Your information, in your control · Devil Club
Security and how we handle your documents
You trust us with sensitive data: your identity, your entity and your tax documents. Here is what we do with it, in plain language — no jargon and no fine print.
Transparency, not an absolute promise: no system is invulnerable and we won't pretend otherwise. What we do guarantee is a clear posture: keep the minimum, protect it well, and delete it when it's time. Here's how.
🗂️ What we keep — and what we don't
We only ask for and keep what we need to run your LLC and meet your tax obligations. No collecting "just in case".
- Identity and contact: your name, email and the data needed to verify who you are.
- Your entity: the LLC name, state of formation, EIN and formation documents.
- Tax documents: the ones we prepare or hold for your filings (1120, 5472, FBAR and BEA when it applies).
- Nothing extra: we don't ask for information we don't need to serve you.
🔐 How we protect it
We apply industry-standard measures at every layer your information passes through.
- Encrypted in transit: everything you send travels encrypted (HTTPS/TLS) between your device and us.
- Sensitive data encrypted at rest: your personal tax identifiers (SSN/ITIN) and the most delicate credentials are stored encrypted, not in plain text.
- Two-factor access: the admin panel supports two-step verification (2FA); when it is on, every session must pass it — an old session or a stolen cookie is not enough.
- Least privilege: each person sees only what their role needs; not everyone can see everything.
🗓️ How long we keep it — and how it's deleted
We keep your documents only as long as needed: tax records under the retention policy below; everything else, on shorter timelines.
- Tax records, 7 years: this is our retention policy, not a legal mandate. The IRS sets 3 years as the general rule, 6 if you fail to report more than 25% of your income, and 7 for losses from bad debt or worthless securities. We keep 7 so you can defend yourself in any of those cases.
- Everything else, shorter windows: personal data that is no longer needed is purged on shorter timelines, automatically.
- When you close your account: we delete your personal data after a short period; tax records are kept until the retention window above is met.
- Your history, whenever you ask: from your panel you can download the signed export of your bookkeeping ledger at any time; your full dossier is available on the Manager plan. We recommend doing so before you close your account.
🚫 What we never do
- We don't sell your data or hand it to third parties for advertising.
- We don't share without a legal basis: we only hand information to an authority when the law requires it.
- We never file anything with the IRS without your approval: you review and sign off before every submission.
- We never use real client data in demos, examples or training material.
Have a specific question about your data, or want to exercise your right to deletion? Write to us from your dashboard or via contact and a person answers you, not an automated form.