Privacy Policy

Calculator inputs. When you click Calculate, the values you entered (such as pay amounts, pay frequency, check date, state, filing status, W-4 and state withholding details, and deductions) are sent to Tuxelo's calculation engine to produce your estimate. Calculation snapshots are deleted after 10 days. Database backups are kept for 7 days, so a deleted snapshot can remain in a backup for up to 7 more days. The worst case is about 17 days after a calculation. You don't need an account to use the calculators, and we don't ask for your name. Your browser also keeps a draft of your inputs in session storage so they survive a page reload; it's cleared when you close the tab.

Work address. If you enter a work address, it is sent to Tuxelo's jurisdiction service to find the local tax jurisdictions (such as city, county, or school district taxes) that apply to it. That service looks the address up with the U.S. Census Bureau's geocoder, so the address is also sent to the Census Bureau. Our site keeps a short-lived, in-memory cache of lookup results for up to 6 hours. Address lookup requests are kept for up to 1 day for operations and troubleshooting, then deleted.

Contact and sign-up forms. If you join the waitlist or sign up for tax-change alerts, we store your email address and the list or page you signed up from, so we can tell you when sign-ups open or when tax rules change. If you use the contact form, we store your name, email address and message so we can reply. To limit abuse we also keep a one-way code derived from your network address, not the address itself, for up to 2 days. If you email us, we receive your email address and whatever you choose to send.

Usage and device data. Unless your browser sends a Global Privacy Control signal (see below), we use Google Analytics 4 and Microsoft Clarity to understand how visitors use the Service. These tools collect technical data such as browser and device type, approximate location derived from your IP address, pages visited, and interactions such as clicks and scrolling, and they set cookies. Microsoft Clarity can record how a page is used; we mask the calculator form and results area in those recordings.

• To produce the estimates you request and return them to your browser.
• To find the local tax jurisdictions for an address you enter.
• To operate, troubleshoot, improve, and secure the Service.
• To respond to questions, feedback, or support requests.
• To analyze aggregate usage patterns and improve our tools.
• To comply with legal obligations.

We do not sell your personal information. We share information with service providers that help us run the Service, such as Microsoft Azure (hosting), Google (Google Analytics), and Microsoft (Clarity). When you enter an address, it is also sent to the U.S. Census Bureau's geocoder as described above. We may also share information when required by law.

We honor Global Privacy Control (GPC). If your browser sends a GPC signal, the Service does not load Google Analytics or Microsoft Clarity. You can also block or delete cookies in your browser settings; the calculators work without them.

• Calculator inputs: calculation snapshots are deleted after 10 days. Database backups are kept for 7 days, so a deleted snapshot can remain in a backup for up to 7 more days. The worst case is about 17 days after a calculation.
• Address lookup requests: up to 1 day, for operations and troubleshooting.
• Our site's address lookup cache: in memory, for up to 6 hours.
• Entries saved in your browser (calculator drafts and form entries): until the tab is closed (drafts) or you clear your browser's site data (form entries).
• Analytics data: according to the retention settings of Google and Microsoft.
• Emails you send us: for as long as reasonably necessary to respond and operate the Service, or as required by law.
• Waitlist and tax-alert sign-ups: we keep your email address, and the list or page you signed up from, until you ask us to delete it, and no longer than 24 months after you sign up.
• Contact messages: we keep your name, email address and message for 12 months after you write, then delete them.
• Abuse limit: a one-way code derived from your network address, not the address itself, for up to 2 days.

To have your sign-up or message deleted, email hello@tuxelo.com from the address you used and we will delete it within 30 days.

California residents have the right to: (i) request information about the personal information we collect, use, and share; (ii) request deletion of personal information; (iii) opt out of the sale or sharing of personal information; and (iv) not be discriminated against for exercising these rights. We do not sell personal information. We treat a Global Privacy Control signal as a request to opt out of sharing, and we don't load our analytics tools when we receive one.

To exercise these rights, email us at hello@tuxelo.com. We may need to verify your identity before responding.

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

Connections to the Service use HTTPS. No method of transmission over the internet or of electronic storage is 100% secure.

We may update this Privacy Policy from time to time. When we do, we will revise the Effective Date above. Continued use of the Service after a change constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy, contact us at hello@tuxelo.com.