Privacy policy

Who we are

Gideon Keep is a product of Gideon Solutions, LLC, which also makes Gideon Tax. “Keep” and “we” below mean that company. Privacy questions go to privacy@gideonkeep.com.

What we collect

Only what has a tax purpose, or is needed to run your account:

• Your sign-in. An e-mail address, a name, and a password or a Google sign-in.
• Your account. Its name, and whether it is for a person or a business.
• The documents you upload, exactly as you gave them, and what Keep read from each one.
• What you tell Keep: your confirmations and corrections of a reading, the facts you change, and the choices you make between two values.
• What Gideon Tax hands back, if you connect the two: who is on a return you filed there, your address, who paid you, and the return's figures once it is accepted. That includes Social Security numbers and employer identification numbers.
• A record of sensitive actions: turning Gideon Tax's access on or off, an export, a read of an identification number — with the time, and for some of them the internet address the request came from.

There are no analytics and no advertising or tracking scripts in the application or on this site. The only cookies are the ones that keep you signed in.

How it is used

To keep your tax history and hand it to the tax software you have authorized — today, Gideon Tax, and only after you turn that on from inside Keep. Nothing else. Documents are read by ordinary software that runs inside Keep; no AI service is called and no document is sent to anyone to be read.

What we never do

• Sell your data, or share it with advertisers or data brokers.
• Use your tax records to train AI models — ours or anyone else's.
• Read your documents for anything beyond the tax interpretation you asked for.
• Give an AI system, an employee or a partner broader access than the task needs.

Who else handles it

Three companies handle Keep's data for us, each for one job. None may use it for anything of its own.

Clerk

Sign-in: your e-mail address, your name, and your password (which neither Clerk nor we can read back). If you sign in with Google, Google tells Clerk who you are.

Vercel

Runs the application, and holds the documents you upload in a private store. Both are in its Washington, D.C. region.

Neon

The database: your records, the readings of your documents, your confirmations, and the history of each. It is in the same Washington, D.C. region.

Gideon Tax receives what an account holds only while its owner has that turned on, and never a bank account number.

Where data lives

In the United States. The application, the documents you upload and the database all run in the Washington, D.C. region of the companies that host them. Your sign-in details are held by Clerk. See the security commitments for how it is protected, and what is not done yet.

How it is protected

Every connection is encrypted. The Social Security numbers, ITINs and EINs that Keep holds about a person or a business are each sealed under a key of their own, and shown by their last four digits; from a document, Keep keeps only the last four digits of your own number. A payer's EIN and an account number, as printed on a document you upload, stay with that document's reading, under the database's own encryption rather than sealed separately. Documents sit in a private store and are reached only through a link that expires in minutes, issued to a signed-in member of the account. One account cannot read another's records.

Keep is in early access, and not every safeguard it is committed to is in place yet. The security page lists each one with its status. Until restoring from backup has been rehearsed, keep your own copy of anything you upload.

Your rights

• A copy. The owner of an account can take a documented, machine-readable copy of everything Keep holds for it from the account's page, and download each document as it was given.
• The history. Every value shows where it came from and what it replaced, and the Gideon Tax page shows what that application has read and sent back.
• Correction. A correction is recorded beside the original, not over it.
• Deletion. To close an account, remove a document or delete your records, write to privacy@gideonkeep.com from the address you sign in with. There is no button for it in the application yet; it is done by hand.

Retention, honestly

Keep holds your records for as long as your account is open — that is the point of it. Retention differs between customer-owned Keep data and the records Gideon must retain as an e-file provider or preparer: filing logs, compliance records and, once there is billing, payment records. Closing a Keep account does not always permit deleting every record Gideon is legally required to keep. We will tell you which is which.

Subpoenas and legal requests

We notify you of any subpoena, warrant or government request for your data unless legally prohibited, and produce only the minimum scope required.

If something goes wrong

If your information is exposed, we tell you plainly and promptly, at the address you sign in with, and make the notifications the law requires.

Changes to this policy

A change is posted here with its date. If a change affects what is done with your records, we tell you by e-mail before it takes effect.

Questions

Email privacy@gideonkeep.com.