Privacy Policy — Harbor Tax Solutions
Privacy Policy

How we handle your information.

Harbor Tax Solutions takes the privacy of partner offices and the taxpayers they serve seriously. Below is a plain-language summary of what we collect, how we use it, who we share it with, and the controls available to you.

Last updated: 2026

1. Who this covers

This privacy policy applies to two groups:

  • Partner offices. The tax professionals and businesses who subscribe to Harbor Tax Solutions for software access, support, refund settlement integration, and related services.
  • End clients (taxpayers). The individual taxpayers whose information passes through Harbor's systems when a partner office uses Harbor's software or refund settlement integrations to prepare and process their tax returns.

Different rules apply depending on which group you're in. End-client tax return information is governed by additional legal protections — see Section 5 below.

2. What information we collect

From partner offices

  • Business and contact information (office name, owner name, EFIN, address, phone, email)
  • Account credentials and authentication information
  • Subscription, billing, and payment information
  • Communications with Harbor's Customer Experience team (calls, emails, screen-share sessions)
  • Usage information about how partner offices use Harbor's services (which software is accessed, support tickets, weekly call attendance)
  • Compliance and onboarding information required by the IRS, banking partners, and software vendors

From end clients (taxpayers), through partner offices

When a partner office prepares tax returns or processes refund settlement products using Harbor-integrated systems, end-client information passes through those systems. This may include name, address, Social Security number, income information, tax return data, and refund routing information. Harbor does not directly collect this information from end clients — it flows through the underlying software and refund settlement partners (Refundo, SBTPG) under their privacy frameworks.

From website visitors

  • Information voluntarily submitted (form submissions, calls scheduled, email sign-ups)
  • Standard web analytics (pages visited, time on page, referring source, device type, general location)
  • Cookies and similar technologies (see Section 9)

3. How we use information

Harbor uses information to:

  • Provide software access, support, onboarding, refund settlement integration, and other contracted services
  • Communicate with partner offices about their subscription, support cases, software updates, and operational notices
  • Process payments and manage billing
  • Meet compliance and disclosure obligations under federal and state law
  • Improve Harbor's services, support workflows, and partner experience
  • Detect and prevent fraud, abuse, and security incidents
  • Communicate operational and seasonal information (weekly support calls, software changes, IRS updates relevant to partner offices)

Harbor does not sell partner office or end-client information. Harbor does not use end-client tax return information for marketing.

4. Who we share information with

Harbor shares information only with parties that need it to deliver the services partner offices have subscribed to, or as required by law. Specifically:

Service partners

  • Software vendors — Web 1040, CrossLink, 1040 Online, OLT, and RushTax. Partner office account and licensing information flows to these vendors to provision access. End-client tax return data lives within each vendor's software environment under that vendor's privacy practices.
  • Refund settlement partners — Refundo and SBTPG. When a partner office uses refund settlement products (refund transfers, refund advances), information flows to the chosen settlement partner under that partner's privacy framework and the consents collected at the point of sale.
  • Payment processors — to process subscription payments.
  • Service providers — vendors that help Harbor operate the business (hosting, customer support tooling, business email, analytics). These vendors are bound by contract to handle information only for Harbor's purposes.

Legal disclosures

Harbor may disclose information when required by law, court order, subpoena, or to protect the legal rights, safety, and property of Harbor, partner offices, taxpayers, or the public.

Business changes

If Harbor undergoes a merger, acquisition, or sale of assets, information may be transferred as part of that transaction, subject to applicable notice and consent obligations.

Harbor does not sell partner office or end-client information to third parties. Harbor does not share end-client tax return information for marketing purposes.

5. Tax return information (IRS Section 7216)

Under IRS Section 7216, tax return preparers may not disclose or use tax return information without a taxpayer's written consent, except in specifically permitted circumstances. Harbor and its partner offices comply with Section 7216.

When a partner office uses Harbor-integrated systems to prepare a return or process refund settlement products, the partner office is the tax return preparer with the direct legal relationship to the taxpayer. The partner office is responsible for obtaining any required Section 7216 consents from end clients before any disclosure or use of tax return information beyond what is needed to prepare the return.

Harbor's role is to provide the software access, support, and refund settlement integration that the partner office uses to serve its clients. Harbor does not use tax return information for marketing or for any purpose outside of supporting the contracted services.

6. How we protect information

Harbor maintains administrative, technical, and physical safeguards designed to protect information against unauthorized access, use, alteration, and disclosure. These safeguards are aligned with industry standards for tax-services businesses and with the Federal Trade Commission's Safeguards Rule under the Gramm-Leach-Bliley Act.

Safeguards include:

  • Encrypted connections for data in transit and at rest where applicable
  • Access controls limiting information to staff who need it to do their jobs
  • Multi-factor authentication on sensitive systems
  • Vendor agreements requiring service partners to maintain comparable safeguards
  • Incident response procedures

No system is completely immune to risk. If Harbor becomes aware of a security incident that affects partner office or end-client information, Harbor will notify affected parties as required by law.

7. How long we keep information

Harbor retains information for as long as needed to provide services, meet legal and regulatory obligations, resolve disputes, and enforce agreements. Retention periods vary by data type. Tax-related records are retained in accordance with IRS retention requirements (generally a minimum of three years, longer in specific circumstances). Account and subscription records are retained for the duration of the partner office's relationship with Harbor and for a reasonable period after, consistent with legal obligations.

8. Your rights and choices

Partner offices and (where applicable) end clients have rights regarding information that Harbor holds, including:

  • Access — request a copy of information Harbor holds about you
  • Correction — request that inaccurate information be corrected
  • Deletion — request that information be deleted, subject to legal retention obligations and ongoing service requirements
  • Opt-out of marketing communications — unsubscribe links are included in marketing emails; you can also email or call to opt out
  • Withdraw consent — where Harbor relies on consent to process information, you can withdraw that consent

To exercise any of these rights, contact the Customer Experience team at (888) 343-8023 or through your account contact channel. Some rights are subject to verification and may not apply to all information types (for example, information Harbor is required by law to retain).

9. Cookies and website tracking

Harbor's website uses cookies and similar technologies to make the site work, remember preferences, analyze how the site is used, and (where applicable) measure marketing effectiveness. Most browsers let you control cookies through browser settings. Disabling cookies may affect site functionality.

Harbor does not use third-party tracking that combines website behavior with end-client tax return information.

10. Children's privacy

Harbor's services are intended for tax professionals running independent offices, not for children. Harbor does not knowingly collect information from anyone under the age of 13. End-client tax returns may include information about dependents (including minors) as part of the tax preparation process; that information is handled under the same legal protections as the rest of the return.

11. State-specific privacy rights

Residents of certain U.S. states have additional privacy rights under state law. These typically include the right to know what information is collected, the right to access and correct that information, the right to deletion, and the right to opt out of certain types of data sharing. State-specific rights apply only to residents of those states and are subject to verification.

To exercise a state privacy right, contact Harbor's Customer Experience team. Where required, Harbor will provide additional disclosures specific to your state.

12. Changes to this policy

Harbor reviews this privacy policy regularly and may update it to reflect changes in services, partnerships, or applicable law. The "Last updated" date at the top of this page reflects the most recent change. Material changes will be communicated to partner offices in writing before they take effect.

13. Contact

Questions about this privacy policy, or a request to exercise a privacy right?

  • Phone: (888) 343-8023 (main support line)
  • One-click desktop support (for active partner offices)
  • Schedule a discovery call through the main site