Privacy policy

ReturnReady is a tax-intake and document-readiness tool used by accounting firms to collect information and documents from their clients. Firms are our customers; their clients use the portal at the firm's invitation.

For information a firm collects from its clients, the firm is the controller of that information and ReturnReady acts as its processor.

Account information: name, email address, password hash, firm membership and role.

Engagement information: client name, contact details, tax year, questionnaire answers, notes and the status of each requested item.

Documents: files uploaded by clients or firm staff, along with file name, size, type and upload time.

Activity records: sign-ins, invitations, uploads, status changes, requests, reminders, approvals and downloads, with the acting user and timestamp.

Technical information needed to serve the app, such as IP address and browser type in server logs.

We do not sell personal information.

We do not send client documents or answers to an AI service, and we do not use them to train machine-learning models.

We do not show advertising or share information with advertising networks.

We do not include tax figures or document contents in notification emails.

To operate the service: build each client's checklist, store and serve documents, calculate readiness, send the reminders a firm has configured, and keep an audit trail.

To support and secure the service: troubleshooting, abuse prevention and backups.

Firm administrators and staff can see the clients and engagements of their own firm only.

A client can see only their own engagement.

Our infrastructure providers process data on our behalf — see the Data processing page for the list.

We disclose information to authorities only where legally required.

Documents and engagement records are kept for as long as the firm's account is active, because firms need the history of prior tax years.

A firm administrator can record the firm's retention target and can permanently delete a client's data from Security settings. Automatic destruction of documents when a retention period passes is not available — deletion is carried out deliberately by the firm.

A firm or client may also request deletion by emailing hello@getreturnready.com.

Backups are retained on a rolling basis (currently seven days) by our database provider and expire automatically, so deleted records can persist in those backups until the window passes.

Clients can update their own answers and uploads in the portal, and can pause reminders or ask their firm to pause them.

To access, correct, export or delete information, email hello@getreturnready.com. If you are a client of a firm, we may direct the request to that firm.

The service is not intended for use by children and we do not knowingly collect their information directly.

If this policy changes materially we will notify firm administrators by email and update the date shown above.