Privacy Policy
Effective Date: August 8, 2026
This Privacy Policy explains how PrepQueue LLC (“PrepQueue,” “we,” “us,” or “our”) collects, uses, discloses, and protects your personal information when you visit our website (prepqueue.com), request a demo, join a waitlist, communicate with us, use the PrepQueue platform, or otherwise interact with our services (collectively, the “Services”). PrepQueue is located at 8401 Mayland Dr #7261, Richmond, VA 23294.
By using our website or Platform, you acknowledge that you have read and understand this Privacy Policy. If you do not agree with its terms, please do not use our services.
1. Scope and Roles
When you visit our website, request information, join a waitlist, or interact with PrepQueue directly, PrepQueue generally acts as the business or controller of that information.
When a tax, bookkeeping, accounting, or advisory practice uses PrepQueue to collect documents or information from its clients, manage missing items and open questions, track readiness, or make review appointments available, that practice generally determines what information is collected and why. In that context, PrepQueue generally acts as a service provider or processor processing information on behalf of the practice.
If you are a client of a practice using PrepQueue, you should contact that practice for questions about its professional services, document requests, privacy practices, and record-retention obligations.
2. Information We Collect
We may collect account and contact information, such as name, business name, email address, phone number, job title, practice affiliation, client affiliation, login or authentication information, and account settings.
We may collect client portal and workflow information, such as uploaded documents, file names, messages, checklist answers, open questions, scheduling selections, readiness statuses, appointment statuses, internal notes entered by authorized practice users, and related metadata.
We may collect business and financial documents uploaded through the Services, which may include tax documents, W-2s, 1099s, bank statements, credit-card statements, merchant statements, payroll reports, receipts, invoices, loan statements, photo IDs, EIN documents, SSN-containing documents, and other records requested by a practice.
We may collect website and usage information, such as IP address, browser type, device information, operating system, referring pages, pages viewed, timestamps, feature usage, logs, error data, and approximate location derived from IP address.
The following chart describes categories of personal information we may collect, use, and disclose. Not every category applies to every user.
| Category | Examples | Purposes | Disclosures |
|---|---|---|---|
| Identifiers | Name, email, phone, business name, IP address, account identifiers, mailing address. | Provide Services; account administration; support; security; billing; communications. | Service providers; connected practice/customer; legal, compliance, or security recipients. |
| Customer records / financial information | Billing records, uploaded tax, bookkeeping, payroll, bank, credit-card, merchant, invoice, receipt, loan, ID, EIN, or SSN-containing documents. | Provide document workflows; readiness tracking; customer support; security; legal compliance. | Service providers; connected practice/customer; legal, compliance, or security recipients. |
| Commercial information | Plan, pricing, payment status, service interests, waitlist/demo interactions. | Billing; sales operations; customer management; product improvement. | Payment processors and other service providers. |
| Internet or network activity | Device, browser, log data, pages viewed, feature usage, error data, access logs. | Security; troubleshooting; performance; fraud prevention; service improvement. | Hosting, security, monitoring, and support providers. |
| Professional or employment information | Job title, practice role, practice affiliation, staff role, business contact details. | Account administration; permissions; customer support; marketing communications. | Service providers; connected practice/customer. |
| Sensitive personal information | Taxpayer information, SSNs where present in uploaded records, government IDs, financial account information, payroll data, income and tax records. | Provide requested Services; secure and support workflows; legal compliance. Not used to infer characteristics except as needed to provide Services. | Service providers; connected practice/customer; legal, compliance, or security recipients. |
| Inferences | Limited workflow-related status, readiness indicators, and appointment-eligibility indicators derived from submitted information. | Provide readiness tracking, reminders, and related workflow functionality. | Connected practice/customer and service providers as needed to operate the Services. |
We may collect communications information when you email us, request a demo, join a waitlist, submit forms, respond to surveys, or communicate with support.
3. Sources of Information
We collect information directly from you, from practices that use PrepQueue, from Client Invitees who submit information through secure links, automatically from your device or browser, and from service providers that help us operate the Services.
4. How We Use Information
We use information to provide, operate, maintain, secure, and improve PrepQueue; create and manage accounts; support document requests, uploads, messaging, reminders, readiness tracking, scheduling, and dashboards; provide support; process payments; communicate with users; send transactional notices; send marketing communications where permitted; troubleshoot issues; monitor usage and performance; prevent fraud and misuse; comply with applicable law; and enforce agreements.
We do not provide tax, bookkeeping, accounting, payroll, legal, financial, investment, or regulatory advice.
We may use limited workflow logic, automation, or AI-enabled features to help organize submitted materials, identify missing items, generate readiness indicators, support reminders, and assist practices in managing document collection and scheduling workflows. These features are intended to support administrative workflow management and do not replace professional judgment by the applicable practice.
5. How We Disclose Information
We may disclose information to the practice connected to your portal. If you are a Client Invitee, documents and messages you submit through PrepQueue may be made available to the practice that invited you.
We may disclose information to service providers and subprocessors that operate on PrepQueue’s behalf for hosting, storage, authentication, payment processing, email delivery, security, monitoring, customer support, development-platform support, analytics if added later, and other operational services. These service providers and subprocessors currently include Supabase for hosting, database, storage, and authentication; Lovable for build/development platform functions (Lovable’s Privacy Policy, Terms, and DPA can be found here: https://lovable.dev/privacy, https://lovable.dev/data-processing-agreement, https://lovable.dev/terms); Stripe for payment processing once implemented; and Resend for transactional email delivery. We may disclose information for legal, security, and compliance purposes, including to comply with law, legal process, or government requests; protect rights, property, and safety; investigate fraud or security issues; enforce agreements; or defend legal claims.
We may disclose information in connection with a merger, acquisition, financing, reorganization, sale of assets, or similar business transaction, subject to appropriate confidentiality protections where applicable.
6. No Sale or Sharing of Personal Information
PrepQueue does not sell personal information, does not share personal information for cross-context behavioral advertising, and does not provide personal information to any third party for that party’s own purposes. PrepQueue does not currently use advertising pixels or targeted advertising trackers.
If we change these practices, we will update this Privacy Policy and provide required choices where applicable.
7. Sensitive Personal Information
The Services may process sensitive information, including tax, financial, payroll, banking, account, identity, and government-identification information. We use sensitive information to provide, secure, support, and maintain the Services and as instructed by the applicable practice. We do not use sensitive personal information to infer characteristics about individuals except as necessary to provide configured workflow functionality, readiness indicators, reminders, scheduling controls, or other Services requested by the applicable practice.
Users and practices should avoid uploading unnecessary Social Security numbers, full account numbers, identity documents, or other sensitive information when not required for the applicable professional workflow.
8. Cookies, Analytics, and Tracking
We may use cookies, local storage, pixels, web beacons, tags, and similar technologies to operate the website and Services, keep users signed in, remember preferences, improve performance, monitor errors, and support security, and understand how users interact with the website and Services. Third parties that help us operate the website and Services may also use cookies or similar technologies in connection with those services, and we do not control third-party cookies, tracking technologies, websites, products, services, and privacy practices.
9. Marketing Communications
We may send marketing emails, waitlist updates, product announcements, and similar communications where permitted. You can opt out of marketing emails by using the unsubscribe link or contacting us. You may still receive transactional, administrative, account, security, billing, or service-related messages.
10. Data Security
We use commercially reasonable administrative, technical, and organizational safeguards designed to protect your personal information from unauthorized access, disclosure, alteration, or destruction. Current intended safeguards include encryption in transit, encryption at rest, role-based access controls, vendor/cloud hosting security controls, access logging where appropriate, and regular backups.
No system, network, storage method, or internet transmission is completely secure, and we cannot guarantee absolute security. We do not claim bank-level security or SOC 2 certification unless expressly stated in writing.
11. Data Retention
We retain information for as long as reasonably necessary to provide the Services, maintain and administer accounts, support customer workflows, comply with legal and contractual obligations, resolve disputes, enforce agreements, maintain backups, and protect security.
For customer-controlled data, retention may depend on the customer's subscription status, settings, requests, legal obligations, and professional record-retention practices. Upon termination or customer request, we may delete or make data available for export, subject to technical limitations, backup retention, legal obligations, and ordinary-course archival processes.
12. Third-Party Links
Our website may contain links to third-party websites, including those of industry partners, government agencies, and affiliated associations. This Privacy Policy does not apply to those sites. We encourage you to review the privacy policies of any third-party sites you visit.
13. Your State Privacy Rights
PrepQueue does not currently sell or share personal information for cross-context behavioral advertising.
State consumer privacy laws may provide their residents with additional rights regarding our use of their personal information.
California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia provide (now or in the future) their state residents with rights to:
Confirm whether we process their personal information.
Access and delete certain personal information.
Correct inaccuracies in their personal information, taking into account the information's nature and processing purpose (excluding Iowa and Utah).
Data portability.
Opt-out of personal data processing for:
targeted advertising (excluding Iowa);
sales; or
profiling in furtherance of decisions that produce legal or similarly significant effects (excluding Iowa and Utah).
Either limit (opt-out of) or require consent to process sensitive personal data.
The exact scope of these rights may vary by state and PrepQueue may not be subject to the requirements of each state referenced above. If applicable, you can exercise any of these rights by emailing privacy@prepqueue.com.
If your request relates to information controlled by a practice using PrepQueue, we may direct the request to that practice or coordinate with the practice, because the practice may be responsible for the client relationship and legal response.
Authorized agents may submit requests where permitted by law. We may require proof of authorization and identity verification.
Where applicable, these rights may include the right to confirm whether we process your personal information; access personal information; correct inaccuracies; request deletion of personal information; obtain a portable copy; opt out of targeted advertising, sale or certain profiling; and appeal a decision regarding a request.
14. Children's Privacy
The PrepQueue website and services are not intended for children under 16 years of age. No one under age 16 may provide any personal information to or on the PrepQueue website and services. We do not knowingly collect personal information from children under 16 via the PrepQueue website and services. If you are under 16, do not use or provide any information on or through the PrepQueue website or services or through any applicable features, register on the PrepQueue website, make any purchases through PrepQueue, use any of the interactive or public comment features of this PrepQueue website and services, or provide any information about yourself to us, including your name, address, telephone number, email address, or any screen name or user name you may use. If we learn we have collected or received personal information from a child under 16 without verification of parental consent, we will delete that information. If you believe we might have any information from or about a child under 16, please contact us at privacy@prepqueue.com. If you are under the age of 16 and wish to obtain our services or provide personal information to PrepQueue website and services, ask your parent or legal guardian to contact us.
Residents of certain states under 13, 16, or 18 years of age may have additional rights regarding the collection and sale of their personal information.
15. International Users
PrepQueue is operated from the United States and is intended for U.S.-based customers. If you access the Services from outside the United States, your information may be processed in the United States or other locations where our service providers operate.
Where required by applicable law, we will implement appropriate safeguards for cross-border transfers of personal information.
16. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. If changes are material, we may provide notice by posting the updated policy on our website and, where appropriate, notify you by sending an email or providing in-app notice. Your continued use of our website or Services after the effective date of any update constitutes your acceptance of the revised policy. The updated policy will be effective as of the effective date listed above.
17. Contact Us
PrepQueue LLC, 8401 Mayland Dr #7261, Richmond, VA 23294. Support: support@prepqueue.com. Privacy requests: privacy@prepqueue.com. Legal notices: legal@prepqueue.com.