Privacy Policy — Tax Wiki

Last updated: 2026-09-16
Operator: Freshlake AI Inc.
Privacy / legal contact: contact@tax.wiki

Freshlake AI Inc. (“Freshlake”, “we”, “us”) respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect Personal Information in connection with Tax Wiki (tax.wiki / www.tax.wiki), including the wiki, rate tables, and Ask chat.

This Policy applies only to Tax Wiki. It does not cover Ledger, any tax advisory practice, or other Freshlake products, which will have separate notices if and when offered.

This Privacy Policy is not a contract; it describes our privacy practices. Use of Tax Wiki is also subject to the Tax Wiki Terms of Use.

---

1. Who we are; role

For Tax Wiki site analytics, hosting logs, and Ask chats that visitors submit on tax.wiki, Freshlake generally acts as a data controller (or organization responsible for the information under Canadian privacy law): we decide why and how that information is processed for operating Tax Wiki.

Privacy Officer / contact: contact@tax.wiki

---

2. Personal Information we collect

“Personal Information” means information about an identifiable individual, or information that can reasonably identify an individual alone or in combination with other data (for example, an IP address in some contexts, or a chat UUID combined with other data).

2.0 Aggregated and de-identified data

We may collect, create, and use information that does not identify an individual, such as aggregated or de-identified data (for example usage patterns, performance metrics, and other statistical information). We may also transform collected data so that it can no longer reasonably be used to identify a specific individual. That type of data is not Personal Information under applicable privacy laws, and Freshlake may use or share it for any lawful purpose.

2.1 Information you provide

Personal Information you may provide

Tax Wiki does not require account registration and does not collect payment or billing data; if accounts or billing are added later, this Policy will be updated.

Content you submit to Ask (must not include Personal Information)

Ask Inputs (question text and follow-ups) and Ask Votes / feedback (vote signals and related message identifiers) are stored and processed as Service content — to provide Ask responses, store chats, prevent abuse, and for product improvement and training as described below. Ask must not include Personal Information — see Terms §2.4. If banned Personal Information is submitted anyway, it may be treated as Personal Information under this Policy.

2.2 Information collected automatically

2.3 Ask chat storage and identity (important)

When you use Ask, we may store the chat on Tax Wiki systems, including prompts, answers, timestamps, and related identifiers (such as chat or message IDs).

• Storage: Yes — Ask chats are stored.

• Identity: Ask is offered without user accounts. Chats are stored (Ask/session data on Neon — see Section 6). A chat is accessible by its chat identifier or URL — not by account login. Anyone with the identifier may be able to retrieve the chat. Freshlake may later add first-party identifiers, accounts, login, or login-tied Ask chat access; if so, this Policy will be updated.

• Self-serve deletion: Users cannot delete their own Ask chats.

• Retention: There is no fixed retention period. Chats are kept until Freshlake operators delete them, subject to legal holds, backups, and the training/improvement uses described below.

• Staff access: Freshlake personnel may access Ask content where needed to operate, secure, troubleshoot, prevent abuse, improve the Service, comply with law, or as otherwise described in this Policy.

• Rate limiting: We may rate-limit by IP address for abuse prevention.

• Mixpanel (if analytics accepted): If analytics accepted, Mixpanel may see the chat UUID in the page URL/path; it does not receive Ask message text.

Ask must not include Personal Information — see Terms of Use §2.4.

Do not treat Ask URLs or chat identifiers as private credentials. Anyone with a chat identifier may be able to retrieve that chat.

2.4 AI model providers

Prompts go through Vercel AI Gateway (and underlying models via that gateway). Those parties process Inputs and Outputs to return model responses and may process related metadata for safety, abuse prevention, and provider operations under their terms.

2.5 Current vs reserved practices

Analytics: Mixpanel after CookieYes analytics consent; Vercel Speed Insights always on; advertising/marketing cookies not enabled. Freshlake may add other analytics partners later with updated notice and CookieYes consent where required. Freshlake may later enable advertising or marketing cookies and related sharing with notice and CookieYes consent / opt-out where required; those practices are not currently enabled. Freshlake may also send marketing emails if it has an email address for you (see Section 9), subject to applicable law.

---

3. Mixpanel analytics

Tax Wiki uses Mixpanel for product analytics. Events are metadata-only (not Ask question or answer text). Freshlake may add other analytics partners later as reserved in Section 2.5.

3.1 Events we send

1. Page views — path and title only (not Ask query or answer text).
2. Ask submissions — path only (not question or answer text).
3. Vote or feedback signals — metadata such as vote type and page path; not question or answer text.

Mixpanel is a U.S.-based service.

3.2 Legal / practical note on cookies

Mixpanel and similar tools typically use cookies or local storage. Tax Wiki uses CookieYes to present a cookie banner and record preference choices.

Mixpanel is loaded only after the visitor accepts the analytics category in CookieYes (or equivalent accept-all). Choosing Reject All / declining analytics keeps Mixpanel from initializing and tracking.

An advertising / marketing CookieYes category is not currently enabled; Freshlake reserves enabling it as described in Section 10.

Vercel Speed Insights is always-on performance telemetry (see Section 4).

Browser controls may still limit some cookies; blocking cookies may affect analytics or some features.

---

4. Vercel hosting, Speed Insights, and AI Gateway

Vercel for Tax Wiki:

• Hosting / CDN / logs — Tax Wiki is hosted on Vercel. Vercel may process IP addresses, request metadata, URL/route information (which can include /chat/{uuid}), and related logs for hosting, CDN delivery, and security.

• Vercel Speed Insights — always-on performance telemetry; not gated by CookieYes; not the same as product analytics (Mixpanel).

• Vercel AI Gateway — routes Ask prompts and returns model Outputs (see Sections 2.4 and 6).

---

5. How we use information

5.1 Service content uses (Ask)

Ask Inputs and Outputs are primarily processed as Service content (not as ordinary “uses of Personal Information”) to:

1. generate Ask responses via AI model providers (including through Vercel AI Gateway);
2. store Ask chats on Tax Wiki systems and display a chat when its chat identifier or URL is opened; and
3. operate, secure, prevent abuse of, improve, develop, evaluate, test, benchmark, fine-tune, train, and commercialize Tax Wiki and Freshlake models and products, including using Ask Inputs and Outputs as learning signals.

Contingency: If you submit banned Personal Information to Ask despite the Terms, that content may also be treated under the Personal Information uses below, in addition to these Service content uses.

5.2 Uses of Personal Information

We use Personal Information to:

1. provide, operate, maintain, and secure Tax Wiki;
2. measure usage and performance (currently Mixpanel gated by CookieYes; Speed Insights; server logs — and other analytics partners Freshlake may add with notice and consent where required);
3. prevent fraud, abuse, and security incidents;
4. respond to support and privacy requests;
5. comply with law and enforce our Terms;
6. improve, develop, evaluate, test, benchmark, and train Tax Wiki and Freshlake models and products where Personal Information is involved (including Ask content that contains Personal Information submitted despite the Terms);
7. create aggregated or de-identified data and use or share it for any lawful purpose (see Section 2.0);
8. send service, security, or legal communications, and replies to your own support or privacy requests (these may continue after a marketing opt-out — see Section 9.2);
9. send marketing or product communications by email if we have your email address (for example because you contacted us), where permitted by law — with opt-out as described in Section 9; and
10. where later enabled, support advertising or marketing technologies as reserved in Section 2.5 (may personalize later if offered).

---

6. Sharing and disclosure

Freshlake does not sell Personal Information for money. Freshlake may later enable advertising-related sharing with updated notice and consent where required; California residents may have an opt-out if/when that applies (see Section 9.6).

We may disclose Personal Information to:

Service providers may process data outside Canada, including in the United States. Privacy laws in those places may differ. We require appropriate contractual and organizational safeguards consistent with this Policy and applicable law.

Reference retrieval (not Ask chat storage): Search queries for Ask retrieve may go to TaxGraph (Railway), Turbopuffer, and Cohere; they return reference results and do not store Ask chats.

---

7. Retention

We retain Personal Information only as long as needed for the purposes in this Policy, to exercise rights under the Terms of Use, or as required by law, security, abuse prevention, backup, or archival needs.

For Ask chats, there is no fixed retention period; chats remain until operators delete them. Residual copies may remain in backups until purged through ordinary cycles.

Aggregated or de-identified data may be retained longer and used or shared for any lawful purpose as described in Section 2.0.

---

8. Security

We use reasonable administrative, technical, and organizational measures designed to protect Personal Information against loss, theft, and unauthorized access, use, or disclosure. No method of transmission or storage is fully secure. If a breach creates a real risk of significant harm as defined under applicable Canadian law, we will notify affected individuals and regulators as required.

---

9. Your choices and rights

9.1 Choices that apply today

• You cannot delete Ask chats yourself through the Service.

• CookieYes banner / preference center is live; Mixpanel respects analytics accept/reject (see Section 10). Speed Insights is always-on (see Section 4).

• Optional advertising cookies are reserved / not currently enabled (see Section 10).

• You may limit some tracking via browser settings; this may not stop all server-side logging or essential operation.

9.2 Marketing communications

If Freshlake has an email address for you (for example because you emailed contact@tax.wiki or otherwise provided an address), Freshlake may send you email about Tax Wiki, Freshlake products or services, or updates, where permitted by applicable law (including based on a prior relationship or with consent where required).

You can opt out of marketing emails at any time by using the unsubscribe link in a marketing message (when provided) or by contacting contact@tax.wiki with a clear opt-out request. Opting out of marketing does not stop service, security, or legal messages, or replies to your own support or privacy requests.

9.3 Withdrawing consent

Where Freshlake processes Personal Information based on your consent (for example optional CookieYes analytics or advertising categories, or marketing emails where consent is the basis), you may withdraw that consent at any time by:

• changing preferences in the CookieYes banner or preference controls on Tax Wiki;

• using an unsubscribe link in a marketing email (when provided); or

• contacting contact@tax.wiki.

Withdrawal does not affect the lawfulness of processing before withdrawal, and it does not apply to processing based on other grounds (such as providing Ask when you submit a question, legitimate interests for security and essential operation, or legal obligation). Necessary cookies, Speed Insights, and ordinary server logs may continue.

9.4 Canadian residents (PIPEDA and provincial laws)

Depending on your province, you may have rights to access and correct Personal Information we hold about you, and to withdraw consent where processing is based on consent, subject to legal and contractual limits. Québec residents may have additional rights under Law 25 (including, in some cases, de-indexing and information about certain automated decisions).

Contact contact@tax.wiki to make a request. We may need to verify your identity. Because Ask may be used without accounts, we may be unable to locate or link chats to you without information you provide (for example, a chat URL or UUID).

You may complain to the Office of the Privacy Commissioner of Canada (https://www.priv.gc.ca) or your provincial commissioner (for example CAI Québec, OIPC Alberta, OIPC British Columbia).

9.5 EU / UK residents (if applicable)

If GDPR / UK GDPR applies, you may have rights of access, correction, erasure, restriction, objection, portability, and withdrawal of consent, subject to limits. Erasure and portability are not absolute: Freshlake may retain information as needed for legal claims, compliance, security, abuse prevention, backups, operational needs, and rights reserved under the Terms of Use (including Ask storage without self-serve delete, and improvement / training / aggregated or de-identified uses). Contact contact@tax.wiki. You may lodge a complaint with your local supervisory authority. International transfers may rely on Standard Contractual Clauses or similar safeguards where required.

9.6 California residents (if applicable)

If CCPA/CPRA applies, contact contact@tax.wiki to exercise applicable rights. Freshlake does not sell Personal Information for money. If advertising-related sharing is later enabled, California residents may have an opt-out; Freshlake will update this Policy then.

9.7 Children

Tax Wiki is not directed at children under 13 (or higher age required by law). We do not knowingly collect Personal Information from children. Parents or guardians may contact contact@tax.wiki with subject line “Minors Content Removal Request.”

---

10. Cookies and similar technologies

CookieYes presents the cookie banner and records choices. CookieYes may set cookies to remember your preference and may log consent choices. Only the analytics category (Mixpanel) is connected. Speed Insights is not CookieYes-gated (see Section 4). The advertisement category is reserved.

Tax Wiki may use cookies, local storage, pixels, SDKs, and similar technologies as follows:

• Necessary / essential — needed for basic site operation and consent preference storage (CookieYes). Ordinary server/hosting logs may also continue.

• Analytics (optional) — currently Mixpanel product analytics as described in Section 3. Mixpanel initializes and tracks only after you accept the analytics category (including via Accept All) in CookieYes. If you choose Reject All or otherwise decline analytics, Mixpanel does not load or send events. Freshlake may add other analytics partners under this category later with updated notice and consent where required.

• Advertisement (optional; reserved) — not currently enabled; may be used later with notice and CookieYes consent / opt-out where required (see Section 2.5).

You can change or withdraw non-essential cookie choices later through the CookieYes banner or preference controls on Tax Wiki. Essential operation, Speed Insights (see Section 4), and ordinary server logs may continue regardless of analytics or advertising choices. Browser settings may also allow you to block or delete cookies.

---

11. Third-party links

Tax Wiki may link to CRA pages, provincial sites, or other third-party resources. Their privacy practices are their own; we are not responsible for them.

---

12. Updates

We may update this Privacy Policy by posting a new version on Tax Wiki and changing the date. Material changes will be highlighted where required by law. Continued use after an update means the updated Policy applies going forward, unless otherwise required by law.

---

13. Contact

Freshlake AI Inc.
Attn: Privacy / Legal
Email: contact@tax.wiki

Mailing address: any address Freshlake designates on tax.wiki.

© 2026 Freshlake AI Inc. All rights reserved.