Privacy, in plain English
What VALID keeps, and what it never does
Last updated October 11, 2026.
Your tax questions
Ask VALID and the write-off map run entirely inside your browser. Your question is never sent to us or anyone else, and nothing is stored. The page is built so that it cannot send your question anywhere, even by mistake.
Two firm tools remember a little on your own computer, and nowhere else: the Client Desk keeps your recent questions so you can open them again, and the Notice Desk keeps a count of notices handled. Both live only in this browser, are never sent to us, and the Client Desk's Clear button removes them.
Firm accounts
CPA firms can sign in with a one-time email link. For a signed-in person VALID keeps: the email used to sign in; the name, firm name, role, firm size and state they type; their thumbs-up or “a CPA would change this” rating of an answer, stored with the answer’s heading; and a count of how many times they used the Client Desk each day. Supabase, a database service, holds this for us. VALID never keeps your clients’ questions or the drafts: those stay in your browser.
We use it to run your account and to measure how accurate and useful VALID is. We do not sell it, rent it, or use it to train AI. Signed in, you can delete your account and everything kept with it from the sign-in page at any time.
To keep you signed in, your browser holds a sign-in token in its own storage. Signing out removes it.
The Chrome side panel
The VALID side panel for Chrome runs the same tools inside your browser and collects nothing. It asks Chrome for one permission, to open in the side panel. It cannot read or change the page next to it, has no access to your email or tax software, and cannot send anything to us or anyone else. Links in it open this website in a new tab.
The sign-up forms
If you join early access, join the list for your country, ask for the AI Tax Exam results, sign up to grade the exam, ask for the client email kit, or apply as a CPA firm, we keep only what you type into that form: your email; on the country list, your country and whether you file taxes, work as a tax pro or own a firm; for exam graders your name, credential and, if you give it, your firm; and for firms your name, firm name, role, firm size, and a short firm profile. With an early-access sign-up we also keep which page you joined from, a random six-character invite code made for you, and the invite code of the link you arrived on, if any, so we can tell who brought whom. That code sits in your browser tab only until the tab closes; it is not a cookie and nothing reads it but our own sign-up form. A claim you paste into "Is that VALID?" never leaves your browser. Our website host, Netlify, receives the form for us. Like any web host, Netlify also records technical details with each sign-up and in its server logs, such as your IP address and browser type, and uses them to keep the site secure and filter spam. We use what you send only to contact you about VALID. We do not sell it, rent it, share it for advertising, or use it to train AI.
What we never ask for
No Social Security numbers, ITINs, bank details, tax returns, or tax documents. The forms refuse identifiers if you type them. No analytics, no advertising trackers, no third-party scripts, and no cookies.
Children
VALID is not meant for children under 13, and we do not knowingly collect anything from them. If you think a child under 13 has signed up, tell us and we will delete it.
Getting off the list
Every email we send has an unsubscribe link. Reply to any email from us and ask, and we will tell you what we hold about you, correct it, or delete it. Firm accounts can also be deleted from the sign-in page.
We keep a sign-up until you ask us to delete it or VALID no longer needs it to contact you.
Changes to this page
If what VALID keeps changes, this page changes first and the date at the top moves. VALID is operated by Crown Legacy AI LLC in Tampa, Florida. See also the terms of use.