Privacy Policy

Last Updated: March 16, 2026

World Enterprises LLC ("we," "us," or "our") operates NextGen Taxman (the "Service") at nextgentaxman.com. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our tax preparation software and related services. We are committed to protecting your privacy and complying with all applicable federal and state laws, including the Gramm-Leach-Bliley Act (GLBA) and the California Consumer Privacy Act (CCPA).

By using our Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree, please do not use the Service.

1. Information We Collect

We collect several categories of information to provide, maintain, and improve our tax preparation services:

Personal Identifiable Information (PII):

• Full legal name, date of birth, and Social Security Number (SSN) or Individual Taxpayer Identification Number (ITIN)
• Mailing address, email address, and phone number
• Filing status, dependents, and household information
• Government-issued identification for identity verification

Financial Information:

• W-2 wage and income statements
• 1099 forms (1099-INT, 1099-DIV, 1099-MISC, 1099-NEC, 1099-B, 1099-R, and others)
• Bank account numbers and routing numbers for direct deposit or payment
• Investment account data, including capital gains, dividends, and cost basis
• Bank statements and transaction histories imported through Plaid
• Mortgage interest statements (1098), student loan interest, and charitable donation records
• Self-employment income and business expense records

Technical and Usage Data:

• IP address, browser type, device information, and operating system
• Pages visited, time spent on pages, and navigation patterns
• Referring website, search terms, and clickstream data
• Error logs and performance data

2. How We Collect Your Information

We collect information through the following methods:

• Direct input: Information you enter manually into our tax preparation forms, account registration, and profile settings.
• Document upload: Tax documents, receipts, and statements you upload to our platform.
• Plaid integration: Financial data imported from your bank accounts, investment accounts, and other financial institutions through Plaid (see Section 3 below).
• IRS and government sources: Data retrieved from the IRS or state tax agencies with your authorization.
• Automated collection: Cookies, web beacons, and similar technologies that collect usage data when you interact with the Service.
• Third-party services: Identity verification services, payment processors, and analytics providers.

3. Plaid Integration — Financial Data Access

NextGen Taxman uses Plaid Inc. ("Plaid") to securely connect to your financial institutions and import tax-related financial data. Plaid is a trusted financial technology company that enables applications like ours to access your bank and financial account information with your explicit permission.

What Plaid Does:

• Plaid acts as a secure intermediary between your financial institutions and NextGen Taxman.
• When you choose to connect a financial account, Plaid facilitates the authentication process directly with your bank or institution.
• Plaid retrieves your financial data — including account balances, transaction histories, W-2 information, 1099 data, bank statements, and investment account details — and transmits it to us in a secure, encrypted format.
• Plaid does not store your login credentials on our behalf; authentication is handled through tokenized, secure connections.

How We Use Financial Data from Plaid:

• To automatically populate your tax return with income, deductions, and financial information.
• To verify identity and reduce errors in tax preparation.
• To identify eligible deductions and credits based on your financial transactions.
• To facilitate direct deposit or payment of taxes owed.

How We Store Financial Data from Plaid:

• All financial data received through Plaid is encrypted at rest using AES-256 encryption and in transit using TLS 1.2 or higher.
• Financial data is stored on secure cloud infrastructure within the United States.
• Access to Plaid-sourced data is restricted to authorized systems and personnel on a need-to-know basis.
• We retain Plaid-sourced financial data only for as long as necessary to provide our services and meet our legal obligations (see our Data Retention & Deletion Policy for specific timelines).

Sharing of Plaid Data:

• We do not sell financial data obtained through Plaid to any third party.
• We share Plaid-sourced data only as necessary to file your tax returns with the IRS and applicable state agencies.
• We may share data with service providers who assist in tax preparation, but only under strict contractual obligations to protect your data.

Revoking Plaid Access:

You may revoke NextGen Taxman's access to your financial accounts at any time by disconnecting your accounts through your NextGen Taxman account settings. You may also revoke access directly through Plaid's portal at my.plaid.com. Upon revocation, we will no longer receive new data from your connected accounts. Previously imported data may be retained in accordance with our Data Retention & Deletion Policy and applicable legal requirements.

By using Plaid through our Service, you also agree to Plaid's privacy practices as described in the Plaid End User Privacy Policy. We encourage you to review Plaid's policy to understand how Plaid collects, uses, and protects your data independently of NextGen Taxman.

4. How We Use Your Information

We use the information we collect for the following purposes:

• To prepare, review, and file your federal and state tax returns
• To create and manage your NextGen Taxman account
• To verify your identity and prevent fraud
• To process payments, refunds, and direct deposits
• To communicate with you about your tax return, account status, and service updates
• To provide customer support and respond to inquiries
• To improve our Service, develop new features, and conduct internal analytics
• To comply with legal and regulatory obligations, including IRS record-keeping requirements
• To enforce our Terms of Service and protect the rights and safety of our users

5. How We Share Your Information

We never sell your personal or financial data to third parties. We may share your information only in the following limited circumstances:

• Tax authorities: With the IRS and state tax agencies as required to file your tax returns and process refunds.
• Service providers: With trusted third-party vendors who assist us in operating our Service (e.g., cloud hosting, payment processing, identity verification, customer support), subject to strict data protection agreements.
• Plaid: As described in Section 3, Plaid facilitates data transfer between your financial institutions and our Service.
• Legal compliance: When required by law, regulation, legal process, or enforceable governmental request.
• Business transfers: In connection with a merger, acquisition, or sale of assets, in which case your data would remain subject to the protections described in this Privacy Policy.
• With your consent: When you explicitly authorize sharing with a specific third party.

6. Data Security

We implement industry-standard security measures to protect your personal and financial information:

• AES-256 encryption for data at rest and TLS 1.2+ encryption for data in transit
• Multi-factor authentication (MFA) for user accounts and internal systems
• Secure cloud infrastructure hosted within the United States
• Regular penetration testing, vulnerability assessments, and security audits
• Role-based access controls with least-privilege principles for all personnel
• Continuous monitoring and intrusion detection systems
• Employee security training and background checks for personnel with data access
• Incident response procedures and breach notification protocols

While we take every reasonable precaution to protect your data, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security but are committed to promptly notifying affected users in the event of a data breach.

7. Your Rights — Access, Deletion, and Portability

You have the following rights regarding your personal data:

• Right to access: You may request a copy of the personal and financial data we hold about you. We will provide this information in a commonly used electronic format within 30 days of a verified request.
• Right to deletion: You may request that we delete your personal data, subject to legal retention requirements. See our Data Retention & Deletion Policy for details on what data may be retained and for how long.
• Right to data portability: You may request a machine-readable export of your data so that you can transfer it to another service provider.
• Right to correction: You may request correction of any inaccurate personal information we hold about you.
• Right to restrict processing: You may request that we limit how we use your data in certain circumstances.
• Right to revoke Plaid access: You may disconnect your financial accounts at any time (see Section 3).

To exercise any of these rights, contact us at privacy@nextgentaxman.com. We will respond to verified requests within 30 days. We will not discriminate against you for exercising any of your privacy rights.

8. CCPA — California Consumer Privacy Act Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

• Right to know: You have the right to know what personal information we collect, the sources of collection, the purposes for which it is used, and the categories of third parties with whom it is shared.
• Right to delete: You may request the deletion of your personal information, subject to certain legal exceptions (e.g., legal retention requirements for tax records).
• Right to opt-out of sale: We do not sell your personal information. This applies to all consumers, not only California residents.
• Right to non-discrimination: We will not deny you services, charge different prices, or provide a different quality of service because you exercised your CCPA rights.
• Right to correct: You may request correction of inaccurate personal information.
• Right to limit use of sensitive personal information: You may direct us to limit the use of your sensitive personal information (including SSN, financial account information, and precise geolocation) to purposes necessary to provide our Service.

To submit a CCPA request, email privacy@nextgentaxman.com with the subject line "CCPA Request." We will verify your identity before processing any request and respond within 45 days, as required by law.

9. GLBA — Gramm-Leach-Bliley Act Compliance

As a provider of tax preparation services that handles nonpublic personal information (NPI), we comply with the Gramm-Leach-Bliley Act (GLBA) and its implementing regulations, including the FTC's Safeguards Rule. Under the GLBA:

• We maintain a comprehensive written information security program that is regularly assessed and updated.
• We designate a qualified individual to oversee our information security program.
• We conduct regular risk assessments to identify and address risks to the security, confidentiality, and integrity of customer information.
• We implement safeguards to control the risks identified in our assessments, including access controls, encryption, and monitoring.
• We oversee service providers to ensure they maintain appropriate safeguards for the customer information we share with them.
• We provide this Privacy Policy as our GLBA privacy notice, informing you of our data collection, sharing, and protection practices.
• We do not disclose nonpublic personal information to nonaffiliated third parties except as permitted under the GLBA (e.g., to process your tax returns, as required by law, or with your consent).

10. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to improve your experience on our Service:

• Essential cookies: Required for core functionality such as authentication, session management, and security.
• Analytics cookies: Help us understand how users interact with our Service so we can improve it. We use privacy-respecting analytics tools.
• Preference cookies: Remember your settings and preferences for a personalized experience.

You can manage cookie preferences through your browser settings. Disabling essential cookies may affect the functionality of the Service. We do not use cookies to track you across third-party websites for advertising purposes.

11. Third-Party Services

Our Service integrates with or relies on the following categories of third-party services:

• Plaid: Financial data aggregation (see Section 3).
• Payment processors: To process payments for our services securely. We do not store full credit card numbers on our servers.
• Cloud hosting providers: To host our application and store data securely within the United States.
• Identity verification services: To verify user identity and prevent fraud.
• Analytics providers: To measure usage and improve our Service.
• Customer support tools: To manage and respond to support inquiries.

Each third-party provider is contractually obligated to protect your data and use it only for the purposes for which it was provided. We encourage you to review the privacy policies of these third-party providers.

12. Children's Privacy

Our Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@nextgentaxman.com, and we will promptly delete such information.

13. Data Retention

We retain your personal and financial data only for as long as necessary to provide our services and comply with our legal obligations. For detailed information about our retention periods and deletion procedures, please review our Data Retention & Deletion Policy.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by updating the "Last Updated" date at the top of this page and, where appropriate, by sending you an email notification or displaying a prominent notice within the Service. Your continued use of the Service after any changes constitutes your acceptance of the updated Privacy Policy.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: privacy@nextgentaxman.com
• Company: World Enterprises LLC
• Website: nextgentaxman.com