When you use Prime Meridian Labs, Inc. dba Prime Meridian’s services (we call ourselves “Prime Meridian,” “we,” or “our”), you trust us with your personal data. Protecting that personal data is core to our mission. This policy explains—in plain language and with concrete examples—what we collect, why we need it, and how you stay in control.

Why we collect personal data

We collect data we need to provide you with our services, which includes assisting you with your self-preparation of your tax returns and, at your request, sharing the information we generate with a third-party tax return provider to file your tax returns.

Example: We ask for your Social Security Number (SSN) because the IRS requires it on your tax return.

Information we receive on registration

Typical items: Name, email, and phone number

Why we need it: Create your account; provide you with services

Information you give us

Typical items: Date of birth, SSN, address, W-2s, 1099s, receipts you upload, chat messages with Prime Meridian’s AI

Why we need it: Prepare your draft return; answer your questions

Information we receive from partners

Typical items: Income documents and brokerage statements from API providers, photo ID from identity-verification vendor

Why we need it: Pull forms automatically to save you time and confirm it’s really you

Information we generate

Typical items: Draft tax returns, tax calculations, information, prompts or suggestions regarding tax forms, credits, deductions, exemptions

Why we need it: Show you your anticipated tax liability and/or potential savings

We also collect other personal data directly from you and, also from third parties to make Prime Meridian work smoothly and keep things secure.

Information we get from elsewhere

Typical items: Your public social media info (like from LinkedIn if you interact with our pages) if platforms share it with us. Data from marketing partners or public sources. Device data: Your computer or phone's operating system, model, browser, screen size, IP address, unique IDs, location (like city/state), and network info.

Why we need it: To understand how you interact with us on public platforms and get insights for improving our service. (We treat this info just like anything else you give us directly.)

Information we collect automatically

Typical items: Online activity data: Which pages you visit, how long you stay, what you click, your Browse history, and access times. Email interaction data: If you open our emails or click links in them (we use tiny, invisible pixels for this).

Why we need it: To make sure Prime Meridian works on your specific device, fix bugs, measure how well our website and app perform, and keep Prime Meridian fast and reliable. This also helps us understand what content is helpful to you in our communications.

Additionally, we and our service providers rely on standard technologies to collect this data, namely we use:

Passive Collection

As is true of most websites, we gather certain information automatically. This information may include Internet protocol (IP) addresses, browser type, Internet service provider (ISP), referring/exit pages, the files viewed on our site (e.g., HTML pages, graphics, etc.), operating system, date/time stamp, and/or clickstream data to analyze trends in the aggregate and administer the site.

Tracking Technologies

Prime Meridian and its partners use cookies or similar technologies to analyze trends, administer the website, track users’ movements around the website, and to gather demographic information about our user base as a whole. You can control the use of cookies at the individual browser level, but if you choose to disable cookies, it may limit your use of certain features or functions on our website or service.

Limit Online Tracking – Further, there are many ways to limit online tracking, which we have summarized below. These tools are not associated with us and we cannot guarantee that they work as their providers advertise them, but we have included this information for your knowledge:

Blocking cookies in your browser. Most browsers let you remove or reject cookies. To do this, follow the instructions in your browser settings. Many browsers accept cookies by default until you change your settings. For more information about cookies, including how to see what cookies have been set on your device and how to manage and delete them, visit https://www.allaboutcookies.org/.

Using privacy plug-ins or browsers. You can block our websites from setting cookies by using a browser with privacy features, like Brave, or installing browser plugins like Privacy Badger, Ghostery, or uBlock Origin, and configuring them to block third party cookies/trackers. You can also opt out of Google Analytics by downloading and installing the browser plug-in available at:https://tools.google.com/dlpage/gaoptout.

Use

We may use this information to:

Fulfill your requests

Generating your tax information and calculations

Send you an email confirmation

Respond to customer service requests

Administer your account

Provide the tax services you requested

Respond to your questions and concerns

We do not sell your personal data to third parties. Period.

We may anonymize and aggregate this data for research and development to analyze and improve Prime Meridian’s return preparation software.

Your personal data may include tax return information as defined by Internal Revenue Code sections 6713 and 7216 and related regulations and guidance. Tax return information is confidential and is generally protected from unauthorized use and disclosure under these statutes. Prime Meridian will not use or disclose your tax return information other than in compliance with these statutes and related regulations and guidance. Under these statutes, Prime Meridian is authorized to use and disclose your tax return information for (1) preparation of your tax return, (2) updating and testing our software, including using independent contractors for this purpose, (3) filing of your returns through a third-party Authorized IRS e-file Provider, as requested by you, and (4) any required record retention purposes.

Finally, we may use any of your personal data to fulfill our obligations under applicable laws, to protect our company and our legal rights and defend ourselves against legal claims or disputes. This means we might use your personal data to comply with valid subpoenas or government requests, protect our rights (and yours, and others'), audit our processes for compliance, enforce our terms, and prevent fraud, cyberattacks, or any other illegal activity.

How we protect your personal data:

We maintain physical, electronic and procedural safeguards that comply with applicable law and federal standards. Your data is encrypted in transit and at rest, and access is limited to trained team members who need it to support you.

When we share personal data (and why):

When it comes to sharing your data with third parties for the purpose of provide you our services, we share your data externally as needed for preparing and filing your taxes:

Trusted service providers – Third-party companies and advisors we rely on to operate Prime Meridian.

Cloud infrastructure & storage (e.g., AWS, GCP) that host our encrypted databases and backups.

We use AI to extract information for tax preparation, including personal information such as SSNs. Providers process this information solely to provide our tax-preparation service, under contractual restrictions and zero-data-retention arrangements. They do not retain your information after processing, and we do not permit model training or unrelated uses.

Tax engine & e-file transmitter that formats your return and sends it to the IRS/state systems.

Identity-verification, e-signature, email, text-message verification, and bot-protection services that help us confirm it’s really you, communicate with you, and deliver signed forms.

With your explicit written direction - for example, if you ask us to pre-fill a mortgage or credit-card application or email your filed return to a lender, we will first obtain your signed consent on an IRS-approved form and then share only the data that lender needs.

Sharing with Service Providers

We may also share your information with third parties who provide services on our behalf to help with our business activities.  These companies are authorized to use your personal information only as necessary to provide these services to us.

These services may include:

Providing cloud computing infrastructure to host our application, securely store customer documents and account information, and process information needed for tax preparation.

All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties except when required by law enforcement and government authorities as required by law or valid legal request.

Your choices & rights:

You have control over your account. Within your account settings or in some cases by contacting us, you can:

Review or download – View or export the data we have on your profile at any time.

Correct – Fix typos or outdated info directly in the app or by emailing us.

Delete – Close your account and request deletion; we erase live data within 30 days except where the law says we must keep it (e.g., IRS record-retention rules).

We send only account and filing-related emails, including account confirmations and updates about your return.

Do Not Track. Some Internet browsers may be configured to send “Do Not Track” signals to the online services that you visit. We currently do not respond to “Do Not Track” or similar signals. To find out more about “Do Not Track,” please visit http://www.allaboutdnt.com.

Legal

In certain situations, We may be required to disclose personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.

We may also disclose your personal information as required by law, such as to comply with a subpoena or other legal process, when we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request. If we are involved in a merger, acquisition, or sale of all or a portion of its assets, you will be notified via email and/or a prominent notice on our website, of any change in ownership, uses of your personal information, and choices you may have regarding your personal information. We may also disclose your personal information to any other third party with your prior consent.

Access

Upon request we will provide you with information about whether we hold any of your personal information. You may access, correct, or request deletion of your personal information by logging into your account or contacting us at help@getprimemeridian.com.  We will respond to your request within a reasonable timeframe.  In certain circumstances we may be required by law to retain your personal information, or may need to retain your personal information in order to continue providing a service.

Data retention:

Where required under applicable laws, we retain personal data only for as long as is necessary to fulfill the purposes for which it was collected and processed, in accordance with our retention policies, and in accordance with applicable laws and regulatory obligations. For example, we keep the records the IRS requires for at least 7 years, unless you ask us to delete sooner and the law allows it. Backup tapes roll off after 35 days.

To figure out how long we keep personal data, we look at things like how much data it is, what kind of data it is, and how sensitive it is. We also consider the risk if someone unauthorized got hold of it, why we need it, and if we can still achieve those goals without keeping it as long.

Children’s privacy:

Prime Meridian is designed for adults. However, generating a U.S. tax return often requires details about your dependents — sometimes children under 13 — such as their name, date of birth, and Social Security Number. We collect this personal data only when you, the parent or legal guardian, provide it to us. We do not knowingly collect information from users under the age of 13. If we learn that we have collected personal data through the website directly from a child under 13 without the consent of the child’s parent or guardian as required by law, we will delete it immediately.

We do not let children create accounts or submit data themselves, and we do not use children’s personal data for marketing or profiling.

Changes to this policy:

We may update this Privacy Policy to reflect changes to our information practices. If we make any material changes we will notify you by email (sent to the e-mail address specified in your account) or by means of a notice on this website prior to the change becoming effective. We encourage you to periodically review this page for the latest information on our privacy practices.

Security

The security of your personal information is important to us.  We follow generally accepted standards to protect the personal information submitted to us, both during transmission and once it is received. If you have any questions about the security of your personal information, you can contact us at help@getprimemeridian.com.

We may retain your information for as long as your account is active or as needed to provide you services, comply with our legal obligations, resolve disputes and enforce our agreements.

How to contact us:

Questions or concerns? We’re here to help. Email: help@getprimemeridian.com

Mail: Prime Meridian Labs, Inc., 1111B South Governors Ave, Dover, DE 19904

If you have an unresolved privacy or data use concern that we have not addressed satisfactorily, please contact our U.S.-based third party dispute resolution provider (free of charge) at https://feedback-form.truste.com/watchdog/request.