Privacy Policy

Who we are and what this policy covers

Effective date: October 3, 2026

MakeItDeductible is a documentation service run by ProofPack Inc., a Georgia corporation ("MakeItDeductible", "we", "us"). We help real estate investors, short-term rental owners and equipment owners keep organized records of the work they do on their properties and businesses, and turn them into reports for their CPA.

This policy explains what information we collect, why, who receives it, how long we keep it, and the choices you have. It covers:

the MakeItDeductible app, at app.makeitdeductible.ai and on iPhone;
our onboarding site at onboarding.makeitdeductible.ai, and our public website at makeitdeductible.ai (including www.makeitdeductible.ai), which runs on Wix until we close it at the end of 2026, including its client login and web entry form;
messages you send us on WhatsApp, by email, or in the app.

We are not a CPA, law or accounting firm and do not give tax, legal or accounting advice. Nothing in this policy changes that.

We do not sell your personal information, and we do not use it for advertising.

Information we collect

Most of what we hold is what you send us to document your work. We never store card or bank account numbers.

From clients and household members on an account

Information	Examples
Contact details	Name, email address, phone number
Business details	Business or taxpayer name, entity type, EIN if you give it, the tax strategies you use, a description of your business
Property details	Property names, addresses and unit numbers
Activity records	What you did, when, for how long, who took part, expenses, notes; for aviation, flight details and passenger names
Messages	Everything you send us in the app or on WhatsApp, with the time it was sent
Photos, receipts and documents	Files you upload or send on WhatsApp as evidence
Reports	The reports we prepare from your records, and earlier versions of them
Agreement signature	Your name, email, phone, IP address, browser details, the time you signed, and the exact text you agreed to
Billing records	What was billed, to whom and when it was paid. If you pay by card, Stripe holds the card details, not us
Settings	Whether reminder emails and message alerts are on
Usage and diagnostics	Pages you visit in the app, sign-up events, and bug reports you send, which include your browser type

About other people you mention. Your records may name people who took part in an activity, such as a contractor, a guest or a passenger. We hold those names only as part of your records.

From visitors, leads and partners on our websites

Details you enter in our forms: name, email, phone, job title, business name and address, website, LinkedIn link, property address and strategy.
Your questionnaire answers, such as your current situation, an estimated tax exposure range, your timeline and how you prefer to be contacted. Partners also tell us about their company and clients.
Call bookings and the times you are available.
How you reached us: the page you landed on, the referring site, campaign tags in the link, your browser type and the pages you viewed. Before you fill in a form this is not linked to your name; after, it is.
Emails and WhatsApp messages we send you, and replies you send back.

On our current website (www.makeitdeductible.ai, run on Wix until the end of 2026)

The inquiry form: name, email, WhatsApp phone number, how you found us, what you want to achieve, and whether you want a sample report or a call.
The sign-up form and agreement, with the details recorded when you accept it.
Your client login, and activities you log through the web entry form, including descriptions, hours and photos.
Payments made through Wix Payments. Wix and its payment processor hold the card details, not us.

From public sources. For leads who have asked to talk with us, our team may use AI to read public pages, such as your business website and LinkedIn profile, to prepare for a call. Partners may also share contact lists with us so we can follow up with their clients.

From the partner who referred you. If a syndicator, fund sponsor, tax strategist or cost segregation firm referred you, we record which partner it was.

How we use information

We use your information to provide the documentation service you signed up for, and for nothing unrelated to it.

To document your work: turning your messages, photos and files into activity records, quarterly summaries and year-end reports for your CPA.
To run your account: signing you in, matching each WhatsApp message to the right person and account, and letting household members on the same account work together.
To talk with you: replying to your messages, sending reminder and invitation emails, and confirming account changes.
To keep a legal record: your agreement signature shows that you accepted our terms and the reports built on them.
To bill: invoicing you, or the partner who pays on your behalf.
To improve our service: fixing bugs, understanding which features are used, and improving how our own AI drafts reports and replies (see "AI processing").
To follow up with leads and partners: answering enquiries, scheduling calls, sending emails you can opt out of, and knowing which partner or campaign introduced you.
To meet legal obligations: responding to lawful requests and keeping records the law requires.

AI processing

We use AI to draft reports, captions and suggested replies, and a person on our team reviews them before they reach you. Your content goes to AI providers to do this, and on our current plan it may be used to train AI models.

What is sent: the text of your messages, your activity descriptions, and attached photos or files.
Who receives it: our hosting provider, Base44, routes these requests to AI model providers. Today those are OpenAI, Google (Gemini) and Anthropic (Claude).
Training: under Base44's terms for our current plan, content processed through its AI features may be used to train or improve AI models. We are looking into options that exclude this, and will update this policy if that changes.
Our own improvement: we keep AI drafts and our team's corrections to them, and use them to improve how our service drafts reports and replies. We do not sell our stored drafts or corrections, or give them to other companies to train their products.
Lead research: for leads who have asked to talk with us, AI may summarize public web pages about you or your business (see "Information we collect").

We may also combine information from many clients into statistics that do not identify you or anyone else, and use them to improve our service.

AI does not make decisions about you that have legal or similarly significant effects. People on our team prepare and review every report.

Who we share information with

We share information only with the service providers that run parts of our service, each receiving what its job needs, and with the people you choose. None of them receives it for advertising. Each may use it only to provide its service to us, under its agreement with us, and must protect it at least as well as this policy describes, except for the AI model training explained in "AI processing".

Service provider	What it receives	Why
Base44	Everything we hold	Hosts the app, its database, file storage and sign-in
AI providers through Base44 (OpenAI, Google, Anthropic)	Message text, activity descriptions, photos and files	Drafting reports, captions and replies
Twilio	Phone numbers, WhatsApp messages and their photos	Sending and receiving WhatsApp messages
WhatsApp (Meta)	The same messages	Carrying WhatsApp messages
Resend	Name, email address and a short notice, never your message text	Reminder, invitation and account emails
Microsoft	Word and Excel files, briefly; copies of records and signed agreements; call bookings	Converting files to PDF; our own backup in Microsoft 365 and SharePoint; scheduling calls through Bookings and Outlook
Stripe	Payment details you enter on Stripe's page	Card payments; Stripe holds the card details, not us
Google or Microsoft sign-in	That you signed in; we receive your name and email	Only if you choose to sign in with Google or Microsoft
ipify	Your IP address	Recording the IP address on your agreement signature
Google Fonts	Your IP address, as for any web page that loads fonts	Showing our typeface

Until the end of 2026, our current website is also run by Wix, which receives everything entered there (forms, client logins, web entries and Wix Payments), and uses a visitor analytics tool to count visits. Records clients log there are copied into the app.

Other people we share with:

People on your account. Household members on the same account see each other's activity, reports and the shared conversation.
The partner who referred you. We tell them that you signed up and your billing status. Some partners offer an optional extra: if you tick the box to opt in when you sign up, we also share your total documented hours for the year with that partner. You can withdraw that at any time by emailing us. We never share your reports, records or messages with a partner.
Your CPA or advisor: we don't send them your reports. You download and share them yourself.
Legal and safety. When the law requires it, such as a subpoena, or to protect our rights, our clients or the public.
A change of ownership. If MakeItDeductible is merged, acquired or sold, your information may transfer to the new owner under this policy's protections.

We do not sell personal information, and we do not share it for cross-context behavioral advertising.

How long we keep information

We keep your tax record for generally 7 years after the last tax year it covers, because the IRS can ask about a return years after it is filed. Other information is kept for shorter periods, then deleted.

Information	How long
Your tax record: reports and their versions, the activity records and evidence they cite, your conversation with us, and your agreement signatures	Generally until December 31 of the seventh year after the last tax year your records cover, even after you close your account
Photos and files never used in a report	Generally 2 years
WhatsApp delivery records	Generally 2 years
Lead and partner information from our websites	As long as we are in contact and for a reasonable period afterwards, then deleted
Billing records	As long as tax and accounting law requires

Why we keep the conversation. Your timestamped messages are a record made at the time of the work, and can help back up a report if your return is ever reviewed. That is why they stay with your tax record.

If you need records kept longer. Losses carried forward, such as those from short-term rentals or real estate professional status, can make older records matter for longer. Ask us to keep yours longer, and download your reports at any time while your account is open.

Your choices

You can see, correct, download and delete your information, and stop our messages, without giving a reason. Email team@makeitdeductible.ai for anything you can't do in the app; we answer within 30 days.

See and download. Your reports and conversation are in the app. Ask us for a copy of everything else we hold about you.

Correct. Update your contact, business and property details on your Account page, or tell us in the chat and we will fix them.

Delete your account. In the app, go to Account, then Data controls, then Delete, and type DELETE. Then:

Your account is scheduled for deletion and you are signed out.
For 30 days, signing in shows only the option to cancel the deletion.
After 30 days we close the account. Your login and contact details are removed from use, WhatsApp messages to the account stop, and we email you a confirmation.
We keep your tax record for the period in "How long we keep information", then delete it.

If you also want your tax record deleted now, ask us in writing at team@makeitdeductible.ai. We will delete it, except anything the law requires us to keep. Before you ask, download your reports: once deleted, we cannot recover them for you or your CPA.

Household members. If you leave an account someone else owns, only your login is removed; the account's records stay with its owner.

Stop messages.

WhatsApp: we only message people who have messaged us first. Tell us in the chat to stop, or block our number.
Reminder emails: turn them off on your Account page.
Marketing emails: use the unsubscribe link in any email. We act on it within 10 business days.

We will not treat you differently for using any of these choices.

Security

Your information is encrypted in transit and at rest, and only you, the people on your account and our team can open your records in the app. No system is perfectly secure, and we cannot promise that information will never be lost or accessed without permission.

Data travels over encrypted connections (TLS 1.2 or higher) and is stored encrypted (AES-256). Our hosting provider holds a SOC 2 Type II report.
Access rules on our database limit each client to their own account. Partners have no access to the app.
Only MakeItDeductible team members who do the documentation work can see client records.
Photos and files are stored at long, random web addresses that are designed to be very hard to guess. Today, anyone who has a file's link can open that file without signing in, so please don't forward those links. We are moving files behind sign-in.

If a breach affects your personal information, we will tell you as the law requires.

Where your information is processed

Your information is stored in the United States, and our team reads it from the United States and India. Our hosting provider stores the app's data, files and accounts in the US. Members of our documentation team who work from India access client records to prepare your reports, under the same rules as our US team. Some of our service providers may process information in other countries under their own safeguards.

Our service is meant for people in the United States.

Cookies and tracking

We do not use advertising cookies or ad pixels. The app and onboarding.makeitdeductible.ai use your browser's own storage, not cookies, to keep you signed in, save unsent chat drafts, and remember which partner link or campaign brought you. Until the end of 2026, www.makeitdeductible.ai runs on Wix, which sets cookies it needs to run the site and its client login, and uses a visitor analytics tool to count visits. Our hosting provider records basic usage, such as pages visited, so we can see which features are used.

Do Not Track. Some browsers send a "Do Not Track" signal. Our websites and app do not currently respond to it; because we don't track you across other sites, the signal would not change what we collect.

Children

Our service is for adults managing a business. We do not knowingly collect information from anyone under 18. If you think a child has given us information, email us and we will delete it.

California residents

Under California's Online Privacy Protection Act, this policy lists what we collect, who receives it, how you can review and correct it, and how we respond to Do Not Track. You can ask us what we hold and ask us to correct or delete it by emailing team@makeitdeductible.ai.

Changes to this policy

When we change this policy, we update the effective date at the top. If a change materially affects how we use information we already hold, we will tell clients by email and in the app before it takes effect.

Contact us

Questions or requests about your privacy:

ProofPack Inc. (MakeItDeductible), based in Atlanta, Georgia
Email: team@makeitdeductible.ai