Privacy Policy
Last updated: October 28, 2026
This Privacy Policy explains how Biz Tax Strategy ("we," "us," or "our"), operated by Randy McKee, IRS Enrolled Agent, collects, uses, stores, and protects information in connection with this website and our intake forms. We collect only what we need to review your situation and provide our services, and we never sell your personal information.
Information we collect
- Interest form. Your name, email, ZIP code, state, and basic business details (whether you have an entity, entity type, company name, state of registration, a short description of your business, and your goals).
- Discovery intake. If you choose to complete it: contact details, date of birth, home address, marital status, number of dependents, business activities and plans, income sources, financial and life goals, and — only if you upload it — a copy of a prior-year tax return.
- Documents you upload. Tax returns and any files you attach. These may contain sensitive personal information such as Social Security numbers, income, and dependents. Uploading is optional — you may instead bring documents to your session.
- Connected financial accounts. If you are a client and choose to connect a bank or credit card account, we receive transaction data for that account — dates, amounts, merchant and description, and account name and type. See "Connected financial accounts" below.
- Receipts you submit. Photos or files of business receipts you send us, together with any note you add describing the expense.
- Scheduling information. When you book a session, our scheduling provider (Cal.com) processes the details of your booking under its own privacy policy.
- Communications & consent. A record of your opt-in to be contacted, plus emails, calls, and texts exchanged with us.
- Basic technical data. Standard logs such as IP address and browser type, and an internal record of when staff access your documents, for security and accountability.
Where your information is stored
Your form responses and uploaded documents are stored in a database and file storage hosted by Supabase, our data-infrastructure provider, in the United States. Documents are kept in a private storage area that is not publicly accessible; only authorized staff can open them, using short-lived, individually logged access links. Information is encrypted in transit (TLS) and at rest. Supabase acts as our processor under a data processing agreement.
Connected financial accounts
Clients of our practice may choose to connect a business bank or credit card account to our client portal so that expense documentation can be prepared throughout the year. This is optional, and it is available only to clients with an active engagement with us — you can work with us without ever connecting an account.
- How the connection is made. We use Plaid Inc. to establish the connection. You sign in at your own financial institution's page through Plaid. We never see, receive, or store your online banking username or password. Plaid's handling of your information is governed by the Plaid End User Privacy Policy.
- What we receive. Transaction history for the account you connect (date, amount, merchant/description, and pending or posted status), plus the account name, type, and institution. We request transaction data only.
- Read-only, no money movement. The connection is read-only. We cannot move funds, initiate payments, or make any changes to your account.
- How we use it. Solely to categorize your business expenses, match them to the receipts you submit, and prepare and substantiate your tax filings. Federal law (IRC §7216) restricts what tax professionals may do with your information, and we collect it for no other purpose.
- We do not sell or share it. We never sell, rent, or trade transaction data, and we never use it for marketing, advertising, credit decisions, or any purpose unrelated to your engagement.
- How it is protected. The credential that lets us retrieve your transactions is held server-side only, encrypted, and is never exposed to your browser or stored on any staff device. Transaction records are kept in the same private, access-controlled database described above, restricted to authorized staff.
- You hold the off switch. You can disconnect a linked account at any time by telling us or using the disconnect control in your portal. We stop retrieving new transactions immediately and delete the stored connection credential. Transactions already used to support a filed return are retained as records, as described below.
How we use information
- To review your tax and business situation and prepare for your session.
- To document and categorize your business expenses, and to prepare and substantiate your tax filings.
- To contact you about your request by email, phone, or text (with your consent), and to send resources you ask for.
- To provide, maintain, secure, and improve our services.
- To comply with our legal, regulatory, and professional obligations as a tax practitioner.
Automated analysis (AI)
To help Randy prepare efficiently, we may use a third-party AI service (Anthropic) to generate an internal summary of the information and documents you provide, and to suggest an expense category for receipts and transactions you share with us. Suggested categories are always reviewed and confirmed by Randy's office before they are used in any filing. This is used only to prepare your work; the AI provider does not use information submitted through its business API to train its models. AI output is reviewed by Randy and is not a substitute for professional judgment. If you prefer that we not process your documents with AI, tell us and we will accommodate the request.
Website analytics
On the public pages of this website — the home page, the Blueprint page and these policy pages — we use Google Analytics to understand which pages are useful and whether a visit leads to a booked consultation. It uses cookies and collects information such as the pages you view, how you arrived, your device and browser type, and your approximate location; it does not tell us who you are. Google Analytics is not used on your client portal, document upload or discovery intake pages, and nothing you enter in our forms, portal or documents is sent to Google. You can block these cookies in your browser settings or with the Google Analytics opt-out browser add-on. Google's handling of this data is described in its Privacy Policy.
How we share information
We do not sell or rent your personal information. We share it only:
- With service providers who help us operate — our website host (Netlify), database and storage (Supabase), email delivery (Resend), scheduling (Cal.com), financial account connections (Plaid), AI analysis (Anthropic), and website analytics (Google, public pages only) — each permitted to use it only to perform services for us.
- When required by law, subpoena, or to establish or protect our legal rights.
How long we keep it & your rights
We retain your information only as long as needed for the purposes above and to meet legal and records-retention requirements, after which it is deleted. Receipts, transaction records, and expense documentation supporting a tax filing are retained for seven years in line with IRS documentation standards, and are deleted on your instruction after that period. You may request to access, correct, or delete the information you provided, or withdraw consent to be contacted, by emailing us at the address below; we will honor verified requests except where we must retain records by law. You can opt out of marketing emails at any time using the unsubscribe link or by replying to ask.
Data security
We maintain administrative, technical, and physical safeguards designed to protect your information — including encryption in transit and at rest, access restricted to authorized staff, multi-factor authentication on staff accounts, and logging of document access. As a paid tax professional, Randy maintains a written information security program consistent with IRS and FTC requirements for safeguarding taxpayer data. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.
Third-party links and services
This site and our emails link to third-party services (for example, Cal.com scheduling and downloadable resources). We are not responsible for the privacy practices of those third parties; please review their policies.
Children's privacy
This site is intended for business owners and is not directed to children under 13. We do not knowingly collect personal information from children.
Changes to this policy
We may update this Privacy Policy from time to time. Changes are effective when posted on this page, with the "Last updated" date revised accordingly.
Contact us
Questions about this policy? Reach Randy McKee directly:
Biz Tax Strategy · Randy McKee, IRS Enrolled Agent
Las Vegas, NV
Phone: (702) 540-0699
Email: randy@taxandincomewarrior.com