MiraFlores Tax Corporation
Privacy Policy
Effective August 31, 2026
This Privacy Policy describes how MiraFlores Tax Corporation ("MiraFlores," "we," "us") collects, uses, shares, and protects personal information in connection with the MiraFlores platform and services (the "Services"). Tax return information receives additional protection under Internal Revenue Code §7216 and the consents in the applicable engagement letter.
1. Information we collect
Account and identity information: name, email address, phone number, and login credentials; for tax preparation, government identifiers such as Social Security numbers and dates of birth for the people named on a return.
Tax documents and financial information: uploaded documents (including W-2s, 1099s, prior-year returns, and statements), the information they contain, and answers submitted through the tax organizer.
Payment and bank-instruction information: invoice and payment records. Card numbers are handled by payment processors and are not stored on MiraFlores servers. For tax refund direct deposit or electronic withdrawal, clients may provide bank name, routing number, account number, and account type. MiraFlores stores and processes these instructions to prepare the requested tax return.
Usage and device information: log data such as IP address, browser type, pages viewed, and actions taken in the portal, used for security, analytics, and operation of the Services.
2. How we use information
MiraFlores uses personal information and Customer Data to provide and operate the Services; prepare, analyze, review, and assemble tax returns, financial documents, and workpapers; extract and classify information; perform calculations, validation, reconciliation, diagnostics, and error detection; communicate, process payments, provide support, secure the platform, and meet legal and professional obligations.
To the maximum extent permitted by applicable law and subject to any legally required notices, authorizations, and consents, MiraFlores may also use Customer Data to maintain and improve the Services; test and evaluate software and artificial-intelligence systems; train, fine-tune, evaluate, validate, benchmark, and improve machine-learning and artificial-intelligence systems; develop features, products, algorithms, workflows, models, datasets, and technologies; detect fraud, abuse, security incidents, and errors; and generate statistical, analytical, operational, and performance information.
MiraFlores does not sell personal information and does not use tax return information for advertising.
3. De-identified, aggregated, and derived data
MiraFlores may create data, statistics, patterns, benchmarks, analyses, datasets, insights, model parameters, embeddings, evaluations, methodologies, metadata, performance information, and other information derived from use of the Services or Customer Data that does not reasonably identify a customer or individual ("Derived Data").
To the fullest extent permitted by law, MiraFlores owns Derived Data, may retain and combine it indefinitely, and may use it for any lawful business purpose, including developing, training, evaluating, benchmarking, improving, commercializing, licensing, and distributing artificial-intelligence systems, software, products, and services.
4. AI processing
Documents, organizer data, and other Customer Data are processed with artificial-intelligence services to extract, classify, organize, analyze, validate, and assist with tax and financial work. AI outputs that feed professional work are subject to human review.
Where permitted by applicable law and supported by any required consent, MiraFlores may use Customer Data to train, fine-tune, evaluate, validate, benchmark, and improve artificial-intelligence systems and may use third-party artificial-intelligence providers and other subprocessors in connection with those purposes. Those providers process data for MiraFlores's authorized purposes and are not authorized by MiraFlores to use it for unrelated purposes.
5. Tax return information and IRC §7216
Federal law, including IRC §7216 and related Treasury Regulations, restricts how tax return preparers may use and disclose tax return information. MiraFlores and the applicable tax preparer use and disclose that information only as the taxpayer authorizes or consents, as permitted to prepare or provide auxiliary services in connection with a return, or as otherwise permitted or required by law.
A customer submitting tax return information is responsible for determining whether a use or disclosure requires a client's or taxpayer's specific consent and for obtaining and documenting every legally required consent before submitting the information to MiraFlores.
8. Security
MiraFlores protects personal information with encryption in transit and at rest, role-based access controls, audit logging, and administrative safeguards. No method of transmission or storage is completely secure; MiraFlores cannot guarantee absolute security and will provide breach notices as required by law.
9. Retention
MiraFlores may retain Customer Data for as long as reasonably necessary to provide the Services, maintain backups, resolve disputes, enforce agreements, satisfy legal, regulatory, insurance, security, audit, tax-recordkeeping, and professional obligations, and fulfill other permitted processing purposes.
Deletion requests are subject to applicable law, technical limitations, backup cycles, security requirements, and lawful retention obligations. Properly de-identified, aggregated, and Derived Data may be retained indefinitely.
10. Rights and choices
A person may request access to, correction of, or deletion of personal information by contacting support@miraflores.ai. MiraFlores will honor applicable requests except where retention or continued processing is permitted or required by law, contract, security, or professional obligation.
California residents may have rights to know the categories of personal information collected and how it is used, request correction or deletion, and not be discriminated against for exercising those rights. MiraFlores does not sell personal information, so no sale opt-out is needed.
11. Children
The Services are not directed to children and may not be used directly by anyone under 18. Dependent information appears on returns only as provided by the responsible adult taxpayer or customer.
12. Job applicants
MiraFlores collects the information submitted with a job application, including contact information, application answers, resumes, case-study responses, and interview responses, which may include audio and video recordings. MiraFlores uses this information only to evaluate candidacy, communicate about roles, and satisfy legal obligations.
MiraFlores uses artificial-intelligence tools to organize, summarize, evaluate, and generate an initial fit score for applications. These outputs assist the recruiting team and do not replace human review. MiraFlores does not permit its AI providers to use application materials to train their general-purpose models.
Application materials and related automated-decision records are retained for at least four years, measured from the later of the application and the most recent employment decision or action, and longer where required for a complaint or proceeding.
13. Where information is processed
MiraFlores is based in the United States and processes information in the United States. Teams and providers may access information from other countries under confidentiality, contractual, and legal requirements and, for tax return information, the applicable notices and consents.
14. Changes to this policy
MiraFlores may update this Privacy Policy from time to time. Material changes will be posted with an updated effective date and, where appropriate, communicated through the Services or by email. A changed policy applies prospectively as permitted by law; a firm's recorded signup acceptance remains bound to the immutable version and complete-content digests stored at acceptance.
15. Contact
Privacy questions or requests: support@miraflores.ai.