Privacy Policy

Effective date: July 18, 2026

TaxNexus is operated by Consult Solutions (Oakland, California) (“we”, “us”). We help Amazon FBA sellers understand potential California sales-tax nexus exposure. This policy explains what we collect, why, who we share it with, and the choices you have. It reflects how the product actually behaves.

1. Information we collect

Account information. When you create an account we store your name and email address (via our authentication system) and, for subscribers, a billing status.
Nexus assessment inputs. Figures you enter (or that our browser extension detects on Amazon, such as fulfillment-center presence) are used to compute an exposure estimate. The assessment endpoint is stateless: these inputs are not stored and are never written to our logs.
Usage & product analytics. With your consent where required, we use Google Analytics 4 (via Google Tag Manager) and Hotjar to understand pages viewed, interactions, approximate location, and device/browser — to improve the product.
Cookies & local storage. Essential items (your login session, language preference, and your cookie-consent choice) plus optional analytics cookies (see §3).
AI compliance assistant inputs. Messages you send to the TaxNexus compliance assistant are processed by Anthropic’s Claude API to generate responses. These messages are not stored by TaxNexus and are never written to our logs. Only message count and response metadata are retained for rate-limiting and cost-monitoring purposes.

2. How we use information

Provide the service and compute nexus assessments.
Operate accounts, subscriptions, and support.
Understand and improve usage (analytics), subject to your consent.
Send service and, where you’ve opted in, product communications (via our email platform).

We do not sell your personal information, and we do not share your sales data with third parties for their own marketing purposes.

3. Cookies & consent

Essential cookies are always on — they’re required to log in, remember your language, and record your consent choice.

Analytics cookies are consent-gated and region-aware. In the United States they are enabled by default under Google Consent Mode. In the EU/UK and other regions, analytics stay off until you opt in through our cookie banner. You can review or change your choices at any time via “Cookie settings” in the site footer.

4. How we protect your identity in analytics

Before any identifier reaches our analytics providers, we replace your account ID with a one-way hash generated using a secret key. Analytics providers receive this pseudonymous value, not your raw account identity.

5. Service providers & third parties

Google (Analytics 4 / Tag Manager) — usage analytics.
Hotjar — product/behavior analytics.
Stripe (US) and Lemon Squeezy (international, as Merchant of Record) — payment processing. Card details go directly to the processor; we never see or store full card numbers.
Content & email platforms (self-hosted CMS and email/marketing) — to serve site content and send communications.
Anthropic — AI/language-model processing for the compliance assistant. Chat messages are processed to generate responses but are not retained beyond the session, per Anthropic’s API data-handling policy. We do not use your sales data to train AI models. See Anthropic’s Privacy Policy.

6. Data retention

Account data is kept while your account is active. If you close your account, we delete or anonymize your personal information within 90 days, except where we must retain certain records for legal, tax, accounting, or security purposes (such as billing records). Nexus assessment inputs are not retained. Analytics data is retained per each provider’s configured retention period. You may request deletion at any time (see §8).

7. International transfers

The service is operated from, and data is processed in, the United States. If you access it from another region, you consent to processing in the United States, where data-protection laws may differ from those in your jurisdiction.

8. Your rights & choices

Withdraw or change analytics consent anytime via “Cookie settings”.
Depending on your location, you may have rights to access, correct, delete, or export your data, and to opt out of “sale”/“sharing” for cross-context advertising (we do not sell personal data).

California residents (CCPA/CPRA). You have the rights to know, delete, correct, and opt out of the sale or sharing of personal information. We do not sell or share personal information as those terms are defined by the CCPA/CPRA, and we will not discriminate against you for exercising your rights.

EEA/UK residents (GDPR/UK GDPR). We process your data on the legal bases of contract performance (providing the service), legitimate interests (security and product improvement), and consent (analytics and marketing). You may lodge a complaint with your local supervisory authority.

To exercise any right, contact us at privacy@taxnexusapp.com. We will respond within the timeframe required by applicable law.

9. Security

We use industry-standard measures (encryption in transit, access controls, minimized data collection). No method of transmission or storage is perfectly secure.

10. Children

The service is intended for business use by adults and is not directed to anyone under 18.

11. Changes to this policy

We may update this policy; material changes will be reflected by the “Effective date” above and, where appropriate, additional notice.

12. Contact

Questions or requests: privacy@taxnexusapp.com.

Consult Solutions, 410 Fairmount Ave, Ste 106, Oakland, California 94611.