Privacy Policy

Who We Are

TaxProtestTx is a product of Nought Labs LLC ("we," "us," or "our"), a Texas limited liability company. TaxProtestTx is a document preparation service that compiles property tax data and generates protest forms. This policy describes how we collect, use, and protect your information.

Information We Collect

Account Information (you provide)

• Email address — required for account creation and transactional emails
• Name — used to pre-fill protest forms
• Phone number (optional) — used to pre-fill protest forms
• Mailing address (optional) — used to pre-fill protest forms
• Password — stored as a one-way hash (we cannot see your password)

Property Information (from public records)

• Property address you search
• County appraisal data — appraised values, property characteristics, tax records (public data from your county's appraisal district, e.g., MCAD, HCAD, DCAD, TCAD)
• Comparable property data — values and characteristics of similar properties in your area (public data)
• MLS sold data — recent sale prices from public listing records
• FEMA flood zone data — flood risk classification (public data)

Technical Information (collected automatically)

• IP address — used for security (device verification, rate limiting) and approximate geographic location
• Browser and device information — user agent string, viewport size, device type (desktop/mobile)
• Pages visited — which pages you view, how long you spend, scroll depth
• Interaction data — mouse movement, click locations, touch gestures, and element interactions on our pages. Used to improve page design and identify usability issues. This data is behavioral (how you interact with the page) and is not a biometric identifier. We do not share this data with third parties.
• Referrer URL — how you found us
• Country — derived from IP address via Cloudflare

Payment Information

• Stripe session and payment intent IDs — to track your purchase status
• We never see or store your credit card number. All payment processing is handled by Stripe.

Email Captures

• If you enter your email on the results page, we store it with the property address and estimated savings to send you filing deadline reminders.

How We Use Your Information

• Generate your protest packet — compile property data into evidence reports and pre-fill forms
• Process payments — via Stripe
• Send transactional emails — account verification, password reset, purchase confirmation, device verification
• Security — detect unauthorized access, verify devices, rate limit requests
• Improve the service — understand usage patterns, fix bugs, improve data quality
• Filing deadline reminders — if you opted in via email capture

We do not sell, rent, or share your personal information with data brokers or advertisers.

TaxWatch Annual Monitoring

If you've enrolled in TaxWatch — our annual property-monitoring service — we use your account data and the property records associated with your protest packet purchase to generate a once-a-year data update.

What we use

• Property identifier (the appraisal-district account number from your purchased report)
• Property address
• Account email and name (for sending the annual email and the unsubscribe / cancellation links)
• Public county data — same sources as the protest packet (appraised values, comparable property data)

How we use it

• Once a year, during the Texas appraisal-notice window (April–May), we re-run the comparable-property analysis for your subscribed property and email you one summary.
• One email per property per year. No additional promotional messages, no upsell drip campaigns, no third-party marketing.
• The email is presented as a data update — we don't recommend whether to protest, we don't act as your representative.

Opt-in and opt-out

• Past customers granted a free first year receive a one-time transactional welcome email and must click the enrollment link before any recurring annual emails are sent. If you don't click, we send nothing further for that property.
• Paid subscribers opt in by completing Stripe checkout for the $10/year subscription.
• Every recurring TaxWatch email contains a one-click unsubscribe link. Clicking it cancels your subscription immediately and stops further emails.
• You can also cancel any time by emailing support@taxprotesttx.com.

Retention

• Subscription records are retained while the subscription is active and for one year after cancellation, then deleted on request.
• Property data (appraised values, comp results, snapshots) is retained as long as the subscription is active so we can generate year-over-year comparisons.
• Email send logs (timestamps and outcome only — not body contents) are retained for 90 days for deliverability monitoring.

Third-Party Services

We share only what's necessary for each service to function:

Data Storage & Security

• Account and report data is stored in Cloudflare D1 (encrypted at rest)
• Property data cache is stored in a separate Cloudflare D1 database
• Passwords are hashed with bcrypt (one-way — we cannot retrieve your password)
• All connections are encrypted via HTTPS/TLS
• Session cookies are HTTP-only, secure, and SameSite=Lax
• We do not store generated PDFs — they are created on-demand and delivered to you

Data Retention

• Account data — retained until you request deletion
• Report data — retained so you can regenerate documents
• Property cache — public property data cached for 7-30 days, then automatically deleted
• Request logs — IP, user agent, and page visit logs retained for 90 days
• Analytics events — page view and interaction data retained for 90 days
• Payment records — Stripe session IDs, payment timestamps, and consent records retained for 7 years for tax and legal compliance

Cookies

• Session cookie — essential, keeps you logged in. HTTP-only, secure.
• CSRF token — essential, prevents cross-site request forgery.
• Cloudflare Turnstile — bot detection. Set by Cloudflare.

We do not use third-party advertising or tracking cookies.

Do Not Track

We do not currently respond to "Do Not Track" browser signals. Our analytics tracking (page views, scroll depth, interaction data) operates the same regardless of DNT settings.

Your Rights

• Access — request a copy of the data we hold about you
• Correction — update your account information at any time
• Deletion — request deletion of your account and associated data
• Data portability — request your data in a standard format

We do not sell or share your personal information as those terms are defined under the California Consumer Privacy Act (CCPA). We will not discriminate against you for exercising any privacy rights.

To exercise any of these rights, email support@taxprotesttx.com. We will respond within 30 days.

Data Breach Notification

In the unlikely event of a data breach affecting your personal information, we will notify affected users by email within 60 days as required by Texas law (Tex. Bus. & Com. Code 521.053).

Children's Privacy

This service is not directed at anyone under 18. We do not knowingly collect information from children.

Changes to This Policy

We may update this policy from time to time. Material changes will be posted on this page with an updated date. Continued use of the service after changes constitutes acceptance.

Contact

Questions about this policy:

Nought Labs LLC d/b/a TaxProtestTx
c/o Northwest Registered Agent, LLC
5900 Balcones Drive, STE 100
Austin, TX 78731
Phone: (281) 766-4527
Email: support@taxprotesttx.com