Privacy Policy

KKATC is a sole proprietorship owned and operated by Konstantin Koretskiy, located at 1375 Coney Island Ave PMB 1089, Brooklyn, NY 11230. We operate kkatc.com and associated AI tools including KKATC Tax, KKATC Tax Foundation, KKATC Audit, KKATC Copy, and KKATC Content.

We collect the following categories of information:

• Email addresses voluntarily submitted through waitlist, subscription, or contact forms
• Questions and prompts submitted to our AI tools
• IP addresses for rate limiting and abuse prevention purposes
• State and county selections made within KKATC Tax (e.g., New York, New Jersey, Connecticut, Pennsylvania, Massachusetts, and Maryland) for routing purposes
• Organization type selection (Public Charity or Private Foundation) made within KKATC Tax Foundation for routing purposes
• Usage data including pages visited, time on site, and referral sources via Vercel Analytics
• Payment information processed by Stripe (we do not store payment card details)
• Audit log data: questions submitted to KKATC Tax, KKATC Tax Foundation, and KKATC Audit, and truncated answer previews, retained for internal quality assurance and accuracy monitoring (see Section 6)
• KKATC Cards user data: card inventory, sales log, expense records, and grading submission batches entered by authenticated users, stored in Upstash Redis under the cards:{email}:* namespace and retained until the user requests deletion or their subscription lapses

We do not collect sensitive personal information such as Social Security numbers, financial account details, EIN or tax identification numbers, organization EINs, or government-issued ID numbers. Do not submit such information in any prompt or form.

We use collected information to:

• Provide and operate our Services
• Enforce usage limits and prevent abuse
• Monitor answer quality and accuracy through internal audit logging for KKATC Tax, KKATC Tax Foundation, and KKATC Audit
• Send transactional emails related to your use of our Services
• Respond to inquiries submitted to contact@kkatc.com, support@kkatc.com, or legal@kkatc.com
• Analyze aggregate usage patterns to improve our Services
• Comply with legal obligations

We do not sell your personal information to third parties. We do not use your information for targeted advertising. KKATC products are ad-free.

KKATC does not accept, process, or store personally identifiable information. Questions containing Social Security numbers, EINs, account numbers, routing numbers, credit card numbers, dates of birth, passport numbers, or driver's license numbers are rejected before reaching our AI systems. Any flagged content metadata is auto-deleted within 24 hours via Redis TTL. Raw question content is never stored under any circumstance.

This policy is absolute and non-negotiable. It applies to all KKATC tools including KKATC Tax, KKATC Tax Foundation, KKATC Audit, KKATC Copy, and KKATC Content. Do not submit personal financial data in any prompt. If a question is flagged, the user receives an immediate rejection with instructions to rephrase without personal details.

Questions and prompts you submit to our AI tools (KKATC Tax, KKATC Tax Foundation, KKATC Copy, KKATC Content, and others) are processed by Anthropic's Claude API. By using our AI tools, you acknowledge that your inputs are transmitted to Anthropic for processing in accordance with Anthropic's privacy policy (anthropic.com/privacy).

Do not submit personally identifiable information, Social Security numbers, employer identification numbers, financial account numbers, tax identification numbers, organization names or EINs, donor information, beneficiary information, or other sensitive personal, organizational, or financial data in your prompts. Our tools are designed for general educational use and do not require sensitive personal or organizational data to function. KKATC is not responsible for any sensitive information you voluntarily include in a prompt.

When you book a consultation through our Calendly integration, your name and email address are shared with Calendly (calendly.com) and Stripe (stripe.com) for scheduling and payment processing. KKATC does not store consultation booking data beyond what is necessary for service delivery. Consultation session content is not recorded or stored.

We use the following third-party services to operate our platform:

• Anthropic — AI processing for tool outputs (anthropic.com/privacy)
• Vercel — hosting, deployment, and analytics (vercel.com/legal/privacy-policy)
• Stripe — payment processing for subscriptions (stripe.com/privacy)
• Upstash Redis — rate limiting, ban enforcement, subscription management, and audit log storage (upstash.com/privacy)
• Resend — transactional email delivery (resend.com/privacy)
• ImprovMX — email forwarding (improvmx.com/privacy)

Each third-party service operates under its own privacy policy. We encourage you to review those policies. We are not responsible for the privacy practices of third-party services.

We retain data as follows:

• Email addresses submitted through waitlist or contact forms — retained until you request deletion
• Questions and answer previews logged through our internal audit system (KKATC Tax, KKATC Tax Foundation, and KKATC Audit) — retained for 7 days on a rolling basis in Upstash Redis; KKATC Audit logs are stored under the audit:log Redis key; cumulative usage totals are tracked under counter:au:total (retained indefinitely, non-identifying aggregate count only)
• KKATC Cards user data (cards:{email}:inventory, cards:{email}:sales, cards:{email}:expenses, cards:{email}:submissions) — retained until deletion request; session tokens (session:cards:{token}) expire after 24 hours
• IP-based rate limit data — retained for 25 hours on a rolling basis
• IP-based ban records — retained indefinitely for abuse prevention
• Analytics data — retained as determined by Vercel's data retention policies
• Payment records — retained by Stripe in accordance with their data retention policies

Depending on your jurisdiction, you may have the right to:

• Request access to personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your information
• Opt out of marketing communications

To exercise these rights, contact legal@kkatc.com. We will respond within 30 days.

California residents may have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected, the right to delete personal information, and the right to opt out of the sale of personal information. KKATC does not sell personal information. To exercise CCPA rights, contact legal@kkatc.com.

KKATC is a New York business and complies with the New York SHIELD Act. In the event of a data breach affecting the private information of New York residents, KKATC will provide notice to affected individuals and, where required, to the New York Attorney General, in accordance with the SHIELD Act's notification requirements.

Our site uses minimal tracking. Vercel Analytics collects anonymized usage data without personally identifiable information. We do not use advertising cookies or third-party tracking pixels. We do not serve advertisements.

Our Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected information from a minor, contact legal@kkatc.com immediately and we will take prompt steps to delete such information.

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last Updated" date at the top of this page. Continued use of our Services after changes constitutes acceptance of the revised policy.

For privacy-related inquiries or to exercise your rights:

KKATC · Konstantin Koretskiy
1375 Coney Island Ave PMB 1089
Brooklyn, NY 11230
legal@kkatc.com