Privacy and safeguard policy
Kitfiler LLC · tax.kitfiler.com · Effective for the 2026 filing season
We maintain physical, electronic and procedural safeguards that comply with applicable law and federal standards.
What we collect
The information you enter to prepare your federal return: names, Social Security numbers, dates of birth, address, income documents, deductions, bank account details for a direct-deposit refund, and the identity-verification details the IRS requires for e-filing (prior-year AGI or PIN, IP PIN). We also record your e-mail address, the IP address and a device identifier for each session and filing, as the IRS requires for online returns.
How we use it
Only to prepare your return, transmit it to the IRS, receive the IRS acknowledgement, and support you. We do not sell your information, and we do not use or disclose tax return information for any other purpose without your separate written consent, as required by Internal Revenue Code section 7216.
How we protect it
- Two-step sign-in (password plus authenticator app) for every account; accounts lock after repeated failed attempts.
- All traffic is encrypted (TLS). Social Security numbers, IP PINs, signature PINs and bank account numbers are encrypted in our database (AES-256).
- Access by Kitfiler staff is limited to people who need it to file returns and support customers, and is logged.
- Our systems are scanned for vulnerabilities weekly by an independent scanning vendor.
- Pages that show tax information are not stored in your browser's cache. You are signed out after 20 minutes of inactivity.
- We limit the number of returns per account and per network to protect against fraudulent filing.
Retention
We keep return records for the period required by IRS e-file rules and federal law, then delete them securely.
Security incidents
If we learn of a security incident affecting your information, we will report it to the IRS as e-file rules require and notify you as required by law.
Contact
Questions or concerns: admin@kitfiler.com.