Privacy Policy

1. Who is responsible

EPICURE SAS, 136 rue d’Assas, 75006 Paris, France, is responsible for your data. Because we are established in France, the EU General Data Protection Regulation (GDPR) applies, wherever you live. Privacy contact: [PRIVACY EMAIL — TO BE PROVIDED].

2. What we collect

• Free check: your answers about your notice. No name, no SSN.
• Account and payment: your email and a payment confirmation.
• Your file: your name as on the notice, tax year, notice date, the items and your choices, your statement.
• Documents you upload: your notice, your return and the forms it lists, and records for what you disagree with. Your SSN is masked when they are read. We never ask for it.
• Messages you send us, and security logs.

3. Tax return information

We treat everything you give us as tax return information. We use it only to prepare your response. We never use it or share it for anything else without your separate, written consent.

4. Why we use it

• Run the free check (steps you ask for before a contract).
• Prepare your response, send the emails and reminders you paid for (contract).
• Payments and accounting (legal obligation).
• Alerts you ask for (consent, withdrawable).
• Security (legitimate interest).

5. Who we share it with

• Service providers under contract, for this purpose only: payment [TO BE CONFIRMED], hosting [TO BE CONFIRMED], document reading [TO BE CONFIRMED], email [TO BE CONFIRMED], AI provider for support replies [TO BE CONFIRMED].
• Authorities, only if the law requires it.
• We do not send anything to the IRS: you send your response yourself. We never sell your data.

6. How long we keep it

• Documents you upload (originals): read automatically, then deleted within 24 hours.
• Your file (answers, choices and the documents we create): kept until 90 days after your file is closed. A file closes at its last follow-up step, or after 12 months without activity.
• Payment records: 10 years, as French accounting law requires, without your tax documents.
• You can download or delete your file at any time.

7. Your rights

You can ask to see, correct, download or delete your data, object to its use, or withdraw consent. Write to our privacy contact; we answer within one month. You can also complain to the CNIL (cnil.fr), the French data protection authority.

8. Security

Data is encrypted in transit. Access is limited to what the service needs. A written security plan covers your tax information. [DETAILS — TO BE CONFIRMED]

9. Where your data goes

Your data may be processed in the European Union and the United States, with the safeguards the GDPR requires. [PER PROVIDER — TO BE CONFIRMED]

10. Cookies

Only the cookies the site needs to work. [ANALYTICS, IF ANY — TO BE CONFIRMED]