Last updated: October 24, 2026
1099 Assistant is a tax-tracking tool for US-based independent contractors. This policy covers the website at 1099assistant.com and the 1099 Assistant mobile app. You can reach us on the Contact page.
| Data | Why |
|---|---|
| Name, email address, state, and (optional) phone and address | To create your account, sign you in, and apply the right state rules. |
| Income, expense and mileage entries you enter, and the categories and recurring entries you set up | This is the service: storing and reporting on your records. |
| Names, business details and notes for people you pay, if you use the W-9 tracker | To remember who you have collected a W-9 from. We never store the taxpayer ID or a copy of the form. |
| Receipt images you upload | To attach proof to an entry. Stored privately and encrypted, never public. |
| Location, while a trip is being tracked in the app | To measure trip distance for the mileage deduction. Collected only while tracking is switched on. |
| Support messages you send us | To answer you. |
| Your phone's push-notification token (Android app) | To deliver the notifications you have allowed. |
| Sign-in records: IP address, time, device, approximate country | Security: spotting unfamiliar sign-ins and blocking brute-force attempts. See section 7 for how long. |
| A history of the changes you make to your account and records | So you can see what changed and when. |
| Your cookie choices, if you are signed in | So we can show what you agreed to and when. Visitors without an account keep the choice in a cookie only. |
| Campaign name, only if you accepted analytics cookies and arrived from one of our ads | We keep the label for 30 days and, if you sign up, store it on your account so we can see which campaigns bring customers. It contains no personal information. |
| Privacy requests you send us | To handle them, and to show later that we did. |
We do not sell your personal information, and we do not share your account or financial records with anyone for advertising. The companies that help us run the service are listed, with exactly what each one receives, on Services we use. In summary:
| Service | Purpose |
|---|---|
| Hosting provider | Runs the servers your data is stored on. |
| Stripe | Subscription payments. Stripe receives your name, email and payment details directly; we receive a customer reference and the subscription status. |
| Email provider | Delivers our emails. Monthly reports and quarterly reminders, if you turn them on, contain the totals printed in them. |
| Google (push notifications) | Delivers app notifications. They carry a generic line such as "Open the app to read the reply", never your message text or amounts. |
| Have I Been Pwned | When you choose a password, the first five characters of its one-way fingerprint are checked against known leaks. Never the password or your email. |
| ipwho.is | Receives the IP address of a sign-in, to tell us the country so we can warn you about an unusual one. |
| Google (Analytics, Ads) and Meta (Facebook pixel) | Only if you accept the matching choice on our cookie banner. They receive a cookie identifier, the pages you visit, and whether you signed up or subscribed. Never your financial records. |
We may disclose information if the law requires it, or to protect the rights and safety of our users. You can change your cookie choices at any time on the Cookie Policy page.
You can invite an accountant to view your records. Nothing is shared until you send that invitation and they accept it. Their access is read-only: they cannot add, change or delete anything, and they cannot see your password, payment details or account settings. You can revoke access at any time, and it takes effect immediately.
No system is perfectly secure. We have not had an independent security audit. See the Security page for what we do and how to report a problem.
| What | How long |
|---|---|
| Your records and receipts | While your account is open, because tax records need to be available for past years. Entries you delete sit in Trash until you empty it. |
| IP address on account-activity history | 90 days, then the address is blanked. The entry itself stays. |
| IP address and country of your last sign-in | 90 days. |
| Cookie choices made without an account | 730 days. |
| Closed support tickets | 730 days after they are closed. |
| Completed privacy requests | 1095 days, as proof they were handled. |
| Sign-ups that were never completed | Removed automatically. |
| Backups | The most recent 14 daily backups. Data you delete or an account you close can remain in a backup until it ages out of that window. |
| Server access logs | 14 days. They record each request's IP address, time and page address, as web servers do. Application error logs are kept 8 weeks and are not meant to contain your email address or financial figures. |
| Payment records | Stripe keeps its own payment and invoice records under its own rules. Deleting your account here does not delete them. |
If the law requires us to keep something longer, such as records of a payment, we keep only that.
You can see and edit your information from within the app or website. From Security settings, while signed in, you can download a copy of your data and delete your account and everything in it.
You can also make a request without signing in, to access, correct, delete or get a copy of your personal data, or to ask us about how it is used, on the Privacy requests page. We email a link to confirm the request really comes from you. We aim to answer within 30 days. The deadline that applies to a particular request depends on the law that applies to it.
You can turn off monthly reports and quarterly reminders at any time from your email settings, or with the link at the bottom of each of those emails. We do not use your data to make automated decisions about you.
If you live in a place with additional rights, such as California, the UK or the EU, you can use these same routes for them. If you are unhappy with how we handled a request, you can also contact your local data protection or consumer protection authority.
1099 Assistant is intended for working adults and is not directed at children under 13. We do not knowingly collect information from children. If you believe a child has given us information, tell us and we will delete it.
Pro is a paid yearly subscription that renews automatically until you cancel. The price, renewal and cancellation terms are on the Refund and Cancellation Policy.
When this policy changes we update the date at the top. If the change is significant, for example a new company receiving your data, we tell you by email before it starts.