Your clients’ tax documents and the data extracted from them stay inside your firm’s own environment.
Effective date: August 1, 2026 Last updated: August 1, 2026
Sophicor ("Sophicor," "we," "us," or "our") builds private-cloud tax-automation software for accounting and tax firms. This Privacy Policy explains what information we collect through our website (www.sophicor.com) and our software, how we use it, and the choices you have. It is written to be read plainly.
The single most important thing to understand about Sophicor is this: your clients' tax documents and the data extracted from them stay inside your firm's own environment. We designed the product so that sensitive taxpayer information does not need to leave the cloud you already control. The sections below explain exactly what that means.
This policy does not govern how your firm handles its own clients' information — your firm remains responsible for that under its own agreements, its Written Information Security Plan, and applicable law (including IRC §7216 and Treasury Circular 230). Where Sophicor processes taxpayer information, it does so on your firm's behalf and under your firm's direction (see Section 4).
We separate information into two categories, and we treat them very differently.
A. Account & website information (Sophicor may collect and hold this). This is ordinary business information such as:
B. Client / taxpayer information (stays in your firm's environment). When your firm uses Sophicor, the tax documents you upload (W-2s, 1099s, statements) and the data Sophia AI extracts from them are processed inside your firm's own Google Workspace / cloud environment. As a matter of design:
Any limited, temporary processing required to make the software work happens within your environment or is transient and not retained by Sophicor beyond what is necessary to deliver the feature you requested.
We use the information in category (A) to:
We do not sell your personal information, and we do not use it for third-party advertising.
For the account & website information in category (A), Sophicor acts as the controller — we decide how it's used, within this policy.
For the client / taxpayer information in category (B), your firm is the controller and Sophicor acts as a service provider / processor — we handle that information only to provide the service, under your firm's instructions, and consistent with the permissible-use framework for tax return information (including IRC §7216 and its regulations). We will make a Data Processing Agreement available to Customers who need one.
A note on the software versus the data. Sophicor's software runs inside your firm's own Google Workspace / cloud environment, but running it there does not transfer the software to you. The data in your Workspace is yours; the Sophicor software, Sophia AI models, and methods that operate on it remain Sophicor's intellectual property, licensed to you for use. This policy governs how data is handled; software ownership and your license to use it are addressed in our Terms of Service.
We share information only in these limited situations:
The tax software your firm chooses is selected and controlled by your firm — it is not a Sophicor subprocessor; Sophicor moves verified data into it only at your direction. If we ever add other providers (for example, website analytics, email delivery, or payment processing), we will update this list. - Legal and safety reasons — if required by law, subpoena, or to protect rights, safety, and the integrity of our service. - Business transfers — if Sophicor is involved in a merger, acquisition, or sale of assets, information may transfer as part of that transaction; we will honor the commitments in this policy.
We do not sell personal information, and we do not share client/taxpayer data with third parties for their own purposes.
We take security seriously because our entire product is built around it.
No system is perfectly secure, but our architecture is designed to keep the most sensitive data under your control. See our WISP for detail.
We keep account & website information only as long as needed to provide the service, meet legal and accounting obligations, and resolve disputes; then we delete or anonymize it. Because client/taxpayer data stays in your firm's environment, your firm controls its retention and deletion under your own policies. When you close your Sophicor account, we will delete or de-identify account information we hold, subject to legal record-keeping requirements.
Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal information, and to opt out of certain uses. This includes rights under the California Consumer Privacy Act (CCPA/CPRA) and, for visitors in the EU/UK, the GDPR.
Our website uses cookies and similar technologies to make the site work and to understand aggregate usage. You can control cookies through your browser settings. If we adopt a specific analytics provider, we will identify it here.
Sophicor is a business tool intended for tax and accounting professionals. It is not directed to children, and we do not knowingly collect personal information from anyone under 16.
Sophicor is operated from the United States, and information is processed and stored in the United States. If you access the site from outside the U.S., you understand your information will be handled in the U.S.
We may update this policy as our product and the law evolve. We will post the new version here with an updated "Last updated" date, and for material changes we will provide a more prominent notice.
Questions about this policy or your information:
Sophicor — Attn: Privacy Phoenix, Arizona, USA Email: support@sophicor.com Web: www.sophicor.com
Founder: Yatin Miglani, EA. Sophicor is private-cloud tax automation built by a practicing Enrolled Agent.