Privacy Policy

KKATC is a sole proprietorship owned and operated by Konstantin Koretskiy, located at 1375 Coney Island Ave PMB 1089, Brooklyn, NY 11230. We operate kkatc.com and associated AI tools including KKATC Tax, KKATC Tax Foundation, KKATC Audit, KKATC Copy, and KKATC Content.

We collect the following categories of information:

• Email addresses voluntarily submitted through waitlist, subscription, or contact forms
• Questions and prompts submitted to our AI tools
• IP addresses for rate limiting and abuse prevention purposes
• State and county selections made within KKATC Tax (e.g., New York, New Jersey, Connecticut, Pennsylvania, Massachusetts, Maryland, Virginia, Rhode Island, Vermont, and Maine) for routing purposes
• Organization type selection (Public Charity or Private Foundation) made within KKATC Tax Foundation for routing purposes
• Usage data including pages visited, time on site, and referral sources via Vercel Analytics
• Payment information processed by Stripe (we do not store payment card details)
• Audit log data: questions submitted to KKATC Tax, KKATC Tax Foundation, and KKATC Audit, and truncated answer previews, retained for internal quality assurance and accuracy monitoring (see Section 6)
• KKATC Cards user data: card inventory, sales log, expense records, and grading submission batches entered by authenticated users, stored in Upstash Redis under the cards:{email}:* namespace and retained until the user requests deletion or their subscription lapses

Except as described for KKATC Cards below (Section 4B), our AI question-and-answer tools do not collect sensitive personal information such as Social Security numbers, financial account details, EIN or tax identification numbers, organization EINs, or government-issued ID numbers, and you should not submit such information in any AI prompt. KKATC Cards is a structured tax-preparation application: it does collect an entity EIN and, optionally, owner Social Security numbers, which are encrypted at rest as described in Section 4B.

We use collected information to:

• Provide and operate our Services
• Enforce usage limits and prevent abuse
• Monitor answer quality and accuracy through internal audit logging for KKATC Tax, KKATC Tax Foundation, and KKATC Audit
• Send transactional emails related to your use of our Services
• Respond to inquiries submitted to contact@kkatc.com, support@kkatc.com, or legal@kkatc.com
• Analyze aggregate usage patterns to improve our Services
• Comply with legal obligations

We do not sell your personal information to third parties. We do not use your information for targeted advertising. KKATC products are ad-free.

Our AI question-and-answer tools do not accept, process, or store personally identifiable information. Questions containing Social Security numbers, EINs, account numbers, routing numbers, credit card numbers, dates of birth, passport numbers, or driver's license numbers are rejected before reaching our AI systems. Any flagged content metadata is auto-deleted within 24 hours via Redis TTL. Raw question content is never stored under any circumstance.

This zero-PII architecture governs the AI Q&A tools: KKATC Tax, KKATC Tax Foundation, KKATC Audit, KKATC Copy, and KKATC Content. Do not submit personal financial data in any AI prompt; if a question is flagged, you receive an immediate rejection with instructions to rephrase without personal details. It does NOT describe KKATC Cards, a structured tax-preparation application that deliberately collects and encrypts certain tax-identification information — see Section 4B for the data practices that apply to KKATC Cards.

Questions and prompts you submit to our AI tools (KKATC Tax, KKATC Tax Foundation, KKATC Copy, KKATC Content, and others) are processed by Anthropic's Claude API. By using our AI tools, you acknowledge that your inputs are transmitted to Anthropic for processing in accordance with Anthropic's privacy policy (anthropic.com/privacy).

Do not submit personally identifiable information, Social Security numbers, employer identification numbers, financial account numbers, tax identification numbers, organization names or EINs, donor information, beneficiary information, or other sensitive personal, organizational, or financial data in your prompts. Our AI tools are designed for general educational use and do not require sensitive personal or organizational data to function. KKATC is not responsible for any sensitive information you voluntarily include in a prompt. (This section concerns free-text AI prompts. Information you enter into the structured fields of the KKATC Cards application — including an entity EIN and optional owner SSNs — is handled under Section 4B, not this section.)

When you book a consultation through our Calendly integration, your name and email address are shared with Calendly (calendly.com) and Stripe (stripe.com) for scheduling and payment processing. KKATC does not store consultation booking data beyond what is necessary for service delivery. Consultation session content is not recorded or stored.

KKATC Cards is a structured tax-preparation application for trading-card resellers. Unlike our AI question-and-answer tools, it deliberately collects and stores certain financial and tax-identification information to prepare Schedule C, Schedule E, and Schedule K-1 workpapers. The practices in this Section 4B are specific to KKATC Cards and control over any general statement elsewhere in this policy.

What we collect

• Name and email address for your account
• Financial records: card purchases, sales, cost basis, and business expenses you enter
• Entity information: business name and Employer Identification Number (EIN), encrypted with AES-256-GCM at rest
• Owner and partner information for multi-owner entities: name, ownership percentage, state of residence, and — only if you choose to provide it — Social Security number, encrypted with AES-256-GCM at rest
• eBay OAuth access and refresh tokens, if you connect an eBay account, stored in our encrypted database and scoped to your account only. These tokens are retained until you disconnect your eBay account or delete your KKATC Cards account. You can disconnect at any time from the eBay tab.
• Payment information processed by Stripe; KKATC never sees or stores your payment card numbers

How we protect it

• EIN and SSN values are encrypted with AES-256-GCM before they are written to storage; the plaintext is never persisted
• Plaintext PII is never written to application logs or error messages
• eBay tokens are stored per user and are never shared across accounts
• All data is transmitted over HTTPS

Your rights

• You may request deletion of your account and all associated KKATC Cards data at any time
• For privacy requests, contact privacy@kkatc.com

What we do not do

• We never sell your financial data to third parties
• We never use your tax records for advertising

We use the following third-party services to operate our platform:

• Anthropic — AI processing for tool outputs (anthropic.com/privacy)
• Vercel — hosting, deployment, and analytics (vercel.com/legal/privacy-policy)
• Stripe — payment processing for subscriptions (stripe.com/privacy)
• Upstash Redis — rate limiting, ban enforcement, subscription management, and audit log storage (upstash.com/privacy)
• Resend — transactional email delivery (resend.com/privacy)
• ImprovMX — email forwarding (improvmx.com/privacy)

Each third-party service operates under its own privacy policy. We encourage you to review those policies. We are not responsible for the privacy practices of third-party services.

We retain data as follows:

• Email addresses submitted through waitlist or contact forms — retained until you request deletion
• Questions and answer previews logged through our internal audit system (KKATC Tax, KKATC Tax Foundation, and KKATC Audit) — retained for 7 days on a rolling basis in Upstash Redis; KKATC Audit logs are stored under the audit:log Redis key; cumulative usage totals are tracked under counter:au:total (retained indefinitely, non-identifying aggregate count only)
• KKATC Cards user data (cards:{email}:inventory, cards:{email}:sales, cards:{email}:expenses, cards:{email}:submissions) — retained until deletion request; session tokens (session:cards:{token}) expire after 24 hours
• Your financial data is backed up daily to secure storage. Backups are retained for 30 days and are used only for disaster recovery.
• IP-based rate limit data — retained for 25 hours on a rolling basis
• IP-based ban records — retained indefinitely for abuse prevention
• Analytics data — retained as determined by Vercel's data retention policies
• Payment records — retained by Stripe in accordance with their data retention policies

Depending on your jurisdiction, you may have the right to:

• Request access to personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your information
• Opt out of marketing communications

To exercise these rights, contact legal@kkatc.com. We will respond within 30 days.

California residents may have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected, the right to delete personal information, and the right to opt out of the sale of personal information. KKATC does not sell personal information. To exercise CCPA rights, contact legal@kkatc.com.

KKATC is a New York business and complies with the New York SHIELD Act. In the event of a data breach affecting the private information of New York residents, KKATC will provide notice to affected individuals and, where required, to the New York Attorney General, in accordance with the SHIELD Act's notification requirements.

Our site uses minimal tracking. Vercel Analytics collects anonymized usage data without personally identifiable information. We do not use advertising cookies or third-party tracking pixels. We do not serve advertisements.

Our Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected information from a minor, contact legal@kkatc.com immediately and we will take prompt steps to delete such information.

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last Updated" date at the top of this page. Continued use of our Services after changes constitutes acceptance of the revised policy.

For privacy-related inquiries or to exercise your rights:

KKATC · Konstantin Koretskiy
1375 Coney Island Ave PMB 1089
Brooklyn, NY 11230
legal@kkatc.com