ReliaHub Privacy Policy

Effective Date: July 12, 2026

ReliaTax Group LLC ("ReliaTax Group," "we," "us," or "our") operates ReliaHub, a client workflow platform for U.S. tax professionals and small tax offices. This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when people visit ReliaHub websites, create or use a ReliaHub account, submit information through a ReliaHub-powered form, communicate with us, or otherwise use our services.

ReliaHub is separate from tax preparation software. ReliaHub does not prepare tax returns, transmit tax returns, determine filing positions, or provide tax or legal advice.

1. Scope and Roles

This Policy applies to:

• ReliaHub account owners and authorized users;
• visitors to ReliaHub websites;
• prospective customers and support contacts; and
• taxpayer clients and other individuals who submit information through ReliaHub-powered public forms, intake forms, booking pages, or secure upload links.

When a tax professional uses ReliaHub to collect or manage information from that professional's clients, the tax professional determines what information to collect and why. In that context, the tax professional is generally the business responsible for the client relationship, and ReliaHub processes information on the tax professional's behalf as a service provider or processor. Individuals seeking to exercise rights concerning information submitted to a tax professional should ordinarily contact that tax professional first. We will assist our customer with verified requests as required by applicable law and our agreements.

For information we collect for our own account administration, billing, security, product improvement, and legal compliance, ReliaTax Group acts as the business or controller.

2. Information We Collect

2.1 Account and Business Information

We may collect:

• name, business name, title, mailing address, email address, and phone number;
• login credentials, authentication data, recovery information, and multi-factor authentication status;
• account role, permissions, account activity, and audit-log information;
• plan selection, subscription status, invoices, payment status, and limited billing information; and
• business profile, public-site content, logo, colors, services, contact details, and domain settings.

Payment card information for ReliaHub subscriptions is processed by our payment provider. We generally do not receive full payment card numbers.

2.2 Client Workflow Information

Information submitted through or stored in ReliaHub may include:

• client names, email addresses, phone numbers, addresses, and preferred contact methods;
• intake responses, service requests, appointment details, case or return-year references, notes, tasks, and status information;
• spouse, dependent, and household information entered by the client or tax professional;
• documents and images uploaded in PDF, JPG, or PNG format;
• payment-status information, such as Payment Due, Paid, or Not Required; and
• communication drafts, delivery records, consent records, and request history.

This information may include sensitive personal information and taxpayer information. ReliaHub does not use uploaded document contents to train AJ or to generate AJ drafts.

2.3 Public Forms and Booking Information

When someone submits a contact form, intake form, booking request, cancellation request, reschedule request, or additional-document upload, we may collect the information entered, timestamps, form source, verification details, consent selections, IP address, browser/device information, and related security logs.

Clients do not create ReliaHub accounts. Additional-document upload links are scoped to a specific client and require email or phone verification before upload.

2.4 Communications

We collect information when users contact support, submit product feedback, respond to surveys, or communicate with us. ReliaHub uses Resend to deliver outbound email. ReliaHub does not read, search, or synchronize a user's email inbox.

2.5 Calendar, SMS, Domain, and Payment Integrations

Depending on the features used, we may process:

• identifiers and event details needed to create and manage appointments on the single Google Calendar selected by the account owner;
• phone numbers, message content, delivery status, opt-in records, and opt-out records for SMS services;
• domain and DNS verification information for custom domains; and
• Stripe Connect account identifiers, onboarding status, payment-link or invoice references, and payment status for Power users.

Client payments through Stripe Connect are processed for the tax professional's connected Stripe account. ReliaHub does not act as the merchant of record for the tax professional's tax-preparation services.

2.6 Device, Usage, and Product Analytics

We collect technical and usage data such as IP address, browser type, device type, operating system, pages and features used, timestamps, referring pages, error logs, session information, and approximate location derived from IP address.

We use essential cookies and privacy-conscious product analytics to operate, secure, troubleshoot, and improve ReliaHub. We do not use personal information for cross-context behavioral advertising, and we do not sell personal information.

3. How We Use Information

We use personal information to:

• provide, maintain, secure, and support ReliaHub;
• authenticate users and enforce roles and permissions;
• host public business pages, forms, booking pages, and secure upload workflows;
• process intake submissions, documents, tasks, appointments, payment statuses, and communications;
• generate rule-based follow-up tasks and AJ drafts for user review;
• send account, security, billing, service, reminder, and support communications;
• process subscriptions, enforce plan limits, and administer storage add-ons;
• detect, investigate, and prevent fraud, abuse, unauthorized access, and security incidents;
• maintain audit logs, backups, retention schedules, and deletion workflows;
• improve product usability, reliability, and performance;
• comply with law, legal process, and enforceable government requests; and
• protect the rights, safety, property, and integrity of ReliaTax Group, our customers, clients, and others.

AJ is a constrained drafting and workflow feature. AJ does not automatically send messages, does not read uploaded document contents, and does not provide tax or legal advice.

4. How We Disclose Information

We may disclose information to:

4.1 Service Providers

Vendors that help us provide hosting, database, storage, authentication, security, email delivery, SMS delivery, analytics, customer support, domain services, payment processing, and related infrastructure. They may process information only for contracted purposes and subject to appropriate obligations.

4.2 Customer-Directed Integrations

When an account owner enables an integration, we disclose the information needed to perform the requested function, such as creating an appointment in the selected Google Calendar, delivering email through Resend, sending SMS through the configured provider, or facilitating payments through Stripe Connect.

4.3 Authorized Users

Information may be visible to the account owner and authorized Power-tier assistant or tax-pro user according to assigned permissions.

4.4 Legal, Security, and Business Protection

We may disclose information when reasonably necessary to comply with law or legal process, respond to lawful requests, investigate security incidents, enforce agreements, prevent fraud or abuse, or protect rights, safety, and property.

4.5 Business Transactions

Information may be transferred as part of a merger, financing, acquisition, reorganization, bankruptcy, or sale of assets, subject to applicable law and appropriate confidentiality protections.

4.6 With Consent or Direction

We may disclose information when the relevant person or customer directs us to do so or provides consent.

We do not sell personal information. We do not share personal information for cross-context behavioral advertising.

5. Tax Professional Responsibilities

ReliaHub customers are responsible for:

• determining whether they have a lawful basis to collect and use client information;
• providing their own privacy notices and obtaining required permissions and consents;
• collecting only information reasonably necessary for their services;
• keeping account, user, device, and integration access secure;
• reviewing recipients and content before sending communications;
• honoring verified privacy requests from their clients;
• securing any information downloaded or exported from ReliaHub; and
• maintaining a complete written information security plan and other safeguards applicable to their practice.

ReliaHub Security Setup addresses safeguards related to use of ReliaHub only and does not replace a tax professional's complete WISP.

6. Data Security

We use administrative, technical, and physical safeguards designed to protect information, including authentication, multi-factor authentication, role-based access, private storage, encryption in transit, access controls, audit logs, monitoring, and secure development practices.

ReliaHub administrators cannot impersonate users and cannot access uploaded client files through standard support tools. Any support access to taxpayer-identifying information must be permissioned, limited, logged, and visible to the tax professional in the audit log.

No security program can guarantee absolute security. Users must protect credentials, devices, recovery methods, upload links, and exported data, and promptly notify us of suspected unauthorized access.

7. Retention and Deletion

We retain information for as long as reasonably necessary to provide the services, comply with law, resolve disputes, enforce agreements, and protect security.

For customer accounts:

• subscription cancellation becomes effective at the end of the already-paid billing period;
• a suspended account receives 14 days of export access before moving to Canceled status;
• a canceled account receives an additional 90-day export period; and
• after the applicable export and retention period, account data may be permanently deleted, subject to legal holds, security needs, and limited backup retention.

For uploaded documents:

• a document associated with a case is scheduled for deletion five years after the case is marked Completed;
• a document without a related case is scheduled for deletion five years after upload; and
• ReliaHub provides deletion warnings at 1 year, 90 days, 60 days, 30 days, 15 days, and 7 days before scheduled deletion.

Permanent deletion may not be reversible. Customers are responsible for exporting records they are independently required to retain.

8. Privacy Choices and Rights

Depending on where an individual lives and applicable law, rights may include access, correction, deletion, portability, restriction, objection, appeal, and the right not to receive discriminatory treatment for exercising privacy rights.

Account owners may access and update much of their information through ReliaHub. Requests concerning ReliaTax Group's own processing may be sent to privacy@reliahub.com.

For information submitted to a tax professional through a ReliaHub-powered form, contact the tax professional first. We may refer the request to that customer and assist with fulfillment. We may need to verify identity and authority before acting. We will not disclose sensitive information unless we can reasonably verify the requester.

We do not sell personal information or share it for cross-context behavioral advertising, so we do not offer a sale/share opt-out for those practices.

9. SMS Communications

SMS messages are optional and available only where enabled. Consent must be collected separately on applicable forms. Message frequency varies. Message and data rates may apply. Consent is not a condition of purchasing ReliaHub or a tax professional's services unless a communication is necessary to provide a specifically requested SMS feature.

Recipients may reply STOP to opt out and HELP for help, where supported. Opting out of SMS does not prevent necessary non-SMS communications. Tax professionals are responsible for using SMS only for recipients with appropriate consent and for honoring applicable laws and carrier rules.

10. Cookies and Analytics

ReliaHub uses cookies and similar technologies that are necessary for authentication, security, preferences, session management, and core product functionality. We may also use privacy-conscious product analytics to understand feature usage, diagnose errors, and improve the service.

We do not use third-party advertising cookies or behavioral advertising pixels as part of ReliaHub's standard product analytics.

11. Children's Privacy

ReliaHub accounts are available only to individuals at least 18 years old. ReliaHub is not directed to children. Taxpayer information about dependents may be submitted by an adult as part of a tax professional's client workflow, but children should not independently use ReliaHub or submit information without an authorized adult.

12. U.S.-Only Service and Data Processing

ReliaHub is intended for U.S. tax professionals and their clients. Information may be processed in the United States and other locations where approved service providers operate, subject to applicable safeguards.

13. Third-Party Sites and Services

ReliaHub may link to or integrate with third-party services. Their privacy practices are governed by their own policies. We are not responsible for third-party services that we do not control.

14. Changes to This Policy

We may update this Privacy Policy. If changes are material, we will provide notice through the service, email, or another reasonable method before or when the changes take effect, as required by law. The Effective Date above shows when this Policy was last revised.

15. Contact Us

Privacy: privacy@reliahub.com Support: support@reliahub.com Legal: legal@reliahub.com

ReliaTax Group LLC 24333 Southfield Rd Southfield, MI 48075