Privacy Policy

Introduction

Arc & Ledger LLC ("Arc & Ledger," "we," "our," or "us") operates arcandledger.com and provides tax, accounting, and advisory services. This Privacy Policy describes exactly what data this website collects, which third-party services handle that data, and what rights you have. We do not sell your personal information to anyone.

Data We Collect and How

Contact Form – Web3Forms

When you submit an inquiry through our contact form, the data you enter – your name, email address, message, and any service interest you select – is transmitted to and stored by Web3Forms (web3forms.com). We receive a copy of your submission by email. Web3Forms' privacy policy governs how they store and process this data. We use your submission solely to respond to your inquiry.

SMS Messaging

If you voluntarily check the SMS consent box on our contact form, we collect your mobile number and consent choice so Arc & Ledger Accounting can send service-related text messages about appointments, document requests, deadlines, and account updates. Message frequency varies. Message and data rates may apply. Consent is not a condition of purchasing any service.

You can opt out at any time by replying STOP. Reply HELP for help, or contact us at [email protected]. We do not sell, rent, or share mobile numbers or SMS consent information with third parties or affiliates for marketing or promotional purposes. Mobile information may be shared only with service providers that support message delivery and only as necessary to provide the messaging service.

Appointment Booking – Google Calendar

When you schedule a consultation through our booking link, your name, email address, appointment time, meeting purpose, and any optional contact details you provide are processed through Google Calendar Appointment Scheduling. Google's privacy policy governs that data. We receive a calendar event and use the information only to conduct and administer your appointment.

Payment Processing – Stripe

Payments for our services are processed through Stripe via Stripe Payment Links. Arc & Ledger does not collect, transmit, or store any payment card data. All card information is entered directly on Stripe's hosted pages and governed by Stripe's privacy policy and PCI-DSS compliance program. We receive only a confirmation of payment and the amount paid.

Website Analytics – Google Analytics 4

We use Google Analytics 4 to understand how visitors use this website. Google Analytics collects page views, click events, session duration, and general geographic region. IP addresses are anonymized before storage. Google retains this analytics data for 14 months by default. This data does not identify you personally, and we use it only in aggregate form to improve the site. You can opt out using the Google Analytics Opt-out Browser Add-on.

Advertising & Conversion Tracking – Google Ads

We use Google Ads conversion tracking to measure how well our advertising works. When you complete an action such as submitting a lead form or a checkout, we record a conversion event. This site has Google's Enhanced Conversions feature enabled: when you submit a form, a hashed (irreversible) version of the contact details you provide, such as your email address or phone number, may be sent to Google to help match the conversion to an ad interaction. We do not send Google your raw email or phone number, your message, or any tax information. You can manage ad personalization through Google Ad Settings.

Advertising Analytics – Meta Pixel (Facebook)

We use the Meta Pixel, operated by Meta Platforms, Inc., to understand how visitors arrive from and interact with our Facebook and Instagram advertising. The pixel loads after the page and records events such as page views and, when you submit a lead form or complete a checkout, a lead or purchase event. These events are shared with Meta and may be associated with your Meta account if you have one. The pixel does not receive your tax information or the contents of your message. You can control how Meta uses this data in your Meta ad preferences and through your browser's cookie controls.

Edge Analytics – Cloudflare

This website is served through Cloudflare, which provides privacy-focused, cookieless web analytics (aggregate page views and performance metrics) at the network edge. This data is aggregate and does not identify you personally.

Cookies and Tracking Technologies

This website uses cookies and similar technologies (such as advertising pixels and browser local storage) set by the analytics and advertising services described above: Google Analytics, Google Ads, and the Meta Pixel. These measure site usage and advertising performance. Cookies set by our booking, payment, and contact tools are strictly necessary for those features to function.

We use Google Consent Mode. By default, analytics and advertising storage are enabled, and we do not currently display a cookie consent banner. You can control or block cookies at any time through your browser settings, and you can opt out of specific services using the links above: the Google Analytics Opt-out Browser Add-on, Google Ad Settings, and your Meta ad preferences. Blocking cookies will not affect your ability to browse the site, book a consultation, or contact us.

EA Confidentiality – Circular 230

Arc & Ledger's practitioners include an Enrolled Agent (EA). All tax and financial information you share during consultations, engagements, or otherwise in the course of our professional relationship is treated as strictly confidential in accordance with Treasury Department Circular 230 and applicable professional standards. We do not disclose client tax or financial information to third parties except as required by law or with your explicit consent.

Service Emails – Resend

Transactional emails about your engagement – payment receipts, secure portal links, and status updates – are delivered through Resend (resend.com). Resend processes your email address and the message content solely to deliver these emails, and its privacy policy governs that processing.

Engagement Delivery Tools

To deliver the services you purchase, we use professional software operated by third parties: IRS-practitioner software for transcript access and account monitoring (used only under an authorization you sign, such as IRS Form 8821 or 2848), and workflow tools such as Zapier that may carry your name and email address between our systems to open your file. These providers receive only the minimum information needed for their function, and never your tax documents through workflow tools.

Internal Practice Management – Airtable

We use Airtable as an internal practice-management tracker. It may hold your name, service type, engagement status, deadlines, quoted fee, invoice status, and payment totals so we can coordinate work and billing. We do not use this tracker for tax returns, notices, transcripts, account numbers, government identifiers, uploaded documents, or message bodies. Our protected internal Workboard reads a limited set of these operational and billing fields and does not write client records back to Airtable.

How We Share Your Information

We do not sell your personal information. Your data is shared only with the service providers described above, including Web3Forms, Google Calendar, Google Analytics, Google Ads, Meta Platforms (Meta Pixel), Cloudflare, Stripe, Resend, Airtable, Zapier, IRS-practitioner software used under your signed authorization, and messaging providers such as Twilio when you opt in to SMS, and only to the extent necessary for each provider to perform their function. Mobile numbers and SMS consent information are never shared with third parties or affiliates for marketing or promotional purposes. We may also disclose information when required by law, court order, or valid regulatory demand.

Your Rights

You have the right to request deletion of contact-form, booking, internal practice-management, and Workboard data associated with your name or email, subject to legal and professional recordkeeping requirements. To make such a request, email us at [email protected]. We will address the request in our systems and with the applicable service providers.

Note: analytics data collected by Google Analytics is anonymized and cannot be linked back to an individual, so deletion of individual records is not possible for that data set.

Client Document Uploads (Secure Portal)

Some paid services (such as our IRS notice review) let you upload documents through our secure portal at portal.arcandledger.com after checkout. This is the only part of our systems that holds client documents, and it operates under stricter rules than the rest of this policy:

• Collected only under a paid engagement. The portal accepts uploads only through a private link issued after your Stripe checkout. We collect the document you upload plus the name and email Stripe provides from your payment.
• Encrypted at rest. Documents are stored encrypted on Cloudflare R2 and are accessible only to the reviewing Enrolled Agent.
• Never used to train AI, never sold, never shared. Your documents are used solely to perform the service you purchased.
• Deleted automatically. Uploaded documents are deleted 90 days after your engagement closes; only a minimal payment ledger (dates, amount, status) is kept for the records the law requires.
• No tracking on the upload flow. The portal pages run no analytics, advertising, or third-party code.

Data Retention

Web3Forms retains contact submissions per its policy. Google retains Calendar and appointment-scheduling data according to the applicable Google Workspace and Google privacy settings. Google Analytics retains anonymized analytics data for 14 months. The Workboard replaces its Airtable mirror with each successful checked snapshot, deletes abandoned inactive snapshots, keeps owner-entered communication summaries for no more than two years, and scrubs Workboard client identity and free text after the applicable work has been closed and inactive for 90 days. Tax and financial records created during a professional engagement are retained in accordance with IRS recordkeeping requirements and California law, which generally require a minimum of three to seven years depending on the record type. Portal document uploads follow the shorter 90-day post-engagement deletion described above.

Governing Law

This Privacy Policy is governed by the laws of the State of California. Any disputes arising under this policy shall be subject to the jurisdiction of the courts of California.

Children's Privacy

Our services are directed exclusively to adults. We do not knowingly collect personal information from individuals under 18 years of age. If you believe we have inadvertently collected such information, please contact us and we will delete it promptly.

Changes to This Privacy Policy

We may update this Privacy Policy when our practices change or when required by law. The "Last updated" date at the top of this page will reflect any revision. We encourage you to review this page periodically.

Contact

For privacy-related questions, deletion requests, or concerns about this policy, contact us at: