Privacy Policy

FairFyn provides a branded, secure portal where a tax firm and its clients can exchange documents, track the status of a return, and message each other. Kesava LLC operates the software. Each firm remains responsible for its own clients and the tax work it performs.

We collect the information needed to run the portal and provide the service:

• Firm account information: firm name, the account owner's name and email, and firm settings.
• Client personal and tax information: names, contact details, financial documents, and sensitive identifiers such as a Social Security Number or Taxpayer Identification Number, when a client or firm uploads them.
• Communications: messages exchanged between a firm and its client through the portal.
• Usage and technical data: basic log and device information used to operate, secure, and improve the service.
• Payment information: firm subscription payments are processed by Stripe. We do not store full card numbers on our systems.

We use the information to operate the portal and run the service. This includes enabling secure document exchange between a firm and its client, showing return status, delivering messages and notifications, providing branded firm login, and processing firm subscription billing.

We also use it to secure the service, prevent abuse, provide support, and meet our legal obligations. We do not sell personal information, and we do not use client tax data for advertising.

Access to a client's information is limited to that client and the firm they are engaged with. A firm cannot see another firm's clients, and a client cannot see another firm's data.

We share information with a small number of service providers (subprocessors) that help us run FairFyn, only as needed to provide the service:

• Supabase: database and hosting.
• Stripe: payment processing for firm subscriptions.
• Resend: sending transactional email such as invitations and notifications.
• Vercel: application hosting.
• We may also disclose information if required by law, or to protect the rights, safety, and security of our users and the service. We do not sell personal information to anyone.

Security is central to FairFyn. We apply the following measures:

• Data is encrypted in transit using TLS.
• Sensitive personal information, such as a Social Security Number or Taxpayer Identification Number, is encrypted at rest using AES-256.
• Row-level access controls ensure a firm and its client can only see their own data.
• We do not sell personal data.

We keep information for as long as it is needed to provide the service to a firm and its clients, and as required to meet legal, tax, and accounting obligations.

A firm or client can request deletion of their information by contacting us. Some information may be retained where the law requires it, after which it is deleted or anonymized.

Depending on where you live, you may have the right to access, correct, or delete your personal information, and to object to or limit certain uses. Because a firm controls its client relationships, we may direct some requests to the relevant firm, or work with the firm to fulfill them.

To make a request, contact us using the details in the Contact section below.

FairFyn uses only essential cookies needed to keep you signed in and to run the portal, including your session and language preference. We do not use advertising cookies.

FairFyn is a business tool for tax firms and is not directed at children. We do not knowingly collect personal information directly from children. A firm may process a client's dependents' information as part of a tax engagement, under the firm's own responsibility.

We may update this policy as FairFyn evolves or as legal requirements change. When we make material changes, we will update the effective date above and, where appropriate, notify firms through the service.