Privacy Policy

Introduction

itin.so ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal information when you use our ITIN application service at itin.so. By using our service, you agree to the practices described in this policy.

Information We Collect

To process your ITIN application, we collect the following types of personal information:

• Personal identification information: full legal name, date of birth, country of citizenship, and mailing address.
• Passport and identity documents: copies of your passport, national ID, or other government-issued identification required for the IRS W-7 form.
• Tax-related documents: any supporting tax documents needed for your ITIN application, such as tax returns or withholding statements.
• Contact information: email address, phone number, and WhatsApp contact details.
• Payment information: credit card or debit card details processed securely through Stripe. We do not store your full card number on our servers.

How We Use Your Information

We use your personal information strictly for the following purposes:

• Preparing and submitting your ITIN application (IRS Form W-7) to the IRS.
• Verifying your identity and reviewing your supporting documents.
• Processing your payment for our services.
• Communicating with you about your application status via email or WhatsApp.
• Responding to your questions and providing customer support.
• Complying with legal obligations and regulatory requirements.

We do not use your personal information for marketing purposes unrelated to our ITIN service. We do not sell your data to third parties.

Third-Party Services

We share your information with the following third parties only as necessary to provide our service:

• Stripe: processes your payment securely. Stripe's privacy policy governs how they handle your payment data. You can review it at stripe.com/privacy.
• IRS (Internal Revenue Service): your W-7 application and supporting documents are submitted directly to the IRS for ITIN processing. The IRS handles your information according to federal privacy laws.
• IRS-authorized Certifying Acceptance Agents: we work with authorized partners to certify your identity documents on your behalf.

We do not share your personal information with any other third parties for advertising, analytics, or any purpose beyond what is described above.

Data Retention

We retain your personal information and application documents for up to 3 years after your application is completed. This allows us to assist you with any follow-up questions, IRS correspondence, or renewal needs. After this retention period, your data is securely deleted from our systems. You may request earlier deletion at any time by contacting us.

Data Security

We take the security of your personal information seriously. We use industry-standard measures to protect your data, including encrypted connections (TLS/SSL) for all data transmission, secure storage with access controls, and regular security reviews. Payment processing is handled entirely by Stripe, which is PCI DSS Level 1 certified. While no system is 100% secure, we take reasonable precautions to protect your information from unauthorized access, disclosure, or loss.

Cookies

We use minimal cookies on our website. We may use analytics cookies to understand how visitors use our site and to improve the user experience. We do not use cookies for advertising or tracking across other websites. You can disable cookies in your browser settings at any time, though this may affect some site functionality.

Your Rights

You have the following rights regarding your personal information:

• Access: you may request a copy of the personal information we hold about you.
• Correction: you may request that we correct any inaccurate information in your records.
• Deletion: you may request that we delete your personal information from our systems, subject to any legal retention requirements.
• Portability: you may request your data in a commonly used format.

To exercise any of these rights, please contact us using the details below.

Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of our service after changes are posted constitutes your acceptance of the updated policy.

Contact Us

If you have any questions about this Privacy Policy or how we handle your personal information, please contact us: