Privacy Policy

Effective: July 14, 2026
Provider: Digent LLC
Product: AirGapTax

The short version

AirGapTax performs tax computation and stores workspace files on your device by default. The product does not include telemetry or analytics. Some optional features use the network: local Ollama uses your loopback interface, and opt-in Groq sends chat text and a summarized tax context to Groq. The beta website is static, and payments and public downloads are currently disabled.

1. Desktop data kept on your device

Your return workspace, imported documents, calculated values, and generated draft files are stored on your device unless you deliberately export or transmit them. Tax computation itself does not require sending a return to Digent LLC.

The desktop product does not include product telemetry, behavioral analytics, or automatic crash-report uploads. Hosting providers and your operating system may still create ordinary network or system logs when you use network-enabled features.

2. Optional AI behavior

• Built-in deterministic help runs locally without a model service.
• Ollama is optional and restricted to HTTP loopback on port 11434. The text you enter and summarized tax context are sent to the Ollama process on your computer.
• Groq is optional and disabled until you configure and enable it. When used, the text you enter plus summarized context — tax year, filing status, AGI, total tax, and refund or balance due — are sent to Groq's fixed HTTPS endpoint.
• Custom AI endpoints are currently disabled.

Remote requests are screened for SSN-, EIN-, and ITIN-like identifiers, but automated screening is not a guarantee of anonymization. Review the message and Groq's terms before sending tax-related content.

3. License activation

Current licenses are signed files or codes checked locally by the desktop app. The app does not call a Digent LLC activation service to count devices. A local machine identifier may be used on your device, but the current flow does not transmit a device fingerprint or activation count to Digent LLC.

Because validation is offline, changing or deleting a server record does not remotely invalidate a signed license that was already delivered. The website and terms therefore do not promise server-enforced device counts or deletion-based revocation.

4. Website and beta waitlist

The public website is a static site hosted through Cloudflare. It does not load third-party runtime scripts, analytics, advertising pixels, or social trackers. The site does not set a first-party analytics cookie.

Hosting infrastructure can process standard request information such as IP address, user agent, requested path, timestamp, and security events. If you click a waitlist link, your email application opens a draft message. Digent LLC receives the address and message content only if you choose to send that email.

5. Payments are disabled during beta

No payment or public-license checkout is available while beta mode is active. Client code fails closed and does not treat a payment provider as available when the readiness check fails.

If sales are enabled later, the implemented fulfillment service is designed to store these fields:

• checkout email address;
• canonical license tier;
• generated license key and, when applicable, signed license-file content;
• payment processor transaction or session identifier;
• creation, delivery status, and delivery timestamps; and
• a server-side revoked flag.

The current server record does not contain a device activation count. Full card or bank credentials are handled by the payment processor rather than stored in the AirGapTax license record.

6. Service providers

Infrastructure used by the implemented website and fulfillment path may include Cloudflare for website/CDN services, Fly.io for server hosting, a configured transactional email provider, and Backblaze B2 for release storage. Stripe is the disclosed card processor in the current server configuration. PayPal, Dodo Payments, and BTCPay support exists in code but is not represented as active unless server readiness reports it as configured.

Each provider processes data under its own terms. Payment processors may collect billing details, fraud signals, and transaction records that Digent LLC does not control.

7. Storage and security

The current fulfillment implementation stores license records in a server-side JSON file and uses atomic replacement when updating it. We do not claim that this file has application-level encryption, an encrypted dedicated volume, or automatic daily snapshots because those controls are not established by the website code.

Website and API traffic is intended to use HTTPS. Access and retention also depend on the configured hosting, filesystem, logging, email, and payment-provider controls. No system can guarantee absolute security.

8. Retention, access, correction, and deletion

License and delivery records may be retained to fulfill purchases, provide support, prevent duplicate fulfillment, and meet legal or accounting obligations. Hosting, email, and payment providers retain their own records under their policies.

You may request access, correction, or deletion of personal information Digent LLC controls by emailing [email protected]. Requests are handled subject to identity verification, applicable law, fraud prevention, and recordkeeping duties. Deleting a server record does not technically revoke an offline signed license already in your possession, and Digent LLC cannot delete a processor's records on the processor's behalf.

9. Children and changes

AirGapTax is intended for adults preparing tax information and is not directed to children. This policy may change as the product and commercial infrastructure change. The effective date above will be updated when the policy changes.

10. Contact