sharing, Disclosure & Third-Party Distribution Policies

We maintain a strict and principled position regarding the sharing and disclosure of your personal information. We do not, under normal circumstances, sell, barter, trade, or commercially exchange your personal information to unrelated third parties for their independent marketing or commercial purposes. However, we may disclose your information in the following circumstances and circumstances only:

• To service providers, vendors, contractors, and third-party partners who assist us in providing services and performing business functions, provided they are contractually obligated to maintain confidentiality and security standards equivalent to our own
• To business partners, co-marketing partners, and affiliated entities, with your prior knowledge and consent where applicable
• To law enforcement agencies, governmental authorities, and regulatory bodies when legally required by subpoena, court order, warrant, or other legal process
• To protect our rights, property, safety, and legal interests, and to enforce our terms of service and other agreements
• In the event of merger, acquisition, bankruptcy, dissolution, or other corporate restructuring, where user information may be transferred as a business asset
• With your explicit written consent for specific purposes

5. Data Security Measures & Protective Infrastructure

We implement and maintain comprehensive, multi-layered, and industry-leading security measures, protocols, and safeguards to protect your personal information against unauthorized access, disclosure, alteration, destruction, and other forms of misuse. These measures include but are not limited to: encryption technologies utilizing advanced cryptographic algorithms; secure socket layer (SSL) protocol; firewalls and intrusion detection systems; access controls and authentication mechanisms; regular security audits and assessments; employee training and data protection protocols; and secure data storage facilities. However, we must transparently and forthrightly acknowledge that no method of transmission over the Internet or method of electronic storage is absolutely impervious to unauthorized access, and we therefore cannot guarantee with absolute certainty the complete and perpetual security of your information. You acknowledge this inherent risk and agree to accept responsibility for maintaining the confidentiality of your account credentials and passwords.

6. Cookie Technology & Persistent Tracking Mechanisms

Our website and digital properties utilize cookies, pixels, web beacons, and similar persistent tracking technologies to enhance your browsing experience, remember your preferences, analyze usage patterns, and deliver personalized content. Cookies are small text files stored on your device that contain information about your browsing activity and preferences. You retain the absolute right to control cookie settings through your browser preferences and settings. You may choose to disable cookies entirely, accept all cookies, or selectively accept certain categories of cookies. Please be advised that disabling cookies may result in limited functionality of certain features, services, and interactive elements of our website.

7. User Rights & Data Subject Privileges

Depending upon your jurisdiction of residence and the applicable data protection regulations in your location, you may possess certain fundamental rights regarding your personal information, including but not limited to the following rights and privileges:

• The right to request access to your personal information and to receive a comprehensive account of the data we maintain regarding you
• The right to request correction, amendment, or rectification of inaccurate, incomplete, or outdated information
• The right to request deletion or erasure of your personal information under certain circumstances
• The right to restrict or limit our processing of your information
• The right to data portability and to receive your information in a structured, commonly-used, and machine-readable format
• The right to object to processing for direct marketing purposes and to opt-out of marketing communications
• The right to lodge a complaint with the appropriate data protection authority

To exercise any of these rights, please contact us at privacy@pickmycpa.com with detailed information regarding your request, and we will respond within the timeframe specified by applicable law.

8. Third-Party Links & External Websites

Our website and digital properties may contain hyperlinks, references, and connections to third-party websites, applications, platforms, and digital properties operated and maintained by entities entirely outside our control and organizational structure. We exercise no authority, oversight, or responsibility regarding the privacy practices, security measures, terms of service, or content of such third-party properties. We expressly disclaim any liability, responsibility, or obligation regarding third-party websites and strongly encourage and advise you to thoroughly review the privacy policies, terms of service, and security practices of any third-party website before providing your personal information or accessing their services.

9. Children's Privacy & Protection of Minors

Our services, products, and digital properties are not intended for, directed to, or designed for use by individuals under the age of thirteen (13) years old. We do not knowingly, intentionally, or willfully collect, solicit, or retain personal information from children under thirteen years of age. If we discover or become aware that we have collected or retained personal information from a child under thirteen, we will promptly and expeditiously delete such information from our systems. Parents, guardians, or legal representatives who believe we have collected information from a minor should contact us immediately at privacy@pickmycpa.com.

10. Policy Modifications & Future Amendments

We retain the absolute right and discretion to modify, amend, update, or otherwise revise this Privacy Policy at any time and in our sole discretion. Material and substantive modifications to this Policy will be communicated to you through prominent notification on our website or through direct communication. Your continued use and access of our services following notification of policy modifications constitutes your implicit acceptance of the revised policies and terms.

11. Contact & Escalation Procedures

If you possess questions, concerns, complaints, or require clarification regarding this Privacy Policy, our data handling practices, or your personal information, we strongly encourage and invite you to contact us through the following designated channels:

12. International Data Transfers & Cross-Border Compliance

In the event that you are accessing our services from a jurisdiction outside the United States of America, you acknowledge and agree that your personal information and data may be transferred to, stored in, and processed within the United States or other jurisdictions where we maintain operational facilities, data centers, or contractual relationships with service providers. Different jurisdictions maintain varying standards, requirements, and regulations regarding data protection, privacy, and information security. By providing your personal information and continuing to use our services, you explicitly consent to such international data transfers and acknowledge that your information may be subject to the laws, regulations, and legal processes of the United States or other jurisdictions, which may provide different levels of privacy protection than your country of residence.

We implement and maintain appropriate safeguards, contractual mechanisms, and legal frameworks to facilitate such transfers in compliance with applicable international data protection regulations, including but not limited to Standard Contractual Clauses, Binding Corporate Rules, and other mechanisms recognized and approved by applicable regulatory authorities.

13. Retention & Deletion Policies

We retain your personal information for the duration necessary to provide our services, fulfill the purposes for which it was collected, comply with legal and regulatory obligations, and resolve any disputes or claims. The specific retention period varies depending upon the nature of the information, the purposes for which it is used, and applicable legal requirements. When your information is no longer necessary for the purposes for which it was collected or when you request deletion, we will securely delete or destroy such information in accordance with our data destruction protocols. However, we may retain certain information to comply with legal obligations, enforce agreements, or protect our interests and the interests of other users.

14. Automated Decision-Making & Profiling

We may utilize automated decision-making technologies, algorithms, machine learning processes, and profiling mechanisms to analyze your information, predict preferences, customize content, detect fraudulent activities, and make determinations regarding our services. These automated processes may be used to make decisions that produce legal or otherwise significant effects on you. To the extent permitted and required by applicable law, we will provide you with information regarding our automated decision-making processes and offer you the opportunity to request human review of automated decisions.

15. California Consumer Privacy Act (CCPA) Compliance

If you are a resident of California, you possess certain rights under the California Consumer Privacy Act (CCPA) and California Online Privacy Protection Act (CalOPPA). These rights include the right to know what personal information is collected, used, shared, or sold; the right to request deletion of personal information collected; the right to opt-out of the sale or sharing of personal information; the right to non-discrimination for exercising your privacy rights; and the right to have a consumer rights agent authorized to act on your behalf. To exercise any of these rights, please contact us at privacy@pickmycpa.com or submit a verified consumer request through our website.

16. European Union GDPR Compliance

If you are a resident of the European Union, United Kingdom, or European Economic Area, your personal information is processed in accordance with the General Data Protection Regulation (GDPR) and other applicable European data protection laws. We process your information based on lawful grounds including your explicit consent, contractual necessity, legal compliance, vital interests, public tasks, and legitimate interests. You possess the comprehensive rights outlined in Article 15-22 of the GDPR, including the rights referenced in Section 7 of this Policy. We maintain records of our processing activities and conduct Data Protection Impact Assessments where required. Our Data Protection Officer is available at dpo@pickmycpa.com for any data protection inquiries.

17. Breach Notification & Incident Response

In the event of a data breach, security incident, or unauthorized access to personal information, we will undertake a thorough and expeditious investigation, implement corrective measures, and notify affected individuals in accordance with applicable legal requirements and timeframes. We maintain a comprehensive incident response plan and security protocols to minimize the impact of any security incidents. Notifications will include information about the nature of the breach, the data involved, steps we are taking to address the incident, and steps you can take to protect yourself.

18. Accountability & Transparency

We are committed to maintaining transparency regarding our data processing practices and maintaining accountability for our compliance with privacy regulations and this Policy. We maintain detailed documentation of our processing activities, conduct regular privacy impact assessments, implement privacy by design principles, and maintain ongoing training programs for our employees. Our organizational structure includes designated privacy and data protection officials responsible for overseeing compliance and responding to inquiries.

19. Additional Regulatory Compliance & Jurisdictional Requirements

We comply with various data protection regulations across multiple jurisdictions including but not limited to the GDPR, CCPA, LGPD (Brazil), PIPEDA (Canada), PDPA (Singapore), and numerous state and local privacy laws. Our compliance framework is designed to meet or exceed the most stringent requirements across all jurisdictions in which we operate. We conduct regular compliance audits, maintain detailed documentation of our processing activities, and engage with regulatory authorities as necessary. Our privacy program is overseen by dedicated compliance personnel and external counsel to ensure continuous adherence to evolving legal standards. We maintain separate policies and procedures for different jurisdictions where required, and users can request jurisdiction-specific information regarding how their data is processed.

20. Vendor Management & Processor Responsibilities

We engage third-party service providers, data processors, and vendors to assist in providing services and processing data on our behalf. All such providers are subject to contractual obligations ensuring they maintain appropriate security measures, confidentiality obligations, and compliance with applicable privacy regulations. We conduct due diligence assessments prior to engaging vendors, maintain updated inventories of all processors, audit vendor compliance regularly, and ensure appropriate data processing agreements are in place. We remain accountable for vendor performance and maintain mechanisms to address vendor non-compliance including suspension of services and contract termination.

21. Marketing Communications & Promotional Materials

We may send you marketing communications, promotional materials, newsletters, and advertising content regarding our services, products, and offerings. All such communications include clear instructions for opting out and unsubscribing. You may manage your communication preferences through your account settings or by contacting us directly. We respect your preferences and will honor opt-out requests within ten (10) business days. We do not share your marketing preferences with third parties for their independent use. Marketing emails comply with CAN-SPAM Act requirements and include accurate header information and clear identification of commercial messages.

22. Complaint Resolution & Dispute Procedures

If you believe we have violated your privacy rights or this Policy, we encourage you to contact us immediately through the channels provided in Section 11. We maintain a comprehensive complaint resolution procedure designed to address concerns promptly and fairly. Complaints will be acknowledged within five (5) business days and resolved within thirty (30) days where feasible. If you are not satisfied with our response, you maintain the right to lodge a complaint with the appropriate data protection authority in your jurisdiction. We will cooperate fully with regulatory investigations and maintain records of all complaints and resolutions.

23. Accessibility & Accommodations

We are committed to ensuring this Privacy Policy and our privacy practices are accessible to individuals with disabilities. If you require alternative formats, accommodations, or have difficulty understanding any portion of this Policy, please contact us and we will provide appropriate assistance. We accommodate requests for large print, audio formats, simplified language, and other accessibility measures. Our commitment to accessibility extends to all aspects of our privacy program and data handling practices.

24. Future Technology & Emerging Practices

As technology evolves and new data processing techniques emerge, we will update our practices to incorporate privacy-enhancing technologies, security innovations, and best practices. This may include adoption of emerging standards such as differential privacy, federated learning, homomorphic encryption, and other advanced technologies designed to protect privacy while enabling beneficial data analysis. We will transparently communicate significant changes and maintain this Policy to reflect our evolving practices. We commit to staying at the forefront of privacy innovation while maintaining our fundamental commitment to protecting your information.

25. Final Provisions & Entire Agreement

This Privacy Policy constitutes the entire agreement between you and Pick My CPA regarding the treatment of your personal information and supersedes all prior agreements, understandings, and communications regarding privacy. No modifications to this Policy are valid unless made in writing and signed by authorized representatives of Pick My CPA. If any provision of this Policy is found invalid or unenforceable, the remaining provisions shall continue in full force and effect. This Policy is governed by the laws applicable to your jurisdiction of residence, without regard to conflicts of law principles. Our failure to enforce any right or provision does not constitute a waiver of such right or provision.