Privacy

We collect as close to nothing as we can get away with. No cookies, no analytics, no ad pixels, no fingerprinting. Your tax facts are computed and returned — never stored. The only personal data we ever hold is an email address you explicitly gave us, and you can delete it with one message.

The site sets no cookies and loads no third-party analytics or trackers. Your light/dark preference is kept in your browser's local storage and never leaves it. Our hosting provider (Vercel) keeps standard, short-lived request logs — as every host does.

If you sign up for updates (on the site, or via opentax signup), we store exactly three things: your email address, when you signed up, and where the signup came from (site or CLI). Signup is double opt-in — the confirmation link expires in 48 hours, and if you never confirm, you are never emailed. Application logs record a one-way hash of the address, not the address itself.

We never sell, share, or enrich the list. Unsubscribe or request deletion any time: founders@invaro.ai — everything tied to your address is removed.

The published CLI and MCP server send one anonymous usage ping: an event name ("cli", "mcp-stdio", or "mcp-http"), the package version, the operating system name, and the Node major version. Nothing else — no arguments, no tax data, no identifiers, no IP retention. The first run prints a notice saying exactly this.

Opt out with OPENTAX_TELEMETRY=0 or DO_NOT_TRACK=1.

The hosted MCP endpoint (opentax.invaro.ai/mcp) is stateless: the tax facts in your request are computed in memory and the answer is returned — they are not stored, logged, or used for anything else. For usage metering we record only the JSON-RPC method name, the tool name, the connecting client's self-reported name and version, and a timestamp. IP addresses are used transiently in memory for rate limiting and are not written to our storage.

Don't want to trust that? The engine is AGPL — run npx -y @invaro/opentax locally or self-host the HTTP server, and nothing touches our infrastructure at all.

founders@invaro.ai — a human reads it.