Privacy Policy

1. Scope

This Privacy Policy explains how Celestite LLC, a Texas limited liability company, together with its affiliates, managers, members, officers, employees, contractors, agents, vendors, service providers, successors, and assigns (collectively, the Company) collects, uses, stores, discloses, transfers, and otherwise processes information when you visit the OK Tax website, purchase a plan, receive fulfillment artifacts, contact support, or use related APIs, delivery flows, and operational systems.

This Privacy Policy applies to the website and related commercial, support, security, and operational systems controlled by the Company. It does not apply to third-party sites, services, or products except as expressly described here, and it does not govern files that remain only in your own local environment unless and until those files, documents, extracts, or logs are submitted to the Company or its processors.

2. Product architecture matters

The Service includes website operations, checkout, fulfillment, downloadable package delivery, support communications, credential issuance, and a shared OCR and PDF-processing backend operated directly or indirectly by the Company. As a result, some information necessarily passes through Company systems or service providers even if other portions of your workflow run locally.

The Company does not represent or guarantee that all information will remain solely on your machine. If you purchase, download, contact support, use the backend, submit documents, or interact with operational routes, the Company and its processors may receive, store, analyze, transmit, or log the related information for the purposes described in this Privacy Policy.

3. Information we collect

The Company may collect identifiers and contact information such as your name, email address, billing identifiers, country, organization, and any business or workflow context you choose to provide. The Company may collect transaction and fulfillment information such as plan selection, checkout status, payment status, order records, support history, download token state, issuance state, quotas, refunds, disputes, and chargeback information.

The Company may collect technical, device, and usage data such as IP address, approximate geolocation inferred from IP, browser type, device metadata, timestamps, request headers, referrers, download events, API usage metrics, error logs, authentication events, and security telemetry. If you contact support or use the OCR and PDF-processing backend, the Company may also receive documents, images, text extracts, logs, artifacts, payloads, prompts, metadata, and related content that you choose to submit or that are generated through processing.

4. Sensitive data and tax data

You should assume that documents, payloads, extracts, screenshots, support materials, and backend submissions may contain sensitive financial, tax, identity, or other personal information. Do not send more information than is reasonably necessary for your intended use of the Service or your support request.

The Company does not invite unrestricted submission of highly sensitive personal information through informal or unsecured channels. If you nonetheless submit sensitive information to the Company or through the Service, you authorize the Company and its processors to receive, host, store, analyze, transmit, log, and otherwise process that information as reasonably necessary to operate, secure, troubleshoot, support, improve, and enforce the Service, subject to this Privacy Policy and applicable law.

5. How we use information

The Company may use information to operate, maintain, secure, monitor, support, troubleshoot, improve, and enforce the Service; process payments; fulfill purchases; issue, inspect, rotate, or revoke credentials; enforce quotas and commercial limits; provide downloads; respond to support requests; detect and investigate failures; prevent abuse; maintain business and accounting records; and comply with legal obligations.

The Company may also use information to analyze performance and usage; improve prompts, packaging, routing, documentation, features, and support workflows; investigate fraud, misuse, chargebacks, and disputes; establish, exercise, or defend legal claims; and protect the rights, property, safety, systems, infrastructure, and personnel of the Company and others.

6. How we disclose information

The Company may disclose information to service providers, vendors, contractors, infrastructure partners, and professional advisors that support the Service, including payment processors, hosting providers, storage providers, communications providers, observability vendors, analytics vendors, fraud-prevention vendors, OCR and document-processing vendors, legal counsel, accountants, insurers, and auditors.

The Company may disclose information if it believes disclosure is necessary or appropriate to comply with law, respond to subpoenas, court orders, or legal process, enforce contractual rights, collect amounts owed, investigate security incidents, detect or prevent fraud, abuse, illegal activity, or harm, protect any person, or evaluate or complete a financing, restructuring, merger, acquisition, sale of assets, bankruptcy, or similar corporate transaction.

7. No guarantee of absolute security or confidentiality

The Company uses administrative, technical, and organizational measures intended to protect information, but no method of transmission, storage, processing, or security control is completely secure, resilient, or error-free. The Company does not guarantee perfect security, absolute confidentiality, uninterrupted availability, successful incident prevention, or that unauthorized access, misuse, corruption, exfiltration, loss, destruction, or disclosure will never occur.

To the maximum extent permitted by law, you acknowledge and accept these risks as part of using the Service. Except to the extent prohibited by non-waivable law, your sole and exclusive remedy for dissatisfaction with the Company’s privacy or security practices is to stop using the Service.

8. Retention

The Company retains information for as long as reasonably necessary for the purposes described in this Privacy Policy, including fulfillment, support, troubleshooting, analytics, security, fraud prevention, legal compliance, tax and accounting recordkeeping, dispute resolution, contract enforcement, and backup or continuity needs. Retention periods may vary by data type, legal obligation, security need, abuse-prevention need, and operational necessity.

9. International processing

Information may be stored, transferred, and processed in the United States and in other jurisdictions where the Company, its affiliates, or its service providers operate. By using the Service, you authorize the transfer, storage, and processing of your information in jurisdictions that may have different data protection, privacy, or surveillance laws from those in your home jurisdiction.

10. Your choices

You may choose not to provide certain information, but doing so may prevent checkout, fulfillment, credential issuance, support, backend processing, fraud review, or other Service functions. You may contact the Company to request access, correction, or deletion where applicable law provides such rights, but the Company may retain information to the extent permitted or required for legal, security, fraud-prevention, backup, accounting, contractual, evidentiary, or operational reasons.

11. Children

The Service is not directed to children under 18, and the Company does not knowingly market the Service to children. If you believe a child provided personal information to the Company, contact the Company so the matter can be reviewed and appropriate action can be taken.

12. Changes to this policy

The Company may update this Privacy Policy from time to time by posting an updated version on the website. The updated policy becomes effective on the posted effective date unless another date is stated. Your continued access to or use of the Service after the effective date constitutes acceptance of the updated policy.

13. Contact

For privacy questions or requests, contact the Company through the support address listed on this website.